nhsconnect / gpconnect

GP Connect API specification
https://digital.nhs.uk/services/gp-connect/gp-connect-specifications-for-developers
Apache License 2.0
33 stars 26 forks source link

Approved Cryptographic Algorithms Good Practice Guidelines #332

Closed Mhitchins-zz closed 6 years ago

Mhitchins-zz commented 6 years ago

At the bottom of development_api_security_guidance.md there's an External policy documents section with a reference to "Approved Cryptographic Algorithms Good Practice Guidelines | NHS Digital | v4.0 | 13/07/2016".

Should I link to this document? If so, where is it (I couldn't find it) and is v4.0 the latest version?

jonnyry commented 6 years ago

Yes please - though I couldn’t find it either!

I will drop an email to our security colleagues.

jonnyry commented 6 years ago

Sent email to Matt Wyatt to attempt to locate the documents.

jonnyry commented 6 years ago

https://nhsconnect.github.io/gpconnect/development_api_security_guidance.html#external-policy-documents

jonnyry commented 6 years ago

WES is here: https://digital.nhs.uk/spine/technical-information-warranted-environment-specification

jonnyry commented 6 years ago

ACA is here: http://webarchive.nationalarchives.gov.uk/20161021125701/http:/systems.digital.nhs.uk/infogov/security/infrasec/gpg/acs.pdf