UAFX Part 84: Profiles - 6.6.5.2 UAFX Offline Security Policies

6.6.5.2.1 UAFX Offline Security Policy – Rsa-Sha256 Facet

Table 48 describes the details of the UAFX Offline Security Policy – Rsa-Sha256 Facet.

This security Facet defines a public-key cryptography security policy for Descriptors with average security needs.

Table 48 – UAFX Offline Security Policy – Rsa-Sha256 Facet

Group	Conformance Unit / Profile Title	Optional
UAFX OfflineEngineering	UAFX Offline Rsa-Sha256 Limits	False
Security	AsymmetricSignatureAlgorithm_RSA-PKCS15-SHA2-256	False
Security	CertificateKeyAlgorithm_RSA	False
UAFX OfflineEngineering	UAFX Offline CertificateSignatureAlgorithm_RSAPKCS15SHA2256	False

6.6.5.2.2 UAFX Offline Security Policy – Rsa-Sha384 Facet

Table 49 describes the details of the UAFX Offline Security Policy – Rsa-Sha384 Facet.

This security Facet defines a public-key cryptography security policy for Descriptors with high security needs.

Table 49 – UAFX Offline Security Policy – Rsa-Sha384 Facet

Group	Conformance Unit / Profile Title	Optional
UAFX OfflineEngineering	UAFX Offline Rsa-Sha384 Limits	False
UAFX OfflineEngineering	UAFX Offline AsymmetricSignatureAlgorithm_RSAPKCS15SHA2384	False
Security	CertificateKeyAlgorithm_RSA	False
UAFX OfflineEngineering	UAFX Offline CertificateSignatureAlgorithm_RSAPKCS15SHA2384	False

6.6.5.2.3 UAFX Offline Security Policy – Rsa-Sha512 Facet

Table 50 describes the details of the UAFX Offline Security Policy – Rsa-Sha512 Facet.

This security Facet defines a public-key cryptography security policy for Descriptors with very high security needs.

Table 50 – UAFX Offline Security Policy – Rsa-Sha512 Facet

Group	Conformance Unit / Profile Title	Optional
UAFX OfflineEngineering	UAFX Offline Rsa-Sha512Limits	False
UAFX OfflineEngineering	UAFX Offline AsymmetricSignatureAlgorithm_RSAPKCS15SHA2512	False
Security	CertificateKeyAlgorithm_RSA	False
UAFX OfflineEngineering	UAFX Offline CertificateSignatureAlgorithm_RSAPKCS15SHA2512	False

6.6.5.2.4 UAFX Offline Security Policy – ECC-nistP256 Facet

Table 51 describes the details of the UAFX Offline Security Policy – ECC-nistP256 Facet.

This security Facet defines an elliptic curve cryptography security policy for Descriptors with average security needs. NIST curves are widely implemented and offer better performance than RSA.

Table 51 – UAFX Offline Security Policy – ECC-nistP256 Facet

Group	Conformance Unit / Profile Title	Optional
UAFX OfflineEngineering	UAFX Offline ECCnistP256 Limits	False
UAFX OfflineEngineering	UAFX Offline AsymmetricSignatureAlgorithm_ECDSA-SHA2-256	False
UAFX OfflineEngineering	UAFX Offline CertificateKeyAlgorithm_ECC-nistP256	False
UAFX OfflineEngineering	UAFX Offline CertificateSignatureAlgorithm_ECDSASHA2256	False

6.6.5.2.5 UAFX Offline Security Policy – ECC-nistP384 Facet

Table 52 describes the details of the UAFX Offline Security Policy – ECC-nistP384 Facet.

This security Facet defines an elliptic curve cryptography security policy for Descriptors with high security needs. NIST curves are widely implemented and offer better performance than RSA.

Table 52 – UAFX Offline Security Policy – ECC-nistP384 Facet

Group	Conformance Unit / Profile Title	Optional
UAFX OfflineEngineering	UAFX Offline ECC-nistP384 Limits	False
UAFX OfflineEngineering	UAFX Offline AsymmetricSignatureAlgorithm_ECDSA-SHA2-384	False
UAFX OfflineEngineering	UAFX Offline CertificateKeyAlgorithm_ECC-nistP384	False
UAFX OfflineEngineering	UAFX Offline CertificateSignatureAlgorithm_ECDSA-SHA2-384	False

6.6.5.2.6 UAFX Offline Security Policy – ECC-nistP521 Facet

Table 53 describes the details of the UAFX Offline Security Policy – ECC-nistP521 Facet.

This security Facet defines an elliptic curve cryptography security policy for Descriptors with very high security needs. NIST curves are widely implemented and offer better performance than RSA.

Table 53 – UAFX Offline Security Policy – ECC-nistP521 Facet

Group	Conformance Unit / Profile Title	Optional
UAFX OfflineEngineering	UAFX Offline ECC-nistP521 Limits	False
UAFX OfflineEngineering	UAFX Offline AsymmetricSignatureAlgorithm_ECDSA-SHA2-512	False
UAFX OfflineEngineering	UAFX Offline CertificateKeyAlgorithm_ECC-nistP521	False
UAFX OfflineEngineering	UAFX Offline CertificateSignatureAlgorithm_ECDSA-SHA2-512	False