信息技术开放系统互连目录第11部分：安全操作协议规范

[中文适用范围]： 本推荐标准的范围是三重的。此推荐标准|国际标准提供了关于如何准备新的和旧的协议以进行加密算法迁移的指导，并定义了辅助加密算法用于迁移目的。 本推荐标准|国际标准规定了一个通用包装协议，该协议为其他协议提供认证、完整性和机密性（加密）保护。 此包装协议包括一个允许平滑迁移到更强加密算法的加密算法迁移路径，以适应不断发展的安全要求。这将使量子安全加密算法的迁移成为可能。 受保护的协议可以因此而不必考虑安全和加密算法。本推荐标准|国际标准还包括一些主要为支持公钥基础设施（PKI）的协议，这些协议将受到包装协议的保护。 其他规范，例如建议书或其他国际标准，也可能开发旨在通过包装协议进行保护的协议。 [外文原描述]： The scope of this Recommendation | International Standard is threefold. This Recommendation | International Standard provides guidance on how to prepare new and old protocols for cryptographic algorithm migration, and defines auxiliary cryptographic algorithms to be used for migration purposes. This Recommendation | International Standard specifies a general wrapper protocol that provides authentication, integrity and confidentiality (encryption) protection for other protocols. This wrapper protocol includes a migration path for cryptographic algorithms allowing for smooth migration to stronger cryptographic algorithms as such requirements evolve. This will allow migration to quantum-safe cryptographic algorithms. Protected protocols can then be developed without taking security and cryptographic algorithms into consideration. This Recommendation | International Standard also includes some protocols to be protected by the wrapper protocol primarily for support of public-key infrastructure (PKI). Other specifications, e.g., Recommendations or International Standards, may also develop protocols designed to be protected by the wrapper protocol.