ISO 10126-1-1991 PDF

Full title and description

ISO 10126-1:1991 — Banking — Procedures for message encipherment (wholesale) — Part 1: General principles. Defines terms and high-level procedures to provide confidentiality for wholesale financial messages by application‑level encipherment; includes normative Annex A and informative Annexes B–D.

Abstract

This part gives terms and definitions and specifies procedures to protect financial messages (entire messages or encipherment elements) exchanged through any communications architecture. It describes encipherment/decipherment methods, transparent transmission (filtering) considerations, order of processing and an approval procedure for encipherment algorithms; Annex A is integral and Annexes B–D are informative.

General information

• Status: Withdrawn.
• Publication date: 1991-10 (Edition 1, 1991).
• Publisher: International Organization for Standardization (ISO).
• ICS / categories: 35.240.40 — IT applications in banking.
• Edition / version: 1 (1991).
• Number of pages: 18 (approx., ISO catalogue entry).

Scope

Specifies procedures to protect wholesale financial messages by encipherment at application level — either whole messages or selected encipherment elements — so they can be transmitted safely across store‑and‑forward and multi‑network environments without being mistaken for protocol control data. The standard explicitly does not provide integrity protection (message authentication/replay protection) and references separate ISO standards for those functions.

Key topics and requirements

• Definitions and terminology for wholesale message encipherment.
• Procedures for encipherment and decipherment of entire messages and of encipherment elements.
• Techniques for transparent transmission (filtering) so enciphered data do not interfere with network control codes.
• Order of processing when combining encipherment with other message operations.
• Approval/review procedure for alternative encipherment algorithms (Annex A).
• Informative annexes with examples of filtering, expansion factors and encipherment examples (Annexes B–D).

Typical use and users

Intended users were banks, financial institutions, payment/settlement system operators, software and gateway vendors implementing wholesale message encryption, and standards/technical committees defining banking message security. Implementers would use the document to design application‑level encryption for wholesale financial message flows and to select/approve algorithms and filtering approaches.

Related standards

ISO 10126 consists of at least two parts: Part 1 (general principles) and Part 2 (DEA algorithm — single‑DEA/DES). The standard references other banking/security standards for message authentication and key management, e.g. ISO 8730 / ISO 8731 (message authentication) and ISO 8732 (key management). ISO 10126 was developed from ANSI X9.23 work.

Keywords

Banking, wholesale messaging, encipherment, encryption, DEA, DES, message security, filtering, application‑level encryption, key management, ISO 8732.

FAQ

Q: What is this standard?

A: ISO 10126-1:1991 is the International Standard titled "Banking — Procedures for message encipherment (wholesale) — Part 1: General principles", which sets out terms and procedures for providing confidentiality to wholesale financial messages via application‑level encipherment.

Q: What does it cover?

A: It covers definitions, methods for encipherment/decipherment of whole messages or message elements, filtering/transparent transmission techniques so encrypted data do not disrupt network control codes, processing order, and an approval procedure for encipherment algorithms; Annexes provide examples and guidance. It does not provide integrity/authentication — those are handled by other ISO banking standards.

Q: Who typically uses it?

A: Banks, clearing/settlement systems, financial message gateway and middleware vendors, and security architects who implement or audit wholesale message encryption schemes. Standards committees and national standards bodies also referenced it in banking security lists.

Q: Is it current or superseded?

A: ISO 10126-1:1991 is listed as Withdrawn in the ISO catalogue. While ISO does not always publish detailed public rationale, contemporary references note that the series depended on the DEA (single‑DES) algorithm (ISO 10126-2) and that reliance on single‑DEA/DES is now considered obsolete and insecure; that fact is commonly cited as a likely reason for withdrawal and migration to more modern algorithm and key‑management standards. The withdrawn status is shown in the ISO catalogue. (The note about DES being obsolete is an inference based on the standard's content and later cryptographic guidance.)

Q: Is it part of a series?

A: Yes — ISO 10126 includes at least Part 1 (general principles) and Part 2 (DEA algorithm). Part 2 specifies DEA (DES) as a suitable algorithm for implementing the procedures in Part 1.

Q: What are the key keywords?

A: Banking, encipherment, wholesale messages, encryption, DEA/DES, filtering, message confidentiality, key management, ISO 8732.