This page will soon be deactivated—explore our new, faster, mobile-friendly site, now centralized in MyWorkspace!
ITU's 160 anniversary

Connecting the world and beyond

  •  

ITU-T work programme

Home : ITU-T Home : ITU-T Work Programme : J.224     
  ITU-T A.5 justification information for referenced document CM-SP-SECv4.0-I04-220328 (2022) in draft J.224
1. Clear description of the referenced document:
Name: CM-SP-SECv4.0-I04-220328 (2022)
Title: DOCSIS 4.0 Security Specification
2. Status of approval:
Approved
3. Justification for the specific reference:
This is a normative reference in J.224
4. Current information, if any, about IPR issues:
https://www.cablelabs.com/innovations/patents
5. Other useful information describing the "Quality" of the document:
Widely deployed in a lot of DOCSIS 4.0 implementations under CableLabs certification program
6. The degree of stability or maturity of the document:
Published in August 2022, and very stable
7. Relationship with other existing or emerging documents:
None
8. Any explicit references within that referenced document should also be listed:
2.1 Normative References/
In order to claim compliance with this specification, it is necessary to conform to the following standards and other/
works as indicated, in addition to the other requirements of this specification. Intellectual property rights may be/
required to implement these references./
[C-DOCSIS] C-DOCSIS System Specification, CM-SP-CDOCSIS-I02-150305, March 5, 2015, Cable Television/
Laboratories, Inc./
[DOCSIS BPI+] Data-Over-Cable Service Interface Specifications, Baseline Privacy Plus Interface Specification, CM-SPBPI+-C01-081104, November 4, 2008, Cable Television Laboratories, Inc./
[DOCSIS CCAPOSSIv3.1]/
DOCSIS 3.1 CCAP Operations Support System Interface Specification, CM-SP-CCAP-OSSIv3.1-I15-/
190422, April 22, 2019, Cable Television Laboratories, Inc./
[DOCSIS CCAPOSSIv4.0]/
DOCSIS 4.0 CCAP Operations Support System Interface Specification, CM-SP-CCAP-OSSIv4.0-I01-/
190815, August 15, 2019, Cable Television Laboratories, Inc./
[DOCSIS CMOSSIv3.1]/
DOCSIS 3.1 Cable Modem Operations Support System Interface Specification, CM-SP-CM-OSSIv3.1-/
I15-190422, April 22, 2019, Cable Television Laboratories, Inc./
[DOCSIS CMOSSIv4.0]/
DOCSIS 4.0 Cable Modem Operations Support System Interface Specification, CM-SP-CM-OSSIv4.0-/
I01-190815, August 15, 2019, Cable Television Laboratories, Inc./
[DOCSIS/
MULPIv3.1]/
DOCSIS 3.1 MAC and Upper Layer Protocols Interface Specification, CM-SP-MULPIv3.1-I18-190422,/
April 22, 2019, Cable Television Laboratories, Inc./
[DOCSIS/
MULPIv4.0]/
DOCSIS 4.0 MAC and Upper Layer Protocols Interface Specification, CM-SP-MULPIv4.0-I01-190815,/
August 15, 2019, Cable Television Laboratories, Inc./
[DOCSIS RFIv2.0] DOCSIS 2.0 Radio Frequency Interface Specification, CM-SP-RFIv2.0-C02-090422, April 22, 2009,/
Cable Television Laboratories, Inc./
[DOCSIS SECv3.0] DOCSIS 3.0, Security Specification, CM-SP-SECv3.0-C01-171207, December 7, 2017, Cable Television/
Laboratories, Inc./
[DOCSIS SECv3.1] DOCSIS 3.1 Security Specification, CM-SP-SECv3.1-I07-170111, January 11, 2017, Cable Television/
Laboratories, Inc./
[FIPS 140-2] Federal Information Processing Standards Publication (FIPS PUB) 140-2, Security Requirements for/
Cryptographic Modules, June 2001./
[FIPS 180-4] Federal Information Processing Standards Publication (FIPS PUB) 180-2, Secure Hash Standard, May/
2014./
[FIPS 197] Federal Information Processing Standards Publication (FIPS PUB) 197, Advanced Encryption Standard,/
November 2001./
[FIPS 46-3] Federal Information Processing Standards Publication (FIPS PUB) 46-3, Data Encryption Standard,/
October 1999./
[IEEE 802.1X] IEEE 802.1X-2010, IEEE Standard for Local and metropolitan area networks – Port-Based Network/
Access Control, February 2010./
[ISO 8859-1] ISO/IEC 8859-1:1998, 8-bit single-byte coded graphic character sets -- Part 1: Latin alphabet No.1./
[MMH] S. Halevi and H. Krawczyk, MMH: Software Message Authentication in Gbit/sec Rates, Proceedings of/
the 4th Workshop on Fast Software Encryption, (1997) vol. 1267 Springer-Verlag, pp. 172-189./
[NIST-800-38A] NIST-800-38A, Recommendation for Block Cipher Modes of Operation, Methods and Techniques, Morris/
Dworkin, 2001 Edition./
[PKCS#7] RSA Laboratories, PKCS #7: Cryptographic Message Syntax Standard, An RSA Laboratories Technical/
Note, Version 1.5, Revised November 1, 1993./
Security Specification CM-SP-SECv4.0-I01-190815/
08/15/19 CableLabs® 15/
[PKT-SEC] PacketCable™ Security Specification, PKT-SP-SEC-C01-071129, November 29, 2007, Cable Television/
Laboratories, Inc./
[RFC 826] IETF RFC 826/STD0037, D.C. Plummer, Ethernet Address Resolution Protocol: Or converting network/
protocol addresses to 48.bit Ethernet address for transmission on Ethernet hardware, November 1, 1982./
[RFC 1350] IETF RFC 1350/STD0033, K. Sollins, The TFTP Protocol, Revision 2, July 1992./
[RFC 2104] IETF RFC 2104, HMAC: Keyed-Hashing for Message Authentication, H. Krawczyk et al., February 1997./
[RFC 2347] IETF RFC 2347, G. Malkin, A. Harkin; TFTP Option Extension, May 1998./
[RFC 2348] IETF RFC 2348, G. Malkin, A. Harkin; TFTP Blocksize Option, May 1998./
[RFC 2349] IETF RFC 2349, G. Malkin, A. Harkin; TFTP Timeout Interval and Transfer Size Options, May 1998./
[RFC 2616] IETF RFC 2616, R. Fielding, et al., Hypertext Transfer Protocol -- HTTP/1.1, June 1999/
[RFC 3279] IETF RFC 3279, W. Polk, et. al., Algorithms and Identifiers for the Internet X.509 Public Key/
Infrastructure Certificate and Certificate Revocation List (CRL) Profile, April 2002./
[RFC 3376] IETF RFC 3376 B. Cain, et al. Internet Group Management Protocol, Version 3, October 2002./
[RFC 4131] IETF RFC 4131, S. Green et al., Management Information Base for Data Over Cable Service Interface/
Specification (DOCSIS) Cable Modems and Cable Modem Termination Systems for Baseline Privacy/
Plus, September 2005./
[RFC 4253] IETF RFC 4253, T. Ylonen, C. Lonvick, The Secure Shell (SSH) Transport Protocol Layer, January 2006./
[RFC 4861] IETF RFC 4861 Neighbor Discovery for IP version 6 (IPv6). T. Narten, E. Nordmark, W. Simpson, H./
Soliman, September 2007/
[RFC 5216] IETF RFC 5216, D. Simon, B. Aboba, R.Hurst, The EAP-TLS Authentication Protocol, March 2008./
[RFC 5246] IETF RFC 5246, T. Dierks, E. Rescorla, The Transport Layer Security (TLS) Protocol Version 1.2, August/
2008./
[RFC 5280] IETF RFC 5280, D. Cooper, S. Santesson, S. Farrell, S. Boeyen, R. Housley, W. Polk, Internet X.509/
Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile, May 2008./
[RFC 5281] IETF RFC 5281, P. Funk, S. Blake-Wilson, Extensible Authentication Protocol Tunneled Transport Layer/
Security Authenticated Protocol Version 0 (EAP-TTLSv0), August 2008./
[RFC 5652] IETF RFC 5652, R. Housley, Cryptographic Message Syntax (CMS), September 2009/
[RFC 6960] IETF RFC 6960, X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP. S./
Santesson, M. Myers, R. Ankney, A. Malpani, S. Galperin, C. Adams, June 2013./
[RFC 6961] IETF RFC 6961, Y.Pettersen, The Transport Layer Security (TLS) Multiple Certificate Status Request/
Extension, June 2013./
[RSA1] RSA Laboratories, PKCS #1: RSA Encryption Standard. Version 1.5, RSA Security, Inc., Bedford, MA,/
November 1993./
[RSA3] RSA Laboratories, PKCS #1 v2.0: RSA Cryptography Standard, October 1, 1999./
[SCTE 52] ANSI/SCTE 52 2018, Data Encryption Standard - Cipher Block Chaining Packet Encryption./
[X.509] ITU-T Recommendation X.509 (10/12): Information Technology - Open Systems Interconnection - The/
Directory: Public key and attribute certificate frameworks./
[X.690] ITU-T Recommendation X.690 (11/08) | ISO/IEC 8825-1:2002, Information Technology - ASN.1 Encoding/
Rules: Specification of Basic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished/
Encoding Rules (DER)./
CM-SP-SECv4.0-I01-190815 Data-Over-Cable Service Interface Specifications/
16 CableLabs® 08/15/19/
2.2 Informative References/
This specification uses the following informative references./
[DOCSIS CMCIv3.0] Data-Over-Cable Service Interface Specifications Cable Modem to Customer Premise Equipment Interface/
Specification, CM-SP-CMCIv3.0-I03-170510, May 10, 2017, Cable Television Laboratories, Inc./
[ISO 3166] ISO 3166-1, Codes for the representation of names of countries and their subdivisions -- Part 1: Country/
codes./
[NIST SP800-63B] NIST Special Publication 800-63B, Digital Identity Guidelines Authentication and Lifecycle Management,/
National Institute of Standards and Technology, June 2017./
[NIST SP800-90A] NIST Special Publication 800-90A, Recommendation for Random Number Generation Using/
Deterministic Random Bit Generators, Revision 1, National Institute of Standards and Technology, June/
2015./
[RFC 2202] IETF RFC 2202, P. Cheng, R. Glenn, Test cases for HMAC-MD5 and HMAC-SHA-1, September 1997./
[RFC 3550] IETF RFC 3550/STD0064, H. Schulzrinne, S. Casner, R. Frederick, V. Jacobson, RTP: A Transport/
Protocol for Real-Time Applications, July 2003./
[RFC 4086] IETF RFC 4086, D. Eastlake, J. Schiller, S. Crocker, Randomness Requirements for Security, June/
2005./
[RSA2] RSA Laboratories, Some Examples of the PKCS Standards, RSA Data Security, Inc., Bedford, MA,/
November 1, 1993./
[SET Book 2] SET, Secure Electronic Transaction Specification Book 2: Programmer's Guide, Version 1.0, May 31,/
1997
9. Qualification of Cablelabs:
10. Other (for any supplementary information):
None
Note: This form is based on Recommendation ITU-T A.5