NSE issued a notification regarding the Encryption/Decryption of Interactive Messages

Nov 21, 2023 | by TeamLease RegTech Legal Research Team

Free Legal updates for the week 00


Secretarial ComplianceThe National Stock Exchange (NSE) on November 20, 2023, issued a notification regarding the Encryption/Decryption of Interactive Messages

The following has been stated namely: -

• It states that to enhance the security posture for interactive messages, encryption of these messages on an end-to-end basis is necessary.

• It states that a software solution-based approach (a combination of TLS 1.3 security protocol and AES-256 bits-based symmetric encryption) is being implemented to encrypt interactive message traffic between member applications and Exchange. 

• It states that encryption of messages within member environments towards their clients will need to be done by respective members.

The Important instructions have been stated as follows: -

(i) An interim coexistence phase for accepting both encrypted and non-encrypted message traffic shall be provided by the Exchange, after which the Exchange shall discontinue the non-encrypted message flow.

(ii) Details of the coexistence and migration plan for Neat Adapter / NEAT and Direct connection via NNF have been attached to the Table.

(iii) Members using Direct connection via NNF API protocols shall be required to download a CA certificate for validation of the Gateway Router server certificate from the extranet path /slbftp/slbcommon/Encryption_CA_Certificate. The CA certificate shall be available for download from December 01, 2023, at 18:00 hours onwards. 

• For further details of implementation, members may refer to the latest NNF API document (Version 2.6) detailing the encryption protocol is available on the Exchange website under path: https://nsearchives.nseindia.com/web/sites/default/files/inlinefiles/Proto_SLBM_NNF_PROTOCOL_2.6.pdf 

• For members connecting via the NEAT Adapter (NA) and NEAT application, please note that new versions shall be released with relevant certificates pre-installed within the applications for encrypted flow. NA shall perform the verification of the Gateway Router server certificate after a successful SSL connection with the Gateway Router

 

[Circular No.NSE/SLBS/59439]


Bookmark

Related Updates



Alternate Text

Get updates on the go on RegUpdate Mobile App.

NEW  ·  AI ASSISTANT