6.2 Secure Transport Connection Profiles

An implementation may claim conformance to one or more Secure Transport Connection Profiles.

A Secure Transport Connection Profile includes the following information:

  1. Description of the protocol framework and negotiation mechanisms

  2. Description of the entity authentication an implementation shall support

  3. The identity of the entities being authenticated

  4. The mechanism by which entities are authenticated

  5. Any special considerations for audit log support

  6. Description of the encryption mechanism an implementation shall support

  7. The method of distributing session keys

  8. The encryption protocol and relevant parameters

  9. Description of the integrity check mechanism an implementation shall support

Secure Transport Connection Profiles are specified in Annex B.