Non-repudiation
A service that is used to provide assurance of the integrity and origin of data in such a way that the integrity and origin can be verified and validated by a third party as having originated from a specific entity in possession of the private key (i.e., the signatory).
See FIPS 186-5 under Non-repudiation for more information.
Assurance that the sender of information is provided with proof of delivery and the recipient is provided with proof of the sender’s identity, so neither can later deny having processed the information.
See the following for more information:
NIST SP 800-59 under Non-repudiation from CNSSI 4009
NIST SP 800-18 Rev. 1 under Non-repudiation from CNSSI 4009
NIST SP 800-60 Vol. 1 Rev. 1 under Non-repudiation from CNSSI 4009 – Adapted
NIST SP 800-60 Vol. 2 Rev. 1 under Non-repudiation from CNSSI 4009 – Adapted
Protection against an individual falsely denying having performed a particular action. Provides the capability to determine whether a given individual took a particular action such as creating information, sending a message, approving information, and receiving a message.
See the following for more information:
CNSSI 4009-2015
NIST SP 800-53 Rev. 5
A service using a digital signature that is used to support a determination of whether a message was actually signed by a given entity.
See the following for more information:
NIST SP 800-175B Rev. 1 under Non-repudiation
NIST SP 800-57 Part 2 Rev.1 under Non-repudiationNIST SP 800-57 Part 1 Rev. 5 under Non-repudiation
In a general information security context, assurance that the sender of information is provided with proof of delivery, and the recipient is provided with proof of the sender’s identity, so neither can later deny having process the information .
See NIST SP 800-57 Part 2 Rev.1 under Non-repudiation for more information.
The inability to deny responsibility for performing a specific act.
See NISTIR 4734 under Non-repudiation for more information.