ICS35.240 CCSL70/84 团 体 标 准 通用操作系统商用密码子系统安全轮廓 Securityprofileforcommercialciphersubsystemofgeneralpurpose operatingsystem 2025-04-20发布 2025-04-20实施 中关村网络安全与信息化产业联盟发布T/ZISIA0101-2025 全国团体标准信息平台 全国团体标准信息平台 T/ZISIA0101-2025 I目 次 前言..............................................................................................................................................................IV 引言................................................................................................................................................................V 1.范围..........................................................................................................................................................6 2.规范性引用文件....................................................................................................................................6 3.术语和定义.............................................................................................................................................6 4.符号和缩略语.........................................................................................................................................9 5.概述.........................................................................................................................................................9 5.1安全威胁....................................................................9 5.1.1针对密码系统的安全威胁............................................9 5.1.2针对操作系统的安全威胁............................................9 5.2安全目的..........................................................................................................................................10 5.2.1概述...............................................................10 5.2.2算法及密钥安全....................................................10 5.2.3通信安全..........................................................10 5.2.4存储安全..........................................................10 5.2.5软件安全..........................................................10 5.3商密子系统边界.............................................................10 5.4假定.......................................................................11 5.5文件约定...................................................................11 6.安全功能要求......................................................................................................................................11 6.1密码资源.........................................................................................................................................11 6.2密码算法..........................................................................................................................................12 6.2.1加密算法..........................................................12 6.2.2数字签名算法......................................................12 6.2.3杂凑算法..........................................................12 6.2.4带密钥的杂凑算法..................................................12 6.2.5随机数生成........................................................12 6.3密码管理.........................................................................................................................................12 6.3.1密钥管理..........................................................12 6.3.2证书管理..........................................................12 6.4密码服务.........................................................................................................................................12 6.4.1密码接口..........................................................12 6.4.2用户身份鉴别......................................................13 全国团体标准信息平台 T/ZISIA0101-2025 II6.4.3存储数据加密......................................................13 6.4.4通信数据保护......................................................13 6.4.5应用软件包签名/验证..............................................13 6.4.6内核代码签名/验证.................................................13 6.4.7安全启动..........................................................13 6.4.8自启动..............................