The next requirement for the use of domestic encryption
Vladimir Putin signed a personal assignment to Prime Minister Dmitry Medvedev (and not the government, which would be logical) to provide "a set of measures necessary for the transfer of government to the use of Russian cryptographic algorithms and encryption tools"
Comments on this assignment have already appeared. Let's say here . As they say - about the benefits of reading primary sources.
So in the comments, it is noted that “the government, or rather the prime minister personally, was entrusted with doing one thing - to gradually transfer federal executive authorities, state authorities of the constituent entities of the Russian Federation, state extra-budgetary funds, local governments to domestic cryptography with the interaction between yourself, with organizations and citizens. " In fact, the instruction says something completely different and much more interesting:
Ie personally, the Prime Minister is charged with providing preparation for the transition, and not the transition itself. On the timing of the transition out of the question. Nuance however.
')
Another nuance is the absence in the instruction of the requirement to use certified software. But according to the Federal Law-149 listed organizations must use certified funds. It would be logical to instruct to find out the reasons for non-compliance with the law and punish the guilty ...
Another turn in the use of certified funds? It would be desirable, but unlikely.
Further, the president indicates to provide:
Very interesting item. Will it be possible to access Government services only with the help of Russian encryption tools? Interestingly, the president points to provide access, not software development. It is assumed that such tools for all platforms are there? Again, it is not stated that the funds should be certified. An interesting nuance.
By the way a legitimate way to apply for the provision of such software. But only after the new year.
It is interesting here that, in addition to cryptographic security tools, it is required to prevent the use of tools such as man-in-the-middle and similar. Judging by the wording, the burden will fall on the providers that provide data transfer.
The order must be completed by December 1, 2017.
Comments on this assignment have already appeared. Let's say here . As they say - about the benefits of reading primary sources.
So in the comments, it is noted that “the government, or rather the prime minister personally, was entrusted with doing one thing - to gradually transfer federal executive authorities, state authorities of the constituent entities of the Russian Federation, state extra-budgetary funds, local governments to domestic cryptography with the interaction between yourself, with organizations and citizens. " In fact, the instruction says something completely different and much more interesting:
Ensure the development and implementation of a set of measures necessary for the gradual transition of federal executive authorities, state authorities of the constituent entities of the Russian Federation, state extra-budgetary funds, local governments to the use of Russian cryptographic algorithms and encryption tools in the framework of the execution of powers for electronic interaction with each other, with citizens and organizations.
Ie personally, the Prime Minister is charged with providing preparation for the transition, and not the transition itself. On the timing of the transition out of the question. Nuance however.
')
Another nuance is the absence in the instruction of the requirement to use certified software. But according to the Federal Law-149 listed organizations must use certified funds. It would be logical to instruct to find out the reasons for non-compliance with the law and punish the guilty ...
Another turn in the use of certified funds? It would be desirable, but unlikely.
Further, the president indicates to provide:
1) granting gratuitous access to citizens of the Russian Federation to the use of Russian encryption tools for electronic interaction with government bodies and local self-government bodies;
Very interesting item. Will it be possible to access Government services only with the help of Russian encryption tools? Interestingly, the president points to provide access, not software development. It is assumed that such tools for all platforms are there? Again, it is not stated that the funds should be certified. An interesting nuance.
By the way a legitimate way to apply for the provision of such software. But only after the new year.
2) legislative measures to exclude the use of equipment that allows third parties to interfere with the operation of cryptographic protocols when transmitting data using a public communication network, except for cases when the bodies conducting operational investigative activities take measures to remove information from technical communication channels in accordance with requirements of the legislation of the Russian Federation.
It is interesting here that, in addition to cryptographic security tools, it is required to prevent the use of tools such as man-in-the-middle and similar. Judging by the wording, the burden will fall on the providers that provide data transfer.
The order must be completed by December 1, 2017.
Source: https://habr.com/ru/post/305922/
All Articles