ETSI EN 303 645 Provision 5.5-3: Cryptographic algorithms and primitives replaceable

Cryptographic algorithms and primitives can be replaced (crypto-agility); changing them is treated as a security-relevant change, and a non-updateable device's intended life should not exceed the recommended lifetime of its algorithms and key sizes. Status in Table B.1: R (recommendation, a should provision).

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in 5.5 Secure communication – ETSI EN 303 645

Provision 5.5-1 Best practice cryptography for secure communication
Provision 5.5-2 Reviewed or evaluated implementations for network and security functions
Provision 5.5-4 Network access to device functions only after authentication
Provision 5.5-5 Security-relevant configuration over the network only after authentication
Provision 5.5-6 Critical security parameters encrypted in transit
Provision 5.5-7 Confidentiality of critical parameters over remotely accessible interfaces
Provision 5.5-8 Secure lifecycle management of critical security parameters

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All ETSI EN 303 645 controls