BaselineWatch
Desk

3.5 Non-repudiation

NIST platform security: roots of trust, firmware and secure enclaves SP 800-57 Part 1 Rev. 4
All changes in this version
first version loaded 3 Security Services part of 3

Title

Non-repudiation

Control

In key management, non-repudiation is a term associated with digital signature keys and digital certificates that bind the name of the certificate subject to a public key. When non-repudiation is indicated for a digital signature key, it means that the signatures created by that key support not only the usual integrity and source authentication services of digital signatures, but also may (depending upon the context of the signature) indicate commitment by the certificate subject, in the same sense that a handwritten signature on a document may indicate commitment to a contract. A real determination of non-repudiation is a legal decision with many aspects to be considered. Cryptographic mechanisms can only be used as one element in this decision (i.e., a digital signature can only be used to support a non-repudiation decision).