IEC 62351 - Power Systems Communication Security

Part 9: cyber security key management – IEC 62351 - Power Systems Communication Security

IEC 62351 - Power Systems Communication Security 9:5.6: Part 9, 5.6: key agreement (Diffie-Hellman, key derivation functions, group key management)

Session and group keys are established by Diffie-Hellman agreement, derived through key derivation functions, and for multicast protocols distributed through group key management.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in Part 9: cyber security key management – IEC 62351 - Power Systems Communication Security

9:4 Part 9, clause 4: security concepts applicable to power systems (confidentiality, integrity, authentication, non-repudiation; cryptographic algorithms and concepts)
9:5.2 Part 9, 5.2 to 5.5: key management lifecycle, key usages, key management system security policy and design principles for power system operations
9:5.7 Part 9, 5.7: public-key and privilege management infrastructures (registration and certification authorities, public-key certificates, attribute certificates, extensions)
9:5.8 Part 9, 5.8: certificate management (process, initial creation, onboarding, enrolment, CSR processing, enrolment protocols, trust anchor management)
9:5.9 Part 9, 5.9 to 5.11: revocation (CRL, OCSP, SCVP, recovery), trust via self-signed certificates, authorization and validation lists
9:6 Part 9, clause 6: normative key management requirements (security events, required cryptographic material, random number generation, object identifiers)
9:7 Part 9, clause 7: asymmetric key management (certificate components, generation and installation, key protection, certificate policy, trust anchor establishment and update, entity configuration, certificate verification)
9:8 Part 9, clause 8: symmetric key management (group keys for GOOSE, SV and PTP through GDOI; session keys for IEC 60870-5 and DNP3)

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All IEC 62351 - Power Systems Communication Security controls