Cipher
What is Cipher?
An algorithm for performing encryption or decryption of data. Ciphers transform plaintext into ciphertext (encryption) and back again (decryption) using a key.
Terms that appear alongside cipher
Each of these is named in at least one of the same controls as cipher. The number is how many controls name both.
- tls 7 shared controls
- owasp 3 shared controls
- forward secrecy 3 shared controls
- encryption 3 shared controls
- certificate pinning 2 shared controls
- key rotation 2 shared controls
- ipsec 2 shared controls
- policy 2 shared controls
Frameworks that govern cipher
What the standards actually require on cipher
Requirements naming cipher across 6 standards, quoted from the control text.
For TLSv1.2 the profile names the cipher suites conforming implementations support (AES-GCM and ECDHE-based suites per RFC 5288, 5289 and 8422 among them) and those disallowed (export, NULL authentication, RC4, DES, 3DES, MD5-based and anonymous suites), repla...
iec-62351-power-systems-communication-security::3:7.2 · Part 3, 7.2 and 7.3: TLSv1.2 supported and disallowed cipher suites →The ACS, DS and 3DS Server neither offer nor support any cipher suite the EMVCo specification marks as not supported. The assessor examines configuration standards and TLS configurations and observes TLS traffic.
pci-3ds-core-security-standard::P2-5.3.2 · P2-5.3.2 No EMVCo-unsupported cipher suites offered →The cipher suites and protocols in use must be documented, then checked at least every 12 months, with the review covering at minimum: a current inventory of every cipher suite and protocol in use, stating its purpose and where it is used;
12.3.3 · 12.3.3 Cryptographic cipher suite and protocol inventory reviewed annually →NSS owners must consult NSA before using any cryptography that CNSA 1.0, CNSA 2.0 and NSA's published guidance do not specify. The FAQ names areas with no generally approved NSS solution: private information retrieval, private set intersection, identity-based...
nsa-guidance-for-transition-to-quantum-resistant-cryptography::Q-NOVEL · Q-NOVEL Consult NSA before using cryptography CNSA does not specify; no lightweight ciphers →RRC and UP security over air interface including ciphering and integrity protection
TS33.501-6.6 · AS Security →The Advanced Encryption Standard (FIPS 197) is the symmetric block cipher for information protection, used with 256-bit keys to protect information up to TOP SECRET: CNSSP 15 Annex B lists it among the general purpose algorithms, as the 2022 advisory did.
commercial-national-security-algorithm-suite-cnsa-2-0::ALG-AES · ALG-AES AES-256 for symmetric encryption at all classification levels →Questions people ask about cipher
What is Cipher?
Why is Cipher important for compliance?
Which compliance frameworks address Cipher?
Where can I learn more about Cipher?
See how Cipher applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.