SwissSign: recommendation on review of key pair generation implementation

The audit report for SwissSign recommended improvements in the regular review of its key pair generation implementation in accordance with NIST SP 800-89. Although the audit did not identify any non-compliance, it highlighted the need for a documented monitoring process for updates to the specification. SwissSign has since established this monitoring process and confirmed its commitment to ongoing compliance with relevant standards. The case is now resolved with all action items completed.

1. 2025-09-23 Preliminary incident report submitted.
2. 2025-10-06 Full incident report submitted.
3. 2026-04-27 Monitoring process for NIST SP 800-89 changes completed.
4. 2026-05-04 Final call for comments before closure.