Year 2010 Issues on Cryptographic Algorithms

Masashi Une and Masayuki Kanda
Additional contact information
Masashi Une: Institute for Monetary and Economic Studies, Bank of Japan (currently, Research Center for Information Security, National Institute of Advanced Industrial Science and Technology) (E-mail: masashi-une@aist.go.jp)
Masayuki Kanda: NTT Information Sharing Platform Laboratories (E-mail: kanda.masayuki@lab.ntt.co.jp)

Monetary and Economic Studies, 2007, vol. 25, issue 1, 129-164

Abstract: In the financial sector, cryptographic algorithms are used as fundamental techniques for assuring confidentiality and integrity of data used in financial transactions and for authenticating entities involved in the transactions. Currently, the most widely used algorithms appear to be two-key triple DES and RC4 for symmetric ciphers, RSA with a 1024-bit key for an asymmetric cipher and a digital signature, and SHA-1 for a hash function according to international standards and guidelines related to the financial transactions. However, according to academic papers and reports regarding the security evaluation for such algorithms, it is difficult to ensure enough security by using the algorithms for a long time period, such as 10 or 15 years, due to advances in cryptanalysis techniques, improvement of computing power, and so on. To enhance the transition to more secure ones, National Institute of Standards and Technology (NIST) of the United States describes in various guidelines that NIST will no longer approve two-key triple DES, RSA with a 1024-bit key, and SHA-1 as the algorithms suitable for IT systems of the U.S. Federal Government after 2010. It is an important issue how to advance the transition of the algorithms in the financial sector. This paper refers to issues regarding the transition as Year 2010 issues in cryptographic algorithms. To successfully complete the transition by 2010, the deadline set by NIST, it is necessary for financial institutions to begin discussing the issues at the earliest possible date. This paper summarizes security evaluation results of the current algorithms, and describes Year 2010 issues, their impact on the financial industry, and the transition plan announced by NIST. This paper also shows several points to be discussed when dealing with Year 2010 issues.

Keywords: Cryptographic algorithm; Symmetric cipher; Asymmetric cipher; Security; Year 2010 issues; Hash function (search for similar items in EconPapers)
JEL-codes: L86 L96 Z00 (search for similar items in EconPapers)
Date: 2007
References: View complete reference list from CitEc
Citations:

Downloads: (external link)
https://www.imes.boj.or.jp/research/papers/english/me25-1-6.pdf (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:ime:imemes:v:25:y:2007:i:1:p:129-164

Access Statistics for this article

More articles in Monetary and Economic Studies from Institute for Monetary and Economic Studies, Bank of Japan Contact information at EDIRC.
Bibliographic data for series maintained by Kinken ().