ISO/IEC 9594-11:2025/DAM 1:2026(en)
ISO/IEC JTC 1/SC 6
Secretariat: KATS
Date: 2025-11-28
Amendment 1
Information technology – Open Systems Interconnection – The Directory: Protocol specifications for secure operations
Amendment 1
Miscellaneous enhancements
© ISO/IEC 2026
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISO's member body in the country of the requester.
ISO Copyright Office
CP 401 • CH-1214 Vernier, Geneva
Phone: + 41 22 749 01 11
Email: copyright@iso.org
Website: www.iso.org
Published in Switzerland.
CONTENTS Page
1) Annex A - Crypto Tools in ASN.1 1
2) Annex B - General cryptographic algorithms 1
3) Annex C - Wrapper protocol in ASN.1 1
4) Annex D - Protected protocol interface to the wrapper protocol 2
5) Annex E - Authorization and validation list management in ASN.1 2
6) Annex F - Certification authority subscription in ASN.1 3
7) Annex G - Trust broker in ASN.1 3
Information technology – Open Systems Interconnection – Protocol specifications for secure operations
Amendment 1
Miscellaneous enhancements
1) Annex A - Crypto Tools in ASN.1
Replace the import section of Annex A with:
CryptoTools {joint-iso-itu-t ds(5) module(1) cryptoTools(42) 10}
DEFINITIONS IMPLICIT TAGS ::=
BEGIN
-- EXPORTS All
IMPORTS
SupportedAltAuthenEncryptAlgorithms, SupportedAltHashAlgorithms,
SupportedAltIcvAlgorithms, SupportedAltKeyEstablishmentAlgos,
SupportedAltPublicKeyAlgorithms, SupportedAltSignatureAlgorithms,
SupportedAltSymmetricKeyAlgorithms, SupportedAuthenEncryptAlgorithms,
SupportedHashAlgorithms, SupportedIcvAlgorithms,
SupportedKeyEstablishmentAlgos, SupportedPublicKeyAlgorithms,
SupportedSignatureAlgorithms, SupportedSymmetricKeyAlgorithms
FROM SupportedInformationObjects
{joint-iso-itu-t ds(5) module(1) supportedInformationObjects(49) 10}
WITH SUCCESSORS
AlgoInvoke{}, ALGORITHM, AlgorithmIdentifier{}, AlgorithmWithInvoke{}
FROM AuthenticationFramework
{joint-iso-itu-t ds(5) module(1) authenticationFramework(7) 10}
WITH SUCCESSORS
id-algo-mca
FROM GenAlgo
{joint-iso-itu-t ds(5) module(1) genAlgo(48) 10} WITH SUCCESSORS ;
2) Annex B - General cryptographic algorithms
Replace the import section of Annex B with:
GenAlgo {joint-iso-itu-t ds(5) module(1) genAlgo(48) 10}
DEFINITIONS IMPLICIT TAGS ::=
BEGIN
-- EXPORTS All
IMPORTS
ALGORITHM
FROM AuthenticationFramework
{joint-iso-itu-t ds(5) module(1) authenticationFramework(7) 10}
WITH SUCCESSORS ;
3) Annex C - Wrapper protocol in ASN.1
Replace the import section of Annex C with:
4) Annex D - Protected protocol interface to the wrapper protocol
Replace the import section of Annex D with:
Wrapper {joint-iso-itu-t ds(5) module(1) wrapper(43) 10}
DEFINITIONS IMPLICIT TAGS ::=
BEGIN
-- EXPORTS All
IMPORTS
AlgoInvoke{}, ALGORITHM, AlgorithmIdentifier{}, AlgorithmWithInvoke{},
PkiPath
FROM AuthenticationFramework
{joint-iso-itu-t ds(5) module(1) authenticationFramework(7) 10}
WITH SUCCESSORS
-- from Rec. ITU-T X.509 | ISO/IEC 9594-8
AttributeCertificate
FROM AttributeCertificateDefinitions
{joint-iso-itu-t ds(5) module(1)
attributeCertificateDefinitions(32) 10} WITH SUCCESSORS
AUTHEN-ENCRYPT{}, choiceDataPhaseProtection,
choiceKeyEstablishmentAlgoInvoke, choiceSignatureAlgo,
ENCIPHERED{}, ICV-Invoke{}, multipleDataPhaseProtection,
multipleKeyEstablishmentAlgoInvoke, multipleSignaturesAlgo, Signed{},
SupportedAuthenEncryptAlgorithms, SupportedKeyEstablishmentAlgos,
SupportedSignatureAlgorithms, SupportedSymmetricKeyAlgorithms
FROM CryptoTools {joint-iso-itu-t ds(5) module(1) cryptoTools(42) 10}
WITH SUCCESSORS
-- from Rec. ITU-T X.510 | ISO/IEC 9594-11
SupportedProtSet
FROM ProtProtocols
{joint-iso-itu-t ds(5) module(1) protProtocols(47) 10}
WITH SUCCESSORS ;
5) Annex E - Authorization and validation list management in ASN.1
Replace the import section of Annex E with:
AVL-management {joint-iso-itu-t ds(5) module(1) avl-management(44) 10}
DEFINITIONS IMPLICIT TAGS ::=
BEGIN
-- EXPORTS All
IMPORTS
-- From Rec. ITU X.501 | ISO/IEC 9594-2
Attribute{}, SupportedAttributes
FROM UsefulDefinitions
{joint-iso-itu-t ds(5) module(1) usefulDefinitions(0) 10} WITH SUCCESSORS
-- From Rec. ITU X.509 | ISO/IEC 9594-8
AvlSerialNumber, Certificate, CertAVL
FROM AuthenticationFramework
{joint-iso-itu-t ds(5) module(1) authenticationFramework(7) 10}
WITH SUCCESSORS
-- From Rec. ITU X.510 | ISO/IEC 9594-11
Version
FROM Wrapper
{joint-iso-itu-t ds(5) module(1) wrapper(43) 10} WITH SUCCESSORS ;
6) Annex F - Certification authority subscription in ASN.1
Replace the import section of Annex F with:
CaSubscription {joint-iso-itu-t ds(5) module(1) caSubscription(45) 10}
DEFINITIONS IMPLICIT TAGS ::=
BEGIN
-- EXPORTS All
IMPORTS
-- From Rec. ITU X.501 | ISO/IEC 9594-2
Name
FROM UsefulDefinitions
{joint-iso-itu-t ds(5) module(1) usefulDefinitions(0) 10}
WITH SUCCESSORS
-- From Rec. ITU X.509 | ISO/IEC 9594-8
Certificate, CertificateSerialNumber
FROM AuthenticationFramework
{joint-iso-itu-t ds(5) module(1) authenticationFramework(7) 10}
WITH SUCCESSORS
CRLReason
FROM CertificateExtensions
{joint-iso-itu-t ds(5) module(1) certificateExtensions(26) 10}
WITH SUCCESSORS
-- from Rec. ITU-T X.510 | ISO/IEC 9594-11
Version
FROM Wrapper
{joint-iso-itu-t ds(5) module(1) wrapper(43) 10} WITH SUCCESSORS ;
7) Annex G - Trust broker in ASN.1
Replace the import section of Annex G with:
TrustBroker {joint-iso-itu-t ds(5) module(1) trustBroker(46) 10}
DEFINITIONS IMPLICIT TAGS ::=
BEGIN
-- EXPORTS All
IMPORTS
-- from Rec. ITU-T X.509 | ISO/IEC 9594-8
PKCertIdentifier
FROM AuthenticationFramework
{joint-iso-itu-t ds(5) module(1) authenticationFramework(7) 10}
WITH SUCCESSORS
Version
FROM Wrapper
{joint-iso-itu-t ds(5) module(1) wrapper(43) 10} WITH SUCCESSORS ;
