SFS A: Cryptographic and Blockchain Infrastructure
Assess how cryptographic services protect data and establish integrity or authenticity, including blockchain-based components when they are in scope.
Scope and boundaries
This set covers cryptographic choices and configuration, certificate handling, digital signatures, encryption services, and the lifecycle of their keys. Blockchain-specific questions apply only where a declared component uses that technology and should identify its trust assumptions and verification evidence. Questions must distinguish a configured mechanism from evidence that it satisfies the stated condition. Administrative custody of master keys belongs to SFS 1, data-handling rules to SFS 4, and device trust mechanisms to SFS B.
The sixteen questions
This set has sixteen SF positions, 0–F. Each position is one question, not another set. All questions below are unreviewed placeholders; no assessment result has been recorded.
| SF | Question page | Authoring record | Status |
|---|---|---|---|
0 | SF 0: placeholder | 00A0 | Draft; result unset |
1 | SF 1: placeholder | 00A1 | Draft; result unset |
2 | SF 2: placeholder | 00A2 | Draft; result unset |
3 | SF 3: placeholder | 00A3 | Draft; result unset |
4 | SF 4: placeholder | 00A4 | Draft; result unset |
5 | SF 5: placeholder | 00A5 | Draft; result unset |
6 | SF 6: placeholder | 00A6 | Draft; result unset |
7 | SF 7: placeholder | 00A7 | Draft; result unset |
8 | SF 8: placeholder | 00A8 | Draft; result unset |
9 | SF 9: placeholder | 00A9 | Draft; result unset |
A | SF A: placeholder | 00AA | Draft; result unset |
B | SF B: placeholder | 00AB | Draft; result unset |
C | SF C: placeholder | 00AC | Draft; result unset |
D | SF D: placeholder | 00AD | Draft; result unset |
E | SF E: placeholder | 00AE | Draft; result unset |
F | SF F: placeholder | 00AF | Draft; result unset |
From questions to a profile
Only reviewed, accepted 0/1 assessments can populate the sixteen-bit set profile. SF 0 is the most significant bit and SF F is the least significant bit. The completed result uses four hexadecimal digits, including leading zeros. There is no completed profile for this draft set.
Read assessment and validation, then encoding. A set profile preserves individual answers; it is not a summed security score.