MP129 Allowing the use of CNSA variant for ECDSA

Proposer David Rollason
Lead Analyst SEC Change
Date raised 12/05/2020
StageImplemented
Implementation date 3 November 2022
Latest update The referral window for Parties to refer the Change Board's decision to approve MP129 to the Panel has now closed, with no referrals received. MP129 was implemented in the November 2022 SEC Release.

What is the issue?

The Data Services Provider (DSP) interpreted Smart Energy Code (SEC) Schedule 8 ‘GB Companion Specification’ (GBCS) as mandating the GBCS variant of the Elliptic Curve Digital Signature Algorithm (ECDSA) for all Device Critical Command signing operations, rather than the more common Commercial National Security Algorithm (CNSA) Suite standard.

The Department for Business, Energy and Industrial Strategy (BEIS) advised that the DSP could have used the CNSA Suite standard and remained compliant. The Smart Metering Key Infrastructure (SMKI) Policy Management Authority (PMA) agreed that the GBCS wording lacked clarity and would need to be updated to explicitly permit the use of CNSA Suite by Remote Parties.

What is the solution?

The Proposed Solution will modify the relevant sections of the GBCS so that it clearly shows that the CNSA variant for Critical Command signing is permitted for use for Parties. The CNSA variant will be permitted for use along with the ECDSA, but it will not replace it.

Who is impacted?

Large Suppliers
Small Suppliers
Network Parties
DCC

What SEC documents are affected?

Schedule 8 'GB Companion Specification'
Schedule 11 ‘Technical Specification Applicability Tables’

Timeline

12 May 2020
Draft Proposal raised
19 Jun 2020
Converted to Modification Proposal
02 Sep 2020
Working Group meeting
19 Apr 2021
Discussed at Business Requirements Workshop
09 Jul 2021
to
25 Aug 2021
DCC Preliminary Assessment
04 Nov 2021
Modification discussed with TABASC
10 Nov 2021
Modification discussed with SMKI PMA

Modification documents

MP129 Conclusions Report
27/09/2022
MP129 Modification Report Consultation responses
13/05/2022
MP129 Working Group meeting summary - April 2022
21/04/2022
MP129 Modification Report Consultation
19/04/2022
MP129 Refinement Consultation
14/02/2022
MP129 Business Requirements v0.2
14/02/2022
MP129 Legal Text v1.0
11/01/2022
MP129 December 2021 Working Group Meeting summary
13/12/2021
MP129 DCC Preliminary Assessment response
22/09/2021
MP129 July 2021 Working Group Meeting summary
16/07/2021
MP129 Modification Report v1.0
14/02/2021
MP129 September 2020 Working Group Meeting summary
09/09/2020
No files
No files
No files
No files
No files

If you believe there is a problem with this modification, please let us know HERE.