T/ZISIA 0104-2026 Security profile for operating system file encryption

Scope

This standard clarifies the working mechanism, system boundaries, security threats, and security objectives of the operating system file encryption subsystem. It proposes security requirements for the file encryption subsystem in file encryption, access, and other business processing processes, as well as the full life cycle management of keys. It also standardizes the use of passwords in the operating system file encryption subsystem. The standard can be used to guide the design, development, testing, and evaluation of the operating system file encryption subsystem, and can also provide a reference for the implementation of other file encryption products. The main content of this standard includes the preface, Chapters 1 to 9, and Appendix A. Chapters 1 to 4 are respectively about scope, normative references, terms and definitions, and symbols and abbreviations. Chapter 5 introduces the file encryption subsystem, describing the encryption and decryption mechanisms of the file encryption subsystem, the file authenticity authentication mechanism, the file access authentication mechanism, the key management mechanism, the system boundaries, usage scenarios, and supported environments. Chapter 6 describes security threats, including threats such as the leakage of key materials, key space exhaustion attacks, the leakage of plaintext residuals, unauthorized data access, authentication factor verification flaws, and management rights access, and introduces specific threat methods. Chapter 7 describes security objectives, addressing various security threats and describing specific objectives such as the protection of key materials, DEK security, memory data clearing, data protection, and the security of authentication factor verification. Chapters 8 and 9 describe file conventions and security requirements, providing specific security requirements for key generation, key use, key storage, key destruction, key protection, key transmission, user data protection, identi

Development Information

Related Standards