Ein Service des Bundesministeriums der Justiz und für Verbraucherschutz sowie des Bundesamts für Justiz ‒ www.gesetze-im-internet.de Nr. Referenz ERCA policy Anforderung Referenz D-MSA-Policy key distribution request (KDR) protocol described in Annex D. Geschwindigkeitsgeber (Km, Km$_{WC}$, Km$_{VU}$) [r6.20]  8. § 5.3.8 The MSA shall recognise the ERCA public key in the distribution format described in Annex B. § 6.2 Schlüsselpaar der D-CA (MS.SK, MS.PK) [r6.15]  9. § 5.3.9 The MSA shall use the physical media for key and certificate transport described in Annex C. § 6.2 Schlüsselpaar der D-CA (MS.SK, MS.PK) [r 6.16] 10. § 5.3.10 The MSA shall ensure that the Key Identifier (KID) and modulus (n) of keys submitted to the ERCA for certification are unique within the domain of the MSCA. § 8.4 Zertifikatinhalte und -formate [r8.9] 11. § 5.3.11 The MSA shall ensure that expired keys are not used for any purpose. The Member State private key shall be either: destroyed so that the private key cannot be recovered or retained in a manner preventing its use. § 6.2 Schlüsselpaar der D-CA (MS.SK, MS.PK) [r6.7] 12. § 5.3.12 The MSA shall ensure that an equipment RSA key is generated, transported, and inserted into the equipment, in such a way as to preserve its confidentiality and integrity. For this purpose, the MSA shall • ensure that any relevant prescription mandated by security certification of the equipment is met; • ensure that both generation and insertion (if not onboard) takes place in a physically secured environment; • unless key generation was covered by the security certification of the equipment, ensure that specified and appropriate cryptographic key generation algorithms are used. The last two of these requirements on generation shall be met by generating equipment keys within a device which either: a) is certified to meet the requirements identified in FIPS 140-2 (or FIPS 140-1) level 3 or higher [9]; § 7.1 Allgemeine Anforderungen, Protokollierung [r7.1] § 7.2 Schlüsselerzeugung [r7.5] - Seite 34 von 40 -