SFS A: Cryptographic and Blockchain Infrastructure
Assess how cryptographic services protect data and establish integrity or authenticity, including blockchain-based components when they are in scope.
Scope and boundaries
This set covers cryptographic choices and configuration, certificate handling, digital signatures, encryption services, and the lifecycle of their keys. Blockchain-specific questions apply only where a declared component uses that technology and should identify its trust assumptions and verification evidence. Questions must distinguish a configured mechanism from evidence that it satisfies the stated condition. Administrative custody of master keys belongs to SFS 1, data-handling rules to SFS 4, and device trust mechanisms to SFS B.
The sixteen questions
Each SF position is one question. Both positions run from 0 to F.
| SF | Question page | Authoring record |
|---|---|---|
| 0 | SF 0 | 00A0 |
| 1 | SF 1 | 00A1 |
| 2 | SF 2 | 00A2 |
| 3 | SF 3 | 00A3 |
| 4 | SF 4 | 00A4 |
| 5 | SF 5 | 00A5 |
| 6 | SF 6 | 00A6 |
| 7 | SF 7 | 00A7 |
| 8 | SF 8 | 00A8 |
| 9 | SF 9 | 00A9 |
| A | SF A | 00AA |
| B | SF B | 00AB |
| C | SF C | 00AC |
| D | SF D | 00AD |
| E | SF E | 00AE |
| F | SF F | 00AF |
From questions to a profile
Only reviewed, accepted 0/1 assessments can populate the sixteen-bit set profile. SF 0 is the most significant bit and SF F the least significant bit. The completed result uses four hexadecimal digits, including leading zeros. A catalog definition does not establish a completed assessment profile.
Read assessment and validation, then encoding. A set profile preserves individual answers; it is not a summed security score.