BSI TR-02102-1 provides comprehensive recommendations for cryptographic mechanisms and key lengths to ensure long-term data security, with a particular focus on maintaining a security level of at least 120 bits. It outlines the technical requirements for symmetric and asymmetric encryption, hash functions, and digital signatures, while increasingly prioritizing “cryptographic agility” and hybrid approaches to prepare for quantum computing threats. This guideline is fundamentally similar to ISO/IEC 18033, which specifies international standards for encryption algorithms, and it mirrors the cryptographic selection and transition guidance found in NIST SP 800-175B and NIST SP 800-57. By providing clear migration paths for legacy algorithms and endorsing post-quantum candidates like ML-KEM and FrodoKEM, BSI TR-02102-1 ensures that organizations can implement mathematical protections that align with both European regulations and global cryptographic benchmarks.
Home / Function (NIST CSF 2.0) / PR - Protect / DS - Data Security / Cryptography
BSI TR-02102-1: Cryptographic Mechanisms
This document focuses on:Encryption