ISO/IEC JTC 1/SC 27 · stage 40.20 · DIS ballot
The entity authentication revision is in ballot. The 2009 text still governs.
Kit USD 799 one off | Watch USD 49 a month | 33 records free
ISO/IEC DIS 9798-5 is the draft fourth edition of the zero-knowledge entity authentication part. It replaces the 2009 edition, keeps the five mechanism families and revisits their requirements. ISO recorded stage 40.20, DIS ballot initiated for 12 weeks, on 17 September 2026. This record states what each clause asks today, what the revision will touch, and the evidence an auditor samples.
It binds nobody by itself. It applies to you when a contract, a scheme, a regulator or your own policy points at it. The free check tells you what it would mean if one does.
Read from the real record, not invented. Every page names its clause, its source and the edition it comes from, so you can check any line yourself.
The public record
40.20
DIS ballot initiated: 12 weeks
- Stage date
- 17 September 2026
- Ballot
- 17 Sep to 10 Dec 2026, 12 weeks
- Committee
- ISO/IEC JTC 1/SC 27
- ICS
- 35.030
- Planning date
- 16 September 2027
- Pages in the draft
- 62
- Replaces
- ISO/IEC 9798-5:2009, edition 3, 53 pages
The planning date is an outer planning estimate, not an ISO date. ISO has not published a close of voting or a publication date. The stage date is the fact that moves it.
01 · The public record
One fact, one estimate, and an honest boundary.
ISO recorded stage 40.20 on 17 September 2026: the DIS ballot is open for twelve weeks. That is the last public step. There is no close of voting, no approval date and no publication date in the record. The facts on this page come from the official ISO record for 89516 and its machine feed.
- 10.993 May 2024New project approved
done - 20.2022 May 2025Working draft study initiated
done - 20.9926 September 2025WD approved for registration as CD
done - 30.0026 September 2025Committee draft registered
done - 30.9913 July 2026CD approved for registration as DIS
done - 40.0017 July 2026DIS registered
done - 40.2017 September 2026DIS ballot initiated: 12 weeks
now - 40.60not recordedClose of voting
next - 50.00not recordedFinal text received or FDIS registered
next - 60.60not recordedInternational Standard published
next
What is public
- The designation, title, edition, stage, stage date, committee and ICS
- The abstract and the five mechanism families
- The 2009 edition's contents, foreword, introduction, terms and clauses 4 to 4.2
- The review history that led to the revision
What is not public
- The DIS text itself, which national bodies hold
- The clause-level changes in the fourth edition
- The close of voting and the publication date
- Any national adoption date
That boundary is the reason this site exists. The record states the 2009 obligation each clause carries, marks where the public text stops, and says what the revision will have to answer. When the published text lands, the record is rebuilt and the diff is what the watch sends.
What the revision has to settle, in plain terms
| Question | Why a CISO asks it | Where it is recorded |
|---|---|---|
| Which mechanism family may we use? | The estate may hold several, and the clause set decides the parameters and the tests. | Clause 1 |
| What changes in parameter choice? | A moved modulus size or challenge length is a re-parameterisation, not a re-key. | Annex C |
| What must the verifier reject? | A verifier is defined by its negative tests, and those are auditable. | 9.3 |
| What evidence do we keep? | The register, the parameter review and the test output are the file an auditor samples. | The record |
The free scope check
Six answers, computed in your browser against the recorded clauses. It returns a planning reading, a dated action list and a decision record you can keep. Nothing is sent.