The National Stock Exchange (NSE) on July 07, 2023, issued a circular regarding the Encryption/Decryption of Interactive Messages.
To enhance the security posture for interactive messages, encryption of these messages on an end-to-end basis is necessary. Accordingly, a software solution-based approach (a combination of TLS 1.3 security protocol and AES256 bits-based symmetric encryption) is being implemented for the encryption of interactive message traffic between member applications and Exchange. While encryption of messages within member environments towards their clients will need to be done by respective members.
The following important instructions for implementation of the above are as stated:
• An interim coexistence phase for accepting both encrypted and non-encrypted message traffic shall be provided by the Exchange, after which Exchange shall discontinue the non-encrypted message flow.
• Members using via Direct connection via NNF API protocols shall be required to download a CA certificate for validation of Gateway Router server certificate from the extranet path /comtftp/comtcommon/Encryption_CA_Certificate
• Direct connection users can use the above certificate to verify the Gateway Router server certificate after SSL connection with Gateway Router. It is an additional step to ensure that the direct connection user is connected to authenticated Gateway Router.
[Circular No. 29/2023]
