BSL SEC Requirements

Rqmt ID	Title	Description	Rationale
BSL-SEC-1-0	Crypto Isolation	The BSL shall delegate all cryptographic functions to an external library accessibly only through the crypto interface.	All cryptographic functions, including random generation, is performed outside of the BSL proper. That external library will provide any mission-specific security compliance (e.g., FIPS-140).
BSL-SEC-2-0	Key Material Handling	The BSL shall delegate the handling and storage of all cryptographic key material to external libraries.	Beyond just cryptographic processing, all key material handling is performed by the external library. The BSL only handles references or identifiers for key material. The BSL does not, otherwise, handle or store cryptographic key material.