scope:

This part of ISO/IEC 11770 defines symmetric key based key establishment mechanisms for multiple entities with a Key Distribution Centre (KDC). This part of ISO/IEC 11770 describes the required con-tent of messages which carry keying material or are necessary to set up the conditions under which the keying material can be established. It does not indicate other information which can be contained in the messages or specify other messages such as error messages. The explicit format of messages is not within the scope of this part of ISO/IEC 11770. This part of ISO/IEC 11770 does not specify the means to be used to establish initial secret keys; that is, all the mechanisms specified in this part of ISO/IEC 11770 require an entity to share the secret key with another entity (the KDC). For general guidance on the key lifecycle see ISO/IEC 11770-1. This part of ISO/IEC 11770 does not explicitly address the issue of interdomain key management. This part of ISO/IEC 11770 also does not define the implementation of key establishment mechanisms; products complying with this part of ISO/IEC 11770 might be compatible. Additionally, asymmetric key based key establishment mechanisms or key establishment mechanisms without KDC will eventually appear in this part of ISO/IEC 11770, but not yet.