Requirements

Symmetric Encryption

Symmetric Encryption and Decryption		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall provide functionality for symmetric encryption and decryption.
feat_req__sec_crypt__sym_symmetric_encrypt		Feature Requirement

AES-CBC Support		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall support the AES-CBC symmetric encryption algorithm.
feat_req__sec_crypt__sym_symm_algo_aes_cbc		Feature Requirement

AES-GCM Support		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall support the AES-GCM symmetric encryption algorithm.
feat_req__sec_crypt__sym_sym_algo_aes_gcm		Feature Requirement

AES-CCM Support		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall support the AES-CCM symmetric encryption algorithm.
feat_req__sec_crypt__sym_sym_algo_aes_ccm		Feature Requirement

ChaCha20-Poly1305 Support		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall support the ChaCha20-Poly1305 symmetric encryption algorithm.
feat_req__sec_crypt__sym_algo_chacha20		Feature Requirement

Asymmetric Encryption

Asymmetric Encryption and Decryption		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall provide functionality for asymmetric encryption and decryption.
feat_req__sec_crypt__asym_encryption		Feature Requirement

ECDH Support		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall support the ECDH algorithm for key exchange.
feat_req__sec_crypt__asym_algo_ecdh		Feature Requirement

Digital Signatures

Signature Creation		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall provide functionality to create digital signatures.
feat_req__sec_crypt__sig_creation		Feature Requirement

Signature Verification		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall provide functionality to verify digital signatures.
feat_req__sec_crypt__sig_verification		Feature Requirement

ECDSA Support		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall support the ECDSA algorithm for digital signatures.
feat_req__sec_crypt__sig_algo_ecdsa		Feature Requirement

Message Authentication Code (MAC)

Message Authentication Code		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall provide functionality for Message Authentication Codes (MAC) to ensure message integrity and authenticity.
feat_req__sec_crypt__mac		Feature Requirement

Hashing

Hashing Functionality		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall provide hashing functionality.
feat_req__sec_crypt__hashing		Feature Requirement

SHA-2 Support		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall support the SHA-2 hashing algorithm.
feat_req__sec_crypt__hashing_algo_sha2		Feature Requirement

SHA-3 Support		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall support the SHA-3 hashing algorithm.
feat_req__sec_crypt__hashing_algo_sha3		Feature Requirement

Key Derivation Functions (KDF)

Key Derivation		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall provide Key Derivation Functions (KDFs) to derive one or more secret keys from a master key or password.
feat_req__sec_crypt__kdf		Feature Requirement

Random Number Generation

Entropy Source		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall provide a source of entropy for random number generation.
feat_req__sec_crypt__rng		Feature Requirement

ChaCha20Rng Support		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall use the ChaCha20Rng algorithm for random number generation.
feat_req__sec_crypt__rng_algo_chacha20rng		Feature Requirement

Certificate Management

Certificate Management		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall provide functionality to manage a set of signed and verified (trusted) certificates.
feat_req__sec_crypt__cert_management		Feature Requirement

Key Management

Secure Key Generation		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall support the secure generation of key material.
feat_req__sec_crypt__key_generation		Feature Requirement

Secure Key Import		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall support the secure import of key material.
feat_req__sec_crypt__key_import		Feature Requirement

Secure Key Storage		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall support the secure storage of key material.
feat_req__sec_crypt__key_storage		Feature Requirement

Secure Key Deletion		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall support the secure deletion of key material.
feat_req__sec_crypt__key_deletion		Feature Requirement

API to allow selection of different algorithms		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The API of the security component shall allow a selection of the available algorithms based on their unique name.
feat_req__sec_crypt__flexible_api		Feature Requirement

Non-Functional Requirements

Performance benchmark tooling		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component shall contain a set of extendable benchmark tests to derive KPIs from running all it’s cryptographic operations on different systems.
feat_req__sec_crypt__performance_tooling		Feature Requirement

Standardized Algorithm Naming		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component shall use a uniform and unambiguous naming scheme for cryptographic algorithms.
feat_req__sec_crypt__algo_naming		Feature Requirement

No Key Material Exposure		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The API of the security component shall not reveal key material to its users.
feat_req__sec_crypt__no_key_exposure		Feature Requirement

Side-Channel Attack Mitigation		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component shall be designed to mitigate side-channel and timing attacks.
feat_req__sec_crypt__side_channel_mitigation		Feature Requirement

API Lifecycle Management		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component API shall provide clear mechanisms for initialization, context management (request, reuse, release), and de-initialization of cryptographic resources.
feat_req__sec_crypt__api_lifecycle		Feature Requirement

Structured Error Handling		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component shall provide a structured and consistent mechanism for error reporting and logging.
feat_req__sec_crypt__error_handling		Feature Requirement

Security Concept		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
A security concept shall be created for the security component, including security goals, plausible attacks, critical failures, and countermeasures.
feat_req__sec_crypt__security_concept		Feature Requirement

Crypto Algorithm Update Strategy		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component shall allow the updating of its cryptographic algorithms.
feat_req__sec_crypt__algo_updates		Feature Requirement

Reverse Engineering Protection		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component shall withstand reverse engineering of its secrets.
feat_req__sec_crypt__reverse_eng_protection		Feature Requirement

Initial Production Key Handling		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component shall consider the production scenario where initial production keys are brought into the system.
feat_req__sec_crypt__production_keys		Feature Requirement

Post-Quantum Readiness		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component shall be designed to be ready for post-quantum cryptography.
feat_req__sec_crypt__pqc_readiness		Feature Requirement

Hardware Acceleration Support		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component shall be able to rely on hardware acceleration for cryptographic operations.
feat_req__sec_crypt__hw_acceleration		Feature Requirement

Software Fallback		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
A software-only solution for cryptographic operations shall be available as a fallback.
feat_req__sec_crypt__sw_fallback		Feature Requirement

Trusted Time Source		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component shall have access to a trusted real-world wall clock.
feat_req__sec_crypt__trusted_time		Feature Requirement

OS-Level Protection		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component shall use system-level means (e.g., co-processor, HSM, TEE) to protect its memory and CPU from applications and the normal operating system.
feat_req__sec_crypt__os_protection		Feature Requirement

Access Control		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component shall support roles and capability rights management to enforce access control to cryptographic functions and key material.
feat_req__sec_crypt__access_control		Feature Requirement

Intrusion Detection System (IDS) Integration		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component shall provide a mechanism to report potential security anomalies or threats to an Intrusion Detection System (IDS).
feat_req__sec_crypt__ids_integration		Feature Requirement

Denial-of-Service (DoS) Mitigation		status: valid security: YES safety: QM
reqtype: Non-Functional satisfies: stkh_req__dependability__security_features
The security component shall incorporate measures to mitigate the risk of Denial-of-Service (DoS) attacks that could be caused by malicious messages creating exceptional computational load.
feat_req__sec_crypt__dos_mitigation		Feature Requirement

Secure Communication Protocols

TLS Support		status: valid security: YES safety: QM
reqtype: Functional satisfies: stkh_req__dependability__security_features
The security component shall support the Transport Layer Security (TLS) 1.3 protocol for secure communication over Ethernet.
feat_req__sec_crypt__tls_support		Feature Requirement