Glossary

A system comprising security-enforcing functions tailored to mitigate the specific security risks of accessing or transferring information between security domains.

A system capable of implementing comprehensive data flow security policies with a high level of trust between two or more differing security domains.

A solution, capability or control that applies across multiple domains rather than being specific to one.

A type of digital currency that uses encryption techniques to create and regulate units of online funds and is not controlled by a bank.

An algorithm used to perform cryptographic functions, such as encryption, integrity, authentication, digital signatures or key establishment.

An application designed to perform cryptographic functions.

A generic term for commercial cryptographic equipment and High Assurance Cryptographic Equipment.

An algorithm (the hash function) which takes as input a string of any length (the message) and generates a fixed length string (the message digest or fingerprint) as output. The algorithm is designed to make it computationally infeasible to find any input which maps to a given digest, or to find two different messages that map to the same digest.

The set of hardware, software and firmware that implements approved cryptographic functions (including key generation) that are contained within the cryptographic boundary of the module.

An agreed standard for secure communication between two or more entities to provide one or more security properties, such as confidentiality, integrity, authentication or non-repudiation.