ISO 10126-2-1991 PDF

Full title and description

ISO 10126-2:1991 — Banking — Procedures for message encipherment (wholesale) — Part 2: DEA algorithm. This short technical specification describes the use of the Data Encryption Algorithm (DEA, i.e., DES/ANSI X3.92) as a method to implement the message-encipherment procedures defined in ISO 10126-1 for wholesale banking communications.

Abstract

ISO 10126-2:1991 states that the DEA (specified in ANSI X3.92) may be used to implement the general message-encipherment principles of ISO 10126-1, and that keys should be managed in accordance with ISO 8732. The document is very short and focuses on identifying DEA as an appropriate algorithm for the ISO 10126-1 procedures.

General information

• Status: Withdrawn / cancelled.
• Publication date: July 1991 (Edition 1, 1991-07).
• Publisher: International Organization for Standardization (ISO).
• ICS / categories: 35.240.40 — IT applications in banking (financial services security / wholesale banking messaging).
• Edition / version: Edition 1 (1991).
• Number of pages: 3 pages.

(Metadata above drawn from the ISO catalog entry for ISO 10126-2:1991.)

Scope

Defines the recommended cipher algorithm for implementing ISO 10126-1 message-encipherment procedures in wholesale banking environments: the Data Encryption Algorithm (DEA) as specified in ANSI X3.92. It does not provide a full algorithm specification (it references ANSI X3.92) and refers key-management practice to ISO 8732; the document’s remit is to link the general principles (ISO 10126-1) with the choice of DEA for practical deployment.

Key topics and requirements

• Recommendation to use the DEA (DES / ANSI X3.92) for message encipherment in wholesale banking applications.
• Reference to ANSI X3.92 as the specification source for the DEA algorithm.
• Key management and lifecycle responsibilities referenced to ISO 8732 (i.e., keys must be managed according to the cited key-management standard).
• Applicability limited to message-level confidentiality in wholesale banking architectures (integration with ISO 10126-1 procedures).
• Implicit security considerations tied to DEA/DES strengths and limitations (historical context: single-DEA/DES later became classed as obsolete for many uses).

Typical use and users

Intended for standards users, implementers and architects in wholesale banking and financial messaging who needed a normative reference to the DEA algorithm when implementing the ISO 10126-1 message-encipherment procedures. Typical readers included banking IT/security professionals, payment-system implementers, and national standards bodies preparing national adoptions.

Related standards

Key related documents include ISO 10126-1 (General principles for banking message encipherment), ANSI X3.92 (DEA / DES algorithm specification), ISO 8732 (key management reference cited by ISO 10126-2), and later/parallel financial messaging standards and key-management standards that supersede or replace aspects of the ISO 10126 series in modern practice. The ISO catalog lists ISO 10126-1 as the companion part to 10126-2.

Keywords

DEA, DES, ANSI X3.92, banking, message encipherment, wholesale banking, key management, ISO 8732, withdrawn standard.

FAQ

Q: What is this standard?

A: ISO 10126-2:1991 is the part 2 companion to ISO 10126-1; it identifies the Data Encryption Algorithm (DEA, the ANSI X3.92 / DES algorithm) as an appropriate cipher for implementing the ISO 10126-1 message-encipherment procedures in wholesale banking.

Q: What does it cover?

A: It covers the algorithm selection recommendation (DEA) and points to normative references for the algorithm (ANSI X3.92) and key management (ISO 8732). The document itself is very short (3 pages) and does not reprint the DEA algorithm text.

Q: Who typically uses it?

A: Historically, banking IT/security staff, payment-network implementers, and standards adopters who were implementing ISO 10126-1 procedures for wholesale financial messaging. In practice, use has declined because the standard is withdrawn and DEA/DES is no longer recommended for new systems.

Q: Is it current or superseded?

A: ISO 10126-2:1991 is listed as Withdrawn in the ISO catalog. The withdrawal reflects the obsolescence of single-DEA/DES for modern security needs and the evolution of banking and cryptographic standards; DES/DEA has been withdrawn from many official uses (for example by NIST) and stronger algorithms (e.g., 3DES historically, and now AES and other modern algorithms and newer financial messaging standards) are recommended instead.

Q: Is it part of a series?

A: Yes — it is Part 2 of the ISO 10126 series, companion to ISO 10126-1:1991 (General principles). Both parts are cataloged by ISO; both parts are listed as withdrawn.

Q: What are the key keywords?

A: DEA, DES, ANSI X3.92, banking, message encipherment, wholesale, key management, ISO 8732, withdrawn.