SC-08(01) Cryptographic Protection

Self-assessed, not audited

We hold no certification or authorization. The status below is our own assessment, kept as OSCAL in Git; it is not an auditor's finding. "Planned" means not built.

Control statement

Implement cryptographic mechanisms to [Selection (one or more): prevent unauthorized disclosure of information; detect changes to information] during transmission.

Guidance

Encryption protects information from unauthorized disclosure and modification during transmission. Cryptographic mechanisms that protect the confidentiality and integrity of information during transmission include TLS and IPSec. Cryptographic mechanisms used to protect information integrity include cryptographic hash functions that have applications in digital signatures, checksums, and message authentication codes.

Implementation

Talos node

Cryptographic protection in transit (WireGuard ChaCha20-Poly1305, TLS 1.3). Partial: neither is a FIPS 140-validated module as deployed.

Status: partial.

Evidence:

• https://github.com/zeta-reticuli-inc/talos-multicloud/blob/main/talos/patches/common-kubespan.yaml

All controls. Source: OSCAL component definition reti-platform and NIST SP 800-53 Rev 5 (public domain).