Title
SCIP X.509 Profile
Description
The X.509 standard is used in cryptography to define the format of public key certificates, which are used in many Internet protocols. One example is the use in Transport Layer Security (TLS) / Secure Sockets Layer (SSL), which is the basis for HTTPS, the secure protocol for browsing the web. Public key certificates are also used in offline applications, like electronic signatures. An X.509 certificate contains a public key and an identity (a hostname, or an organization, or an individual), and is either signed by a certificate authority or self-signed. When a certificate is signed by a trusted certificate authority, or validated by other means, someone holding that certificate can rely on the public key it contains to establish secure communications with another party, or validate documents digitally signed by the corresponding private key. Besides the format for certificates themselves, X.509 specifies certificate revocation lists as a means to distribute information about certificates that are no longer valid, and a certification path validation algorithm, which allows for certificates to be signed by intermediate Certificate Authority (CA) certificates, which are in turn signed by other certificates, eventually reaching a trust anchor. Note SCIP is depending on the FIPS 186-2 Digital Signature Standard. This standard is superseded by FIPS 186-4, which is the applicable standard in the Service Instructions for Digital Certificates. FIPS 186-2 is only allowed within the confinement of SCIP-based secure voice solutions on the mission network.

Reference document

Org
FMN
Pubnum
Date
2021-10-22
Version
Title
FMN Spiral 4 Specification

Taxonomy

Standards

Obligation: CONDITIONAL, Lifecycle: CURRENT

When X.509 is applied for the Secure Communications Interoperability Protocol (SCIP), the following standards need to be followed.

Guidance

Status

URI

History

Flag Date RFC Version
added 2022-12-23 14-059 15
UUID
edb1fa24-1ae4-4d6c-802a-3f801e9caa26

Utilization

This profile is used by the following profiles: