Mind the Gap: Navigating the Gray Areas of 19790:2025 (C12a)
The latest version of ISO/IEC 19790, Security Requirements for Cryptographic Modules, introduces a cleaner, updated set of requirements for cryptographic modules. However, due to the general nature of the standard, some requirements are written at a high level, leaving further elaboration to validation authorities. This talk examines areas where details are lacking and explores the need for more specific guidance to facilitate straightforward compliance and testing.