The National Stock Exchange (NSE) on July 30, 2024, issued a circular regarding the Encryption/Decryption of Interactive Messages.
Encryption of these messages on an end-to-end basis is necessary to enhance the security posture for interactive messages. Accordingly, a software solution-based approach (a combination of TLS 1.3 security protocol and AES-256 bits-based symmetric encryption) is being implemented to encrypt interactive message traffic between member applications and Exchange. The encryption of messages within the member environment towards their clients will need to be done by the respective members.
The following are the important instructions for implementation of the above:
• Exchange shall provide an interim coexistence phase for accepting both encrypted and non-encrypted message traffic, after which Exchange shall discontinue the non-encrypted message flow.
• Exchange shall notify the dates from when such coexistence phase shall come into effect through subsequent circulars. Members are requested to ensure readiness of their migration plan for Direct connection via NNF for handling the changes of Encryption interactive messages.
• Members connecting via NNF API:
o Members using via Direct connection via NNF API protocols shall be required to download a CA certificate for validation of Gateway Router server certificate from the extranet path.
o Direct connection user can use the above certificate to verify the Gateway Router server certificate after SSL connection with Gateway Router. It is an additional step to ensure that direct connection user is connected to authenticated Gateway Router.
All Members are requested to initiate the development at their end for the functionality being released.
[Circular No: 186 /2024]
