ISO/IEC JTC 1/SC 27 · ICS 35.030 · Amendment to a published standard
The tweakable block cipher amendment, read from the record.
ISO/IEC 18033-7:2022/DAmd 1 is a draft amendment to the standard that defines five tweakable block ciphers. This page records what is public, what is not, and what a CISO, an ISMS manager or a certifying consultant should do before the expected publication date.
Free record and check. Kit USD 799 once. Watch USD 49 a month.
Read from the real rules, not invented. Every answer points to the clause it came from. The amendment body is not public, so the record marks the gap instead of filling it.
- Designation
- ISO/IEC 18033-7:2022/DAmd 1Draft
- Status
- Under development
- Stage
- 40.60 Close of votingLive record
- Record read
- 20 October 2026
- Pages
- 8, edition 1
- Text read
- Base sample, 11 of 18 pages
- Publication
- 15 September 2027Our estimate
The path, as ISO records it
- 40.60Close of voting
The record today - 40.92Report circulated
- 50.00Approval
- 60.00Under publication
- 60.60Published
Estimated 15 Sep 2027
A typical path from close of voting to publication. The committee can change it. ISO states no date for this amendment; the last step is our estimate.
What is known, what is not, and what to do
Known
The designation, the committee, the edition, the eight pages and the stage 40.60 record. The base standard is published: five algorithms, a 128-bit key floor, a public tweak, a data bound on Skinny-64/192 and a key separation rule.
Not known
Any clause of the amendment. The record has no abstract, no date and no list of changes. Whether it adds an algorithm, an object identifier or a requirement cannot be stated from the public record.
What to do
Find out whether the standard appears in your inventory or in a claim you have already made. If it does, review the claim. If it does not, record the reasoned no-action and set a review date.
Most buyers will record a reasoned no-action. The value is in being able to show the question was asked, the answer was checked against the record, and someone owns the review.
The free check writes that record for you. The kit turns it into a register with owners, evidence and dates. Photograph by RDNE Stock project, Pexels, credit in the footer only.
The document, clause by clause
The base standard has 18 pages. Its ISO public preview covers clauses 1 to 6.3 and the contents list; the rest is titled but not in the public preview. Each page states which of the two it is, so you never read a description of text we do not have as if it were the text.
| Code | Title | Text |
|---|---|---|
| 1 | Scope | Read in full |
| 2 | Normative references | Read in full |
| 3 | Terms and definitions | Read in full |
| 4 | Symbols | Read in full |
| 5 | Requirements on the usage of tweakable block ciphers | Read in full |
| 6 | Deoxys-TBC | Read in full |
| 6.1 | Deoxys-TBC versions | Read in full |
| 6.2 | Deoxys-TBC encryption | Read in full |
| 6.3 | Deoxys-TBC decryption | Read in full |
| 6.4 | Deoxys-TBC tweakey schedule | Title only |
| 7 | Skinny | Title only |
| 7.1 | Skinny versions | Title only |
| 7.2 | Skinny encryption | Title only |
| 7.3 | Skinny decryption | Title only |
| 7.4 | Skinny tweakey schedule | Title only |
| A | Annex A, Numerical examples | Title only |
| A.1 | Deoxys-TBC-256 example | Title only |
| A.2 | Deoxys-TBC-384 example | Title only |
| A.3 | Skinny-64/192 example | Title only |
| A.4 | Skinny-128/256 example | Title only |
| A.5 | Skinny-128/384 example | Title only |
| B | Annex B, Object identifiers | Title only |
The usage clause is where the duty lives
Clause 5 is the one part of the public text that places requirements on whoever uses the algorithms. It is short enough to read in a minute and specific enough to test.
128 bits minimum
However the key and tweak divide the tweakey, the secret part is at least 128 bits. The number in the algorithm name is the tweakey length.
Tweak is public
The tweak is not secret by default. A use case can add stricter conditions, and then those conditions apply too.
Skinny-64/192 has a bound
The small-block version is limited to schemes whose security argument holds below 2^64 data blocks. Ask for the volume and the bound.
Free check, paid register
Free
Six questions, a scope band, the reason, the dated actions and a plain-text decision record you can paste into the ISMS. No account.
Revision kit, USD 799 once
A 46-row obligation register, an evidence sheet with owners and retention, a dated plan, 8 supplier questions and a decision record, as PDF, CSV and XLSX.
Change watch, USD 49 a month
An email when the stage, the stage date, the page count, the record hash or a source page changes. It does not send the ISO text, which is not public.
Questions buyers ask
Is ISO/IEC 18033-7:2022/DAmd 1 published?
No. The ISO record shows stage 40.60, Close of voting, under development, edition 1, eight pages. Publication is a later stage.
Is the publication date 15 September 2027?
That is our estimate, not an ISO date. We derived it by adding 330 days to the record date of 20 October 2026. The ISO record states no date.
Does the amendment impose new duties on an ISMS?
Not directly. The base standard s clause 5 places duties on anyone who uses the algorithms. The ISMS duty comes from ISO/IEC 27001 Annex A 8.24, which asks for rules on cryptography and key management.
What are the five algorithms?
Deoxys-TBC-256, Deoxys-TBC-384, Skinny-64/192, Skinny-128/256 and Skinny-128/384, with block lengths of 128 or 64 bits and tweakey lengths of 192, 256 or 384 bits.
What is the 128-bit rule?
Whichever way the key and tweak divide the tweakey, the key itself must be at least 128 bits. The number in the algorithm name is the tweakey length, not the key length.
What does the kit contain?
A 48-row obligation register, an evidence sheet with owners and retention, a dated plan from 270 days before the estimate to 30 days after, 18 supplier questions, a decision record and a reissue trigger list, as PDF, CSV and XLSX.
The rules this is built from
This record is built from the published ISO/IEC 18033-7:2022 sample and the live ISO catalogue entries for the base standard and its amendment. 23 units are recorded: 9 read in full and 14 titled with the body not in the public preview. The amendment body is not public and is not stated.