标准摘要
[中文适用范围]： 本文件规定了n位块密码的应用模式（例如传输或存储期间的数据保护），所定义的模式仅提供数据机密性保护。数据完整性的保护不在本文件范围内。此外，大多数模式不对消息长度信息的机密性提供保护。注意1：使用块密码保护数据完整性的方法见ISO/IEC 9797-1。注意2：同时保护数据的机密性和完整性方法见ISO/IEC 19772。本文件规定了操作模式，并对参数值的选择提出了建议。注意3：本文件中规定的操作模式已分配对象标识符，符合ISO/IEC 9834的要求，分配的对象标识符列表见附录A。在使用对象标识符的应用中，应优先采用附录A中为相关模式指定的对象标识符。注意4：附录B包含有关每种模式的属性和重要安全指南的意见。 [外文原描述]： ISO/IEC 10116:2017 data during transmission or in storage). The defined modes only provide protection of data confidentiality. Protection of data integrity is not within the scope of this document. Also, most modes do not protect the confidentiality of message length information. NOTE 1 Methods for protecting the integrity of data using a block cipher are provided in ISO/IEC 9797-1. NOTE 2 Methods for simultaneously protecting the confidentiality and integrity of data are provided in ISO/IEC 19772. ISO/IEC 10116:2017 specifies the modes of operation and gives recommendations for choosing values of parameters (as appropriate). NOTE 3 The modes of operation specified in this document have been assigned object identifiers in accordance with ISO/IEC 9834. The list of assigned object identifiers is given in Annex A. In applications in which object identifiers are used, the object identifiers specified in Annex A are to be used in preference to any other object identifiers that can exist for the mode concerned. NOTE 4 Annex B contains comments on the properties of each mode and important security guidance.
英文名称Information technology - Security techniques - Modes of operation for an n-bit block cipher