Answers

Five questions, answered from the record

Each answer opens with the short answer, then the clause or record it comes from, then what it means for a buyer. They are written to be quoted, with the source on the page.

• What is ISO/IEC 18033-7:2022/DAmd 1?
  It is a draft amendment to the standard for tweakable block ciphers. ISO records it at stage 40.60, close of voting, eight pages, with no publication date. The amendment body is not public, so its changes cannot yet be stated.
• When will the ISO 18033-7 amendment be published?
  ISO has not announced a date. Our estimate is 15 September 2027, 330 days from the record date, derived from stage 40.60 and the usual interval to publication. It is an estimate, not an ISO date, and the record says so.
• Does the ISO 18033-7 amendment apply to my ISMS?
  It applies directly only if you use one of the five algorithms or cite the standard in a claim. Otherwise it is a monitoring item under the cryptography control in ISO/IEC 27001 Annex A 8.24, not a certification change.
• What evidence should I keep for ISO 18033-7?
  Six artefacts: the inventory row, the key and tweak lengths, the tweak policy, the known-answer test, the supplier declaration and the dated decision record. Each has an owner and a retention line in the kit.
• What changed in ISO/IEC 18033-7 Amendment 1?
  Not public yet. ISO records the amendment at stage 40.60 with no abstract, so no clause change can be stated. This page will state the changes from the published text, not from a draft or a rumour.

The shortest answers

Question	Answer
Is the amendment published?	No. Stage 40.60, Close of voting.
Is there a date?	Not from ISO. 15 September 2027 is our estimate.
Does it apply to my ISMS?	Directly only if you use one of the five algorithms or cite the standard.
What evidence do I keep?	Six artefacts, each with an owner and a retention line.
What changed?	Not public. The body is not stated.