BSL CIN Requirements

Rqmt ID	Title	Description	Rationale	Verification
BSL-CIN-1-0	Key Material Use	The BSL crypto interface shall identify private key material indirectly.	The BSL avoids handling private key materials so that it does not disrupt any security qualifications of the crypto provider. Key material may include symmetric keys, private asymmetric keys, and associated material.	Test
BSL-CIN-1-2	Certificate Access	The BSL crypto interface shall retrieve certificates.	Some security contexts will need access to known public key material or to have the ability to provide new public key material for cryptographic functions.	Test
BSL-CIN-1-3	Certificate Storage	The BSL crypto interface shall store certificates.	Some security contexts will need access to known public key material or to have the ability to provide new public key material for cryptographic functions.	Test
BSL-CIN-2-0	Key Usage	The BSL crypto interface shall update statistics associated with keys.	Statistics may include the number of times the key was used in an operation by the BSL, and the number of bytes processed by that key.	Test
BSL-CIN-3-0	Cryptographic Functions	The BSL crypto interface shall process all cryptographic primitives (such as symmetric and asymmetric cipher operations, key agreement and key derivation, and random number generation).	The BSL avoids crypto processing so that it does not disrupt any security qualifications of the crypto provider.	Test