48 / 112
48
Bureau of Standards, Metrology and lnspection
安全生命週
期 (Security
lifetime)
資訊分類
(Information
classification)
1. 機密資
訊 (Classified
information)
2. 個人資料
(Personal data)
對稱密鑰加
密
(Symmetric
key
algorithms)
FCC
(e.g.DSA,D-H)
IFC
(e.g.RSA)
ECC
(e.g.ECDSA)
數位簽章
與雜湊應
用 (Digital
Signatures
and hash only
applications)
由 HMAC 密鑰導
出函數所產生的隨
機數 (HMAC Key
derivation functions
Random number
generation)
安全生命週
期 (Security
lifetime)
THROUGH
2010
(>= 80 bits
of security)
RESTRICTED
BASIC/MEDIUM
2TDEA
3TDEA
AES-128
AES-192
AES-256
Minimum:L=1024
N=160
Minimum:
K=1024
Minimum:
f=160
SHA-224
SHA-256
SHA-384
SHA-512
SHA-1 SHA-224
SHA-256 SHA-384
SHA-512
THROUGH
2010
(>= 80 bits
of security)
THROUGH
2030
>= 112 bits
of security
CONFIDENTIAL
HIGH
3TDEA
AES-128
AES-192
AES-256
Minimum: L=2048
N=224160
Minimum:
K=2048
Minimum:
f=224
SHA-224
SHA-256
SHA-384
SHA-512
SHA-1 SHA-224
SHA-256 SHA-384
SHA-512
THROUGH
2030
>= 112 bits
of security
BEYOND
2030
>= 128 bits
of security
SECRET
HIGH
AES-128
AES-192
AES-256
Minimum: L=3072
N=256
Minimum:
K=3072
Minimum:
f=256
SHA-256
SHA-384
SHA-512
SHA-1 SHA-224
SHA-256 SHA-384
SHA-512
BEYOND
2030
>= 128 bits
of security
BEYOND
2030
>= 192 bits
of security
SECRET/TOP
SECRET
AES-192
Minimum:
L=7680
N=384
Minimum:
K=7680
Minimum:
f=384
SHA-384
SHA-512
SHA-224
SHA-256
SHA-384
SHA-512
BEYOND
2030
>= 192 bits
of security
BEYOND
2030
>= 256 bits
of security
TOP SECRET
HIGH
AES-256
Minimum:
L=15360
N=512
Minimum:
K=15360
Minimum:
f=512 *
(*f=384 is
recommended
for
performance
reasons)
SHA-512
SHA-256
SHA-384
SHA-512
BEYOND
2030
>= 256 bits
of security
資料來源：ETSI(2009) Lawful Interception (LI); Security framework in Lawful Interception and Retained Data environment Table D.7 , Page 43, ETSI
TR 102 661 V1.2.1, 2009-11。
表 3.2 資訊安全強度彙整