Internet Draft Vladimir Popov, CRYPTO-PRO
Igor Kurepkin, CRYPTO-PRO
Expires August 15, September 30, 2004 Serguei Leontiev, CRYPTO-PRO
Intended Category: Informational February 15, March 31, 2004
Additional cryptographic algorithms for use with GOST 28147-89,
GOST R 34.10-94, GOST R 34.10-2001, and GOST R 34.11-94 algorithms.
<draft-popov-cryptopro-cpalgs-00.txt>
<draft-popov-cryptopro-cpalgs-01.txt>
Status of this Memo
This document is an Internet-Draft and is subject to all provisions
of Section 10 of RFC2026.
Internet-Drafts are working documents of the Internet Engineering
Task Force (IETF), its areas, and its working groups. Note that
other groups may also distribute working documents as Internet-
Drafts.
Internet-Drafts are draft documents valid for a maximum of six months
and may be updated, replaced, or made obsolete by other documents at
any time. It is inappropriate to use Internet-Drafts as reference
material or to cite them other than as "work in progress."
The list of current Internet-Drafts can be accessed at
http://www.ietf.org/1id-abstracts.html
The list of Internet-Draft Shadow Directories can be accessed at
http://www.ietf.org/shadow.html
Abstract
This document describes cryprographic algorithms and parameters,
supplementary to GOST 28147-89, GOST R 34.10-94, GOST R 34.10-2001
and GOST R 34.11-94, for use in internet applications.
Table of Contents
1 Introduction . . . . . . . . . . . . . . . . . . . . . . 2
1.2 Terminology. . . . . . . . . . . . . . . . . . . . . . . 3 2
2 Cipher algorithms. . . . . . modes and parameters. . . . . . . . . . . . . . . 3
2.1 GOST 28147-89 CBC mode . . . . . . . . . . . . . . . . . 3
2.2 GOST 28147-89 padding modes. . . . . . . . . . . . . . . 4
2.3 Key meshing algorithms Meshing Algorithms . . . . . . . . . . . . . . . . . 3 4
2.3.1 Null Key Meshing . . . . . . . . . . . . . . . . . . . . 4
2.3.2 CryptoPro Key Meshing. . . . . . . . . . . . . . . . . . 4
3 HMAC_GOSTR3411 . . . . . . . . . . . . . . . . . . . . . 4 5
4 PRF_GOSTR3411. . . . . . . . . . . . . . . . . . . . . . 4 5
5 Key establishment algorithms Derivation Algorithms. . . . . . . . . . . . . . . 4 . 5
5.1 Creating exchange key using VKO GOST R 34.10-94 keys 34.10-94. . . . . 4 . . . . . . . . . . . . . . 5
5.2 Creating exchange key using VKO GOST R 34.10-2001 keys 34.10-2001. . . . 4
5.3 Generating export key from exchange key. . . . . . . . . 4
5.4 . . . . . . 6
6 Key export using export key. Wrap algorithms. . . . . . . . . . . . . . . 4
5.5 . . . . 6
6.1 GOST 28147-89 Key export using exchange key. Wrap . . . . . . . . . . . . . 4
5.6 . . . . 6
6.2 GOST 28147-89 Key Diversification. Unrap. . . . . . . . . . . . . . . . . 7
6.3 CryptoPro Key Wrap . . 4
5.7 VKO GOST R 34.10-94 and VKO GOST R 34.10-2001 algorithms 4
5.7.1 'Simple export' mode . . . . . . . . . . . . . . . . . 7
6.4 CryptoPro Key Unwrap . 4
5.7.2 'CryptoPro' mode . . . . . . . . . . . . . . . . . 8
6.5 CryptoPro KEK Diversification Algorithm. . . . 4
6 . . . . . 8
7 Secret Key Diversification . . . . . . . . . . . . . . . 9
8 Algorithm parameters . . . . . . . . . . . . . . . . . . 4
6.1 9
8.1 Encryption algorithm parameters . . . . . . . . . . . . 4
6.2 9
8.2 Digest algorithm parameters. . . . . . . . . . . . . . . 4
6.3 11
8.3 GOST R 34.10-94 public key algorithm parameters . . . . 4
6.4 11
8.4 GOST R 34.10-2001 public key algorithm parameters. . . . 4
7 12
9 Security Considerations. . . . . . . . . . . . . . . . . 11
8 13
10 Appendix ASN.1 Modules . . . . . . . . . . . . . . . . . 27
9 14
11 References . . . . . . . . . . . . . . . . . . . . . . . 27
10 49
12 Acknowledgments. . . . . . . . . . . . . . . . . . . . . 29 51
Author's Address. . . . . . . . . . . . . . . . . . . . . . . . 29 51
Full Copyright Statement. . . . . . . . . . . . . . . . . . . . 30 53
1 Introduction
This document describes cryprographic algorithms, used in supplement
to
Russian cryptographic standards defining algorithms GOST 28147-89, 28147-89
[GOST28147], GOST R 34.10-94, 34.10-94 [GOSTR341094], GOST R 34.10-2001
[GOSTR34102001] and GOST R
34.11-94, proposed R34.11-94 [GOSTR341194] (a brief english
technical description of these algorithms can be found in
[Schneier95]) provide basic information about how the algorithms
work, but need supplemental specifications to effectively use the
algorithms.
This document is a proposal put forward by CRYPTO-PRO CRYPT-PRO Company for to
provide the supplemental information and specifications needed by the
"Russian Cryptographic Software Compatibility Agreement" community. GOST 28147-89, GOST R
34.10-94, GOST R 34.10-2001 and GOST R 34.11-94 are defined in
corresponding national standards - [GOST28147], [GOSTR341094],
[GOSTR34102001] and [GOSTR341194]. Their brief technical description
in english can be found in [Schneier95].
1.2 Terminology
In this document, the key words MUST, MUST NOT, REQUIRED, SHOULD,
SHOULD NOT, RECOMMENDED, and MAY are to be interpreted as described
in [RFC 2119].
The following functions and operators are also used in this document:
'|' stands for concatenation
encryptECB (K, D) - is D, encrypted with key K using GOST 28147-89 in
"prostaya zamena" (ECB) mode
decryptECB (K, D) - is D, decrypted with key K using GOST 28147-89 in
ECB mode
encryptCFB (I, (IV, K, D) - is D, encrypted with key K using GOST
28147-89 in "gammirovanie s obratnoj svyaziyu" (64-bit CFB) mode, and I
IV as initialization vector.
encryptOFB (I,
encryptCNT (IV, K, D) - is D, encrypted with key K using GOST
28147-89 in "gammirovanie" (64-bit OFB) (counter) mode, and I IV as initialization
vector.
gostR3411 (D) - is the 256-bit result of GOST R 34.11-94 hash
function, used with zero intitialization vector, and UZ S-Box parameter,
defined by gostR3411CryptoProParamSetAI (see Appendix,
GostR3411-94-ParamSetSyntax module).
gost28147IMIT (I, (IV, K, D) - is the 32-bit result of GOST 28147-89 in
"imitovstavka" (MAC) mode, used with D as plaintext, K as key and I IV
as initialization vector. Note, that standard specifies it's use in
this mode only with zero initialization vector.
When keys and initialization vectors are converted to/from byte
arrays, little-endian byte order is assumed.
2 Cipher modes and parameters
[GOST28147] defines only the basic cryptographic operations, which
can be used to encrypt or decrypt data. three cipher modes for GOST 28147-89: ECB,
CFB and counter mode. This document defines an additional cipher mode
CBC.
When GOST 28147-89 CBC, and key meshing algorithm,
which can be used to protect a symmetric key, when it is used to process large amounts of data. data, a
symmetric key should be protected by key meshing algorithm. This
document defines CryptoPro key meshing algorithm.
The cipher mode, key meshing algorithm, padding mode and S-box are
specified by algorithm parameters.
2.1 GOST 28147-89 CBC mode
Algorithm
This section provides the supplemental information to GOST 28147-89 CBC mode is a
(a block cipher with to block
chaining, based on GOST 28147-89 primitive) needed to operate in ECB CBC mode.
Before each plaintext block is encrypted, it is combined with the
cipher text of the previous block by a bitwise exclusive OR XOR operation. This
ensures that even if the plaintext contains many identical blocks,
they will each encrypt to a different cipher text block. The
initialization vector is combined with the first plaintext block by a
bitwise exclusive OR XOR operation before the block is encrypted.
2.2 GOST 28147-89 padding modes
This section provides the supplemental information to GOST 28147-89,
needed to operate on plaintext, which length is not divisible by GOST
28147-89 block size (8 bytes).
Let x (0 < x < 8) be the number of bytes in the last (possibly,
incomplete) block of data. There are three padding modes:
* Zero padding: 8-x remaining bytes are filled with zero
* PKCS#5 padding: 8-x remaining bytes are filled with value of 8-x.
If there's no incomplete block, one extra block filled with
value 8 is added.
* Random padding: 8-x remaining bytes of the last block are
set to random.
2.2
2.3 Key meshing algorithms Meshing Algorithms
When there is a need to limit the amount of data, enciphered with the
same key, several key meshing algorithms can be used. Key meshing
algorithms transform the key after processing a certain amount of
data.
All encryption parameter sets, defined in this document, specify use
of CryptoPro key meshing algorithm, except for id-
Gost28147-89-TestParamSet, which specifies use of null key meshing
algorithm.
2.3.1 Null Key Meshing
A null key meshing algorithm never changes a key. It's OID is:
id-Gost28147-89-None-KeyMeshing OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms keyMeshing(14) none(0) }
This is a zero algorithm has NULL parameters.
2.3.2 CryptoPro Key Meshing
CryptoPro key meshing algorithm - transforms the key is never changed. and initialization
vector every 1KB of plaintext data. It's OID is:
id-Gost28147-89-CryptoPro-KeyMeshing OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms keyMeshing(14) cryptoPro(1) }
This algorithm transforms the has NULL parameters.
Encryption or decryption starts with key and initialization vector every 1KB
of plaintext data, using the following rule: K[0] = K, IV0[0] = IV, i =
0. Let K[i] be the previous key, and S[i] IV[0] be the previous value of initialization
vector. vector after processing
1K of data. Encryption or decryption of next 1K data block will start
with K[1] and IV0[1], which are calculated using formula:
K[i+1] = decryptECB (K[i], C); S[i+1]
IV0[i+1] = encryptECB (K[i+1],S[i]) (K[i+1],IV[i])
Where C = {0x22720069L, 0x2304C964L, 0x96DB3A8DL, 0xC42AE946L,
0x94ACFE18L, 0x1207ED00L, 0xC2DC86C0L, 0x2BA94CEFL}; {0x69, 0x00, 0x72, 0x22, 0x64, 0xC9, 0x04, 0x23,
0x8D, 0x3A, 0xDB, 0x96, 0x46, 0xE9, 0x2A, 0xC4,
0x18, 0xFE, 0xAC, 0x94, 0x00, 0xED, 0x07, 0x12,
0xC0, 0x86, 0xDC, 0xC2, 0xEF, 0x4C, 0xA9, 0x2B};
After processing every next 1K block, current initialization vector
is stored as IV[i+1], i is incremented and the same transformation
applied.
3 HMAC_GOSTR3411
HMAC_GOSTR3411 (K,text) function is based on hash function GOST R
34.11-94, as defined in [HMAC], with the following parameter values:
B = 32, L = 32.
4 PRF_GOSTR3411
PRF_GOSTR3411 is a pseudorandom function, based on HMAC_GOSTR3411.
It is calculated as P_hash, defined in section 5 of [TLS].
PRF_GOSTR3411(K,D) = P_GOSTR3411 (K,D)
5 Key establishment algorithms Derivation Algorithms
Standards [GOSTR341094] and [GOSTR34102001] do not define any key
establishment
derivation algorithms.
Section 5.7 5.1 specifies algorithms algorithm VKO GOST R 34.10-94, which generates
GOST KEK using two GOST R 34.10-94 and keypairs.
Section 5.2 specifies algorithm VKO GOST R 34.10-2001, which can be used to export/import session key using a
one-time exchange key (symmetric key, shared by sender and
recipient), based on sender's private key and recipient public key,
or vice versa.
Sections 5.1 and 5.2 describe how to create an exchange key from
sender's private key and recipient public key, or vice versa.
Section 5.3 describes how to create an export key from an exchange
key or symmetric key.
Sections 5.4 and 5.5 describe, how a session key can be exported
(encrypted) using export key, or using exchange key directly.
Section 5.6 describes, how to create session keys,
generates GOST KEK using secret key two GOST R 34.10-2001 keypairs, and diversification data.
synchrovector A.
Keypairs MUST have identical parameters.
5.1 Creating exchange key using VKO GOST R 34.10-94 keys
This algorithm creates an exchange a a key encryption key (KEK) using sender's
private key and recipient public key, or vice versa, using GOST R 34.10-94 public key
algorithm and GOST R 34.11-94 hash function. versa.
Exchange key EK is a 256-bit hash of 1024-bit Diffie-Hellman key
K(x,y);
EK = gostR3411 (K(x,y))
1. Let K(x,y) = a^(x*y) (mod p), where
x - sender's private key, a^x - sender's public key
y - recipient's private key, a^y - recipient's public key
Keys
a, p - parameters 2. Calculate a 256-bit hash of K(x,y):
KEK(x,y) = gostR3411 (K(x,y))
Keypairs x and y MUST comply with [GOSTR341094].
This algorithm MUST NOT be used, when a^x = a (mod p) or a^y = a (mod
p).
5.2 Creating exchange key using VKO GOST R 34.10-2001 keys
This algorithm creates an exchange a key encryption key (KEK) using synchrovector,
sender's private key and recipient public key, or vice versa, using GOST R 34.10-2001 public
key algorithm and GOST R 34.11-94 hash function.
Exchange key EK is a 256-bit hash of K(x,y,a);
EK(x,y,a) = gostR3411 (K(x,y,a))
K(x,y,a) versa.
1. Let K(x,y,IV) = ((a*x)(mod ((IV*x)(mod q)) . (y.P) (512 bit), where
x - sender's private key (256 bit)
x.P - sender's public key (512 bit)
y - recipient's private key (256 bit)
y.P - recipient's public key (512 bit)
a
IV - synchrovector (64 bit)
P - base point on the elliptic curve (two 256-bit coordinates)
a*x
IV*x - x multiplied by a IV as integers
x.P - a multiple point
Keys
2. Calculate a 256-bit hash of K(x,y,IV):
KEK(x,y,IV) = gostR3411 (K(x,y,IV))
Keypairs x and y MUST comply with [GOSTR34102001].
This algorithm MUST NOT be used, when x.P = P, y.P = P
5.3 Generating export key from exchange key
Given a random 64-bit synchrovector A, and an exchange key K,
produced by
6 Key Wrap algorithms from sections 5.1 and 5.2 (or other shared
symmetric
This document defines two key K), this wrap algorithms: GOST 28147-89 Key Wrap
and CryptoPro Key Wrap.
6.1 GOST 28147-89 Key Wrap
This algorithm creates an export key K(A), which
can encrypts GOST 28147-89 CEK with a GOST 28147-89 KEK.
Note: This algorithm MUST NOT be used to export (encrypt) session key.
KA = K[8]. K[0]..K[8] are calculated with following KEK produced by VKO GOST R
34.10-94, because such KEK is constant for every sender-recipient
pair. Encrypting many different content encryption keys on the same
constant KEK may reveal this KEK.
Identifier for this algorithm:
K[0] = K;
K[i+1] = encryptCFB (S[i], K[i], K[i])
S[i]
id-Gost28147-89-None-KeyWrap OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms keyWrap(13) none(0) }
The GOST 28147-89 key wrap algorithm is:
1. For unique symmetric KEK, generate 8 octets at random,
call the result IV.
For KEK, produced by VKO GOST R 34.10-2001, use the same IV,
that was used for key derivation.
2. Compute a 4-byte checksum value, gost28147IMIT (IV, KEK, CEK),
call the result CEK_MAC.
3. Encrypt CEK in ECB mode using KEK. Use IV, generated in step 1.
Call the ciphertext CEK_ENC.
4. Let RES = ((a[i,0]*k[i,0] + ... + a[i,7]*k[i,7]) mod 2^32) IV | ((~a[i,0]*k[i,0] + ... + ~a[i,7]*k[i,7]) mod 2^32);
Here a[i,j] and k[i,j] are components of A and K[i] respectively:
K[i] = k[i,0]|k[i,1]|...|k[i,7] (k[i,j] - 32-bit integer)
A = a[0]|...|a[7] (a[i] - byte, a[i,0]..a[i,7] - it's bits)
5.4 CEK_ENC | CEK_MAC.
6.2 GOST 28147-89 Key export using export key Unwrap
This algorithm exports session decrypts GOST 28147-89 CEK with a GOST 28147-89 KEK.
The GOST 28147-89 key unwrap algorithm is:
1. If the wrapped content-encryption key SK using is not 44 octets, then
error.
2. Decompose the the wrapped content-encryption key K into IV, CEK_ENC
and random 64-bit
synchrovector A. Outputs of this algorithm are 32-bit SK_mac CEK_MAC. IV is the most significant (first) 8 octets, CEK_ENC
is next 32 octets, and
256-bit SK_enc.
First, export key KA CEK_MAC is created the least significant (last) 4
octets.
3. Decrypt CEK_ENC in ECB mode using algorithm, specified KEK. Use IV, obrained in 5.3,
from
step 1. Call the key K and output CEK.
4. Compute a 4-byte checksum value, gost28147IMIT (IV, KEK, CEK),
compare the result CEK_MAC. If not equal, then error.
6.3 CryptoPro Key Wrap
This algorithm encrypts GOST 28147-89 CEK with a GOST 28147-89 KEK.
It can be used with any KEK, e.g. produced by VKO GOST R 34.10-94 or
VKO GOST R 34.10-2001, because unique initialization vector A.
Then SK_mac is calculated: SK_mac = used
to diversify the KEK.
Identifier for this algorithm:
id-Gost28147-89-CryptoPro-KeyWrap OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms keyWrap(13) cryptoPro(1) }
The CryptoPro key wrap algorithm is:
1. For unique symmetric KEK, or KEK produced by VKO GOST R 34.10-94,
generate 8 octets at random, call the result IV.
For KEK, produced by VKO GOST R 34.10-2001, use the same IV,
that was used for key derivation.
2. Diversify KEK, using CryptoPro KEK Diversification Algorithm,
described in section 7.2.1, call the result KEK(IV);
3. Compute a 4-byte checksum value,
gost28147IMIT (A, KA, SK).
Then SK is encrypted (IV, KEK(IV), CEK), call the result CEK_MAC.
4. Encrypt CEK in ECB mode, mode using key KA:
SK_enc KEK(IV). Use IV, generated in
step 1.
Call the ciphertext CEK_ENC.
5. Let RES = encryptECB (KA, SK);
5.5 IV | CEK_ENC | CEK_MAC.
6.4 CryptoPro Key export using exchange key Unrap
This algorithm exports session encrypts GOST 28147-89 CEK with a GOST 28147-89 KEK.
The CryptoPro key SK using exchange unwrap algorithm is:
1. If the wrapped content-encryption key K is not 44 octets, then
error.
2. Decompose the the wrapped content-encryption key into IV, CEK_ENC
and CEK_MAC. IV is the most significant (first) 8 octets, CEK_ENC
is next 32 octets, and CEK_MAC is the least significant (last)
4 octets.
3. Diversify KEK, using CryptoPro KEK Diversification Algorithm,
described in section 6.5, call the result KEK(IV);
4. Decrypt CEK_ENC in ECB mode using KEK(IV). Use IV, obrained in
step 1. Call the output CEK.
5. Compute a 4-byte checksum value,
gost28147IMIT (IV, KEK(IV), CEK), compare the result CEK_MAC.
If not equal, then error.
6.5 CryptoPro KEK Diversification Algorithm
Given a random 64-bit synchrovector A. Outputs of IV, and a GOST 28147-89 key K,
this algorithm creates a new GOST 28147-89 key K(IV).
1. Let K[0] = K;
2. IV is split into components a[i,j]:
IV = a[0]|...|a[7] (a[i] - byte, a[i,0]..a[i,7] - it's bits)
3. Let i be 0.
4. K[1]..K[8] are calculated by repeating the
following algorithm eight times:
A) K[i] is split into components k[i,j]:
K[i] = k[i,0]|k[i,1]|...|k[i,7] (k[i,j] - 32-bit SK_mac
and 256-bit SK_enc.
First, SK_mac integer)
B) Vector S[i] is calculated: SK_mac
S[i] = gost28147IMIT (A, K, SK).
Then SK is encrypted in ECB mode, using K for key:
SK_enc ((a[i,0]*k[i,0] + ... + a[i,7]*k[i,7]) mod 2^32)
| ((~a[i,0]*k[i,0] + ... + ~a[i,7]*k[i,7]) mod 2^32);
C) K[i+1] = encryptECB (K, SK);
5.6 encryptCFB (S[i], K[i], K[i])
D) i = i + 1
5. Let K(IV) be K[8].
7 Secret Key Diversification
This algorithm creates a session GOST 28147-89 key SK, Kd, given GOST R 34.10-94
or GOST R 34.10-2001 secret key K and diversification data D of size
4..40 bytes.
1) 40-byte blob B is created from D by cloning it enough times to
fill all 40 bytes. For example, if D is 40-bytes long, B = D; If D is
4-bytes long, B = D|D|D|D|D|D|D|D|D|D.
2) B is split into 8-byte SV and 32-byte SRCKEY (B = SV|SRCKEY).
3) Algorithm from section 5.3 6.5 is used to create KA K(SV) from key K and
synchrovector SV, with two differences. Instead of S[i], vector
(0,0,0,SV[i],ff,ff,ff,ff XOR SV[i]) is used, and during each
encryption step, only 8 out of 32 GOST 28147-89 steps are done.
4) SK Kd is calculated:
SK
Kd = encryptCFB (A, KA, (IV, K(IV), SRCKEY).
5.7 VKO GOST R 34.10-94 and VKO GOST R 34.10-2001 algorithms. VKO GOST
R 34.10-94 and VKO GOST R 34.10-2001 are key establishment algorithms
for GOST R 34.10-94 and GOST R 34.10-2001 keys accordingly.
There are two modes they can be used in.
5.7.1 'Simple export' mode
Identifier for this mode:
id-Gost28147-89-None-KeyWrap OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms keyWrap(13) none(0) }
The first step is calculating an exchange key, using algorithms,
defined in sections 5.1 or 5.2, depending on key type.
Then, session key can be exported on this exchange key, using
algorithm from section 5.5
5.7.2 'CryptoPro' mode
Identifier for this mode:
id-Gost28147-89-CryptoPro-KeyWrap OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms keyWrap(13) cryptoPro(1) }
The first step is calculating an exchange key, using algorithms,
defined in sections 5.1 or 5.2, depending on key type.
Then, session key is exported on the export key (computed from this
exchange key) using algorithm from section 5.4;
6
8 Algorithm parameters
Standards [GOST28147], [GOST341194], [GOSTR341094] and
[GOSTR34102001] do not define specific values for algorithm
parameters.
This document introduces the use of OIDs to specify algorithm
parameters.
Identifiers and corresponding parameter values for all of the
proposed parameter sets can be found in Appendix in the form of ASN.1
modules [X.660].
6.1
8.1 Encryption algorithm parameters
GOST 28147-89 can be used in several modes, additional CBC mode is
defined in section 2.1 this document. It also has an S-Box parameter
(see Algorithm Parameters part in [GOST28147] in Russian, description
in English see in [Schneier95] ch. 14.1, p. 331).
This table contains the list of proposed parameter sets for GOST
28147-89:
Gost28147-89-ParamSetAlgorithms ALGORITHM-IDENTIFIER ::= {
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-TestParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-A-ParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-B-ParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-C-ParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-D-ParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-Simple-A-ParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-Simple-B-ParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-Simple-C-ParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-Simple-D-ParamSet }
}
Identifier values can be found in Appendix.
Parameters for GOST 28147-89 are presented in the following form:
Gost28147-89-ParamSetParameters ::= SEQUENCE {
eUZ Gost28147-89-UZ,
mode INTEGER {
gost28147-89-OFB(0),
gost28147-89-CNT(0),
gost28147-89-CFB(1),
cryptoPro-CBC(2)
},
shiftBits INTEGER { gost28147-89-block(64) },
keyWrap AlgorithmIdentifier {{
Gost28147-89-KeyWrapAlgorithms
}}, AlgorithmIdentifier,
keyMeshing AlgorithmIdentifier {{
Gost28147-89-KeyMixAlgorithms
}}
}
Gost28147-89-UZ ::= OCTET STRING (SIZE (64))
Gost28147-89-KeyMixAlgorithms
Gost28147-89-KeyMeshingAlgorithms ALGORITHM-IDENTIFIER ::= {
{ NULL IDENTIFIED BY id-Gost28147-89-CryptoPro-KeyMix id-Gost28147-89-CryptoPro-KeyMeshing } |
{ NULL IDENTIFIED BY id-Gost28147-89-None-KeyMix id-Gost28147-89-None-KeyMeshing }
}
Gost28147-89-KeyWrapAlgorithms ALGORITHM-IDENTIFIER ::= {
{ NULL IDENTIFIED BY id-Gost28147-89-CryptoPro-KeyWrap } |
{ NULL IDENTIFIED BY id-Gost28147-89-None-KeyWrap }
}
where
eUZ - S-box value;
mode - cipher mode;
shiftBits - cipher parameter;
keyWrap - key export algorithm identifier;
keyMeshing - key meshing algorithm identifier.
6.2
8.2 Digest algorithm parameters
This table contains the list of proposed parameter sets for
[GOST341194]:
GostR3411-94-ParamSetAlgorithms ALGORITHM-IDENTIFIER ::= {
{ GostR3411-94-ParamSetParameters IDENTIFIED BY
id-GostR3411-94-TestParamSet
} |
{ GostR3411-94-ParamSetParameters IDENTIFIED BY
id-GostR3411-94-CryptoProParamSet
}
}
Identifier values can be found in Appendix.
Parameters for [GOST341194] are presented in the following form:
GostR3411-94-ParamSetParameters ::=
SEQUENCE {
hUZ Gost28147-89-UZ, -- S-Box for digest
h0 GostR3411-94-Digest -- start digest value
}
GostR3411-94-Digest ::= OCTET STRING (SIZE (32))
6.3 GOST R 34.10-94 public key algorithm parameters
This table contains the list of proposed parameter sets for GOST R
34.10-94:
GostR3410-94-ParamSetAlgorithm ALGORITHM-IDENTIFIER ::= {
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-TestParamSet } |
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-CryptoPro-A-ParamSet } |
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-CryptoPro-B-ParamSet } |
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-CryptoPro-C-ParamSet } |
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-CryptoPro-D-ParamSet } |
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-CryptoPro-XchA-ParamSet } |
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-CryptoPro-XchB-ParamSet } |
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-CryptoPro-XchC-ParamSet }
}
Identifier values can be found in Appendix.
Parameters for GOST R 34.10-94 are presented in the following form:
GostR3410-94-ParamSetParameters ::=
SEQUENCE {
p INTEGER,
q INTEGER,
a INTEGER,
validationAlgorithm AlgorithmIdentifier {{
GostR3410-94-ValidationAlgorithms
}} OPTIONAL
}
GostR3410-94-ValidationParameters ::=
SEQUENCE {
t INTEGER,
x0 INTEGER,
c INTEGER,
d INTEGER OPTIONAL
}
Where
p - modulus, prime number, 2^1023<p<2^1024;
q - order of cyclic group, prime number, 2^254<q<2^256, q is a
factor
of p-1;
a - generator, integer, 1<a<p-1, at that aq (mod p) = 1;
validationAlgorithm - constant p, q and a calculating algorithm.
t - bit length of p;
x0 - seed;
c - used for p and q generation;
d - used for a generation.
6.4
8.4 GOST R 34.10-2001 public key algorithm parameters
This table contains the list of proposed parameter sets for GOST R
34.10-2001:
GostR3410-2001-ParamSetAlgorithm ALGORITHM-IDENTIFIER ::= {
{ GostR3410-2001-ParamSetParameters IDENTIFIED BY
id-GostR3410-2001-TestParamSet } |
{ GostR3410-2001-ParamSetParameters IDENTIFIED BY
id-GostR3410-2001-CryptoPro-A-ParamSet } |
{ GostR3410-2001-ParamSetParameters IDENTIFIED BY
id-GostR3410-2001-CryptoPro-B-ParamSet } |
{ GostR3410-2001-ParamSetParameters IDENTIFIED BY
id-GostR3410-2001-CryptoPro-C-ParamSet } |
{ GostR3410-2001-ParamSetParameters IDENTIFIED BY
id-GostR3410-2001-CryptoPro-XchA-ParamSet } |
{ GostR3410-2001-ParamSetParameters IDENTIFIED BY
id-GostR3410-2001-CryptoPro-XchB-ParamSet }
}
Identifier values can be found in Appendix.
Parameters for GOST R 34.10-2001 are presented in the following form:
GostR3410-2001-ParamSetParameters ::=
SEQUENCE {
abj CHOICE {
ab SEQUENCE {
a INTEGER,
b INTEGER,
},
j INTEGER,
},
p INTEGER ,
q INTEGER ,
x INTEGER ,
y INTEGER
}
a, b - coefficients a and b of the elliptic curve E;
j - invariant;
p - prime number - elliptic curve modulus;
q - prime number - order of cyclic group;
x, y - base point p coordinates.
7
9 Security Considerations
Parameter values for using cryptographic algorithms affect rigidity
of information protection system.
It is RECCOMENDED, that software applications verify signature
values, subject public keys and algorithm parameters to conform to
[GOSTR34102001], [GOSTR341094] standards prior to their use.
Cryptographic algorithm parameters affect rigidity of algorithms.
The algorithm parameters proposed hereby and described in this
document, have been analyzed by special certification laboratory of
Scientific and Technical Centre Center "ATLAS" and by Centre Center of
Certificational Investigations in appropriate levels of
target_of_evaluation (TOE).
In case (TOE), according to [RFDSL], [RFLLIC] and
[CRYPTOLIC].
Use of different parameter sets is NOT RECOMENDED. When different
parameters usage, are used, it is RECCOMENDED that they
are to be examined subject them to examination
by an authorized agency with an approved methods of cryptographic
analysis.
8
10 Appendix ASN.1 Modules
8.1
10.1 Cryptographic-Gost-Useful-Definitions
Cryptographic-Gost-Useful-Definitions
{ iso(1) member-body(2) ru(643) rans(2) cryptopro(2)
other(1) modules(1) cryptographic-Gost-Useful-Definitions(0)
1 }
DEFINITIONS ::=
BEGIN
-- EXPORTS All --
-- The types and values defined in this module are exported for
-- use in the other ASN.1 modules contained within the Russian
-- Cryptography "GOST" & "GOST R" Specifications, and for the use
-- of other applications which will use them to access Russian
-- Cryptography services. Other applications may use them for
-- their own purposes, but this will not constrain extensions and
-- modifications needed to maintain or improve the Russian
-- Cryptography service.
-- Crypto-Pro OID branch
id-CryptoPro OBJECT IDENTIFIER ::=
{ iso(1) member-body(2) ru(643) rans(2) cryptopro(2) }
id-CryptoPro-algorithms OBJECT IDENTIFIER ::=
id-CryptoPro
id-CryptoPro-modules OBJECT IDENTIFIER ::=
{ id-CryptoPro other(1) modules(1) }
id-CryptoPro-hashes OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms hashes(30) }
id-CryptoPro-encrypts OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms encrypts(31) }
id-CryptoPro-signs OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms signs(32) }
id-CryptoPro-exchanges OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms exchanges(33) }
id-CryptoPro-extensions OBJECT IDENTIFIER ::=
{ id-CryptoPro extensions(34) }
id-CryptoPro-ecc-signs OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms ecc-signs(35) }
id-CryptoPro-ecc-exchanges OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms ecc-exchanges(36) }
id-CryptoPro-private-keys OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms private-keys(37) }
id-CryptoPro-policyIds OBJECT IDENTIFIER ::=
{ id-CryptoPro policyIds(38) }
id-CryptoPro-policyQt OBJECT IDENTIFIER ::=
{ id-CryptoPro policyQt(39) }
id-CryptoPro-pkixcmp-infos OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms pkixcmp-infos(41) }
id-CryptoPro-audit-service-types OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms pkixcmp-infos(42) }
id-CryptoPro-audit-record-types OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms pkixcmp-infos(43) }
id-CryptoPro-attributes OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms attributes(44) }
-- ASN.1 modules of Russian Cryptography "GOST" & "GOST R"
-- Specifications
cryptographic-Gost-Useful-Definitions OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules
cryptographic-Gost-Useful-Definitions(0) 1 }
-- GOST R 34.11-94
gostR3411-94-DigestSyntax OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules gostR3411-94-DigestSyntax(1) 1 }
gostR3411-94-ParamSetSyntax OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules gostR3411-94-ParamSetSyntax(7) 1 }
-- GOST R 34.10-94
gostR3410-94-PKISyntax OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules gostR3410-94-PKISyntax(2) 1 }
gostR3410-94-SignatureSyntax OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules gostR3410-94-SignatureSyntax(3) 1 }
gostR3410-EncryptionSyntax OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules gostR3410-EncryptionSyntax(5) 2 }
gostR3410-94-ParamSetSyntax OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules gostR3410-94-ParamSetSyntax(8) 1 }
-- GOST R 34.10-2001
gostR3410-2001-PKISyntax OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules gostR3410-2001-PKISyntax(9) 1 }
gostR3410-2001-SignatureSyntax OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules
gostR3410-2001-SignatureSyntax(10) 1 }
gostR3410-2001-ParamSetSyntax OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules
gostR3410-2001-ParamSetSyntax(12) 1 }
-- GOST 28147-89
gost28147-89-EncryptionSyntax OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules gost28147-89-EncryptionSyntax(4) 1 }
gost28147-89-ParamSetSyntax OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules gost28147-89-ParamSetSyntax(6) 1 }
-- Extended Key Usage for Crypto-Pro
gost-CryptoPro-ExtendedKeyUsage OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules
gost-CryptoPro-ExtendedKeyUsage(13) 1 }
-- Crypto-Pro Private keys
gost-CryptoPro-PrivateKey OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules gost-CryptoPro-PrivateKey(14) 1 }
-- Crypto-Pro PKIXCMP structures
gost-CryptoPro-PKIXCMP OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules gost-CryptoPro-PKIXCMP(15) 1 }
-- Crypto-Pro Transport Layer Security structures
gost-CryptoPro-TransportLayerSecurity OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules gost-CryptoPro-TransportLayerSecurit
y(16) 1 }
-- Crypto-Pro Policy
gost-CryptoPro-Policy OBJECT IDENTIFIER ::=
{ id-CryptoPro-modules gost-CryptoPro-Policy(17) 1 }
-- Useful types
ALGORITHM-IDENTIFIER ::= CLASS {
&id OBJECT IDENTIFIER UNIQUE,
&Type OPTIONAL
}
WITH SYNTAX { [&Type] IDENTIFIED BY &id }
END -- Cryptographic-Gost-Useful-Definitions
10.2 Gost28147-89-EncryptionSyntax
Gost28147-89-EncryptionSyntax
{ iso(1) member-body(2) ru(643) rans(2) cryptopro(2)
other(1) modules(1) gost28147-89-EncryptionSyntax(4) 1 }
DEFINITIONS EXPLICIT TAGS ::=
BEGIN
-- EXPORTS All --
-- The types and values defined in this module are exported for
-- use in the other ASN.1 modules contained within the Russian
-- Cryptography "GOST" & "GOST R" Specifications, and for the use
-- of other applications which will use them to access Russian
-- Cryptography services. Other applications may use them for
-- their own purposes, but this will not constrain extensions and
-- modifications needed to maintain or improve the Russian
-- Cryptography service.
IMPORTS
id-CryptoPro-algorithms, id-CryptoPro-encrypts,
ALGORITHM-IDENTIFIER,
cryptographic-Gost-Useful-Definitions
FROM Cryptographic-Gost-Useful-Definitions
{ iso(1) member-body(2) ru(643) rans(2)
cryptopro(2) other(1) modules(1)
cryptographic-Gost-Useful-Definitions(0) 1 }
AlgorithmIdentifier, ALGORITHM-IDENTIFIER
FROM Cryptographic-Gost-Useful-Definitions
cryptographic-Gost-Useful-Definitions
;
-- GOST 28147-89 OID
id-Gost28147-89 OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms gost28147-89(21) }
id-Gost28147-89-MAC OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms gost28147-89-MAC(22) }
-- GOST 28147-89 Cryptographic Parameter Sets cryptographic parameter sets OIDs
id-Gost28147-89-TestParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-encrypts test(0) }
id-Gost28147-89-CryptoPro-A-ParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-encrypts cryptopro-A(1) }
id-Gost28147-89-CryptoPro-B-ParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-encrypts cryptopro-B(2) }
id-Gost28147-89-CryptoPro-C-ParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-encrypts cryptopro-C(3) }
id-Gost28147-89-CryptoPro-D-ParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-encrypts cryptopro-D(4) }
id-Gost28147-89-CryptoPro-Oscar-ParamSet
OBJECT IDENTIFIER ::=
{ id-CryptoPro-encrypts cryptopro-Oscar(5) }
id-Gost28147-89-CryptoPro-Simple-A-ParamSet
OBJECT IDENTIFIER ::=
{ id-CryptoPro-encrypts cryptopro-Simple-A(6) }
id-Gost28147-89-CryptoPro-Simple-B-ParamSet
OBJECT IDENTIFIER ::=
{ id-CryptoPro-encrypts cryptopro-Simple-B(7) }
id-Gost28147-89-CryptoPro-Simple-C-ParamSet
OBJECT IDENTIFIER ::=
{ id-CryptoPro-encrypts cryptopro-Simple-C(8) }
id-Gost28147-89-CryptoPro-Simple-D-ParamSet
OBJECT IDENTIFIER ::=
{ id-CryptoPro-encrypts cryptopro-Simple-D(9) }
-- GOST 28147-89 Types
Gost28147-89-Data ::= OCTET STRING (SIZE (0..4294967294))
Gost28147-89-EncryptedData ::=
OCTET STRING (SIZE (0..4294967294))
Gost28147-89-UZ ::= OCTET STRING (SIZE (64))
Gost28147-89-IV ::= OCTET STRING (SIZE (8))
Gost28147-89-Key ::= OCTET STRING (SIZE (32))
Gost28147-89-MAC ::= OCTET STRING (SIZE (1..4))
Gost28147-89-EncryptedKey ::=
SEQUENCE {
encryptedKey Gost28147-89-Key,
maskKey [0] IMPLICIT Gost28147-89-Key OPTI
ONAL,
macKey Gost28147-89-MAC (SIZE (4))
}
Gost28147-89-BlobParameters ::=
SEQUENCE {
encryptionParamSet
OBJECT IDENTIFIER (
id-Gost28147-89-TestParamSet | -- Only for
testing purposes
id-Gost28147-89-CryptoPro-A-ParamSet |
id-Gost28147-89-CryptoPro-B-ParamSet |
id-Gost28147-89-CryptoPro-C-ParamSet |
id-Gost28147-89-CryptoPro-D-ParamSet |
id-Gost28147-89-CryptoPro-Simple-A-ParamSet |
id-Gost28147-89-CryptoPro-Simple-B-ParamSet |
id-Gost28147-89-CryptoPro-Simple-C-ParamSet |
id-Gost28147-89-CryptoPro-Simple-D-ParamSet
)
}
-- GOST 28147-89 encryption algorithm parameters
Gost28147-89-Parameters ::=
SEQUENCE {
iv Gost28147-89-IV,
encryptionParamSet
OBJECT IDENTIFIER (
id-Gost28147-89-TestParamSet | -- Only for tests use test
ing purposes
id-Gost28147-89-CryptoPro-A-ParamSet |
id-Gost28147-89-CryptoPro-B-ParamSet |
id-Gost28147-89-CryptoPro-C-ParamSet |
id-Gost28147-89-CryptoPro-D-ParamSet |
id-Gost28147-89-CryptoPro-Simple-A-ParamSet |
id-Gost28147-89-CryptoPro-Simple-B-ParamSet |
id-Gost28147-89-CryptoPro-Simple-C-ParamSet |
id-Gost28147-89-CryptoPro-Simple-D-ParamSet
),
iv Gost28147-89-IV
)
}
Gost28147-89-Algorithms ALGORITHM-IDENTIFIER ::= {
{ Gost28147-89-Parameters IDENTIFIED BY
id-Gost28147-89 }
}
END -- Gost28147-89-EncryptionSyntax
8.2
10.3 Gost28147-89-ParamSetSyntax
Gost28147-89-ParamSetSyntax
{ iso(1) member-body(2) ru(643) rans(2) cryptopro(2)
other(1) modules(1) gost28147-89-ParamSetSyntax(6) 1 }
DEFINITIONS EXPLICIT TAGS ::=
BEGIN
-- EXPORTS All --
-- The types and values defined in this module are exported for
-- use in the other ASN.1 modules contained within the Russian
-- Cryptography "GOST" & "GOST R" Specifications, and for the use
-- of other applications which will use them to access Russian
-- Cryptography services. Other applications may use them for
-- their own purposes, but this will not constrain extensions and
-- modifications needed to maintain or improve the Russian
-- Cryptography service.
IMPORTS
id-CryptoPro-algorithms, id-CryptoPro-encrypts,
gost28147-89-EncryptionSyntax, ALGORITHM-IDENTIFIER,
cryptographic-Gost-Useful-Definitions
FROM Cryptographic-Gost-Useful-Definitions
{ iso(1) member-body(2) ru(643) rans(2)
cryptopro(2) other(1) modules(1)
cryptographic-Gost-Useful-Definitions(0) 1 }
Gost28147-89-UZ,
id-Gost28147-89-TestParamSet,
id-Gost28147-89-CryptoPro-A-ParamSet,
id-Gost28147-89-CryptoPro-B-ParamSet,
id-Gost28147-89-CryptoPro-C-ParamSet,
id-Gost28147-89-CryptoPro-D-ParamSet,
id-Gost28147-89-CryptoPro-Simple-A-ParamSet,
id-Gost28147-89-CryptoPro-Simple-B-ParamSet,
id-Gost28147-89-CryptoPro-Simple-C-ParamSet,
id-Gost28147-89-CryptoPro-Simple-D-ParamSet
FROM Gost28147-89-EncryptionSyntax
gost28147-89-EncryptionSyntax
AlgorithmIdentifier, ALGORITHM-IDENTIFIER
AlgorithmIdentifier
FROM Cryptographic-Gost-Useful-Definitions
cryptographic-Gost-Useful-Definitions PKIX1Explicit88 {iso(1) identified-organization(3)
dod(6) internet(1) security(5) mechanisms(5) pkix(7)
id-mod(0) id-pkix1-explicit-88(1)}
;
-- GOST 28147-89 Cryptographic Parameters Set:
-- algorithm & parameters cryptographic parameter sets:
-- OID OIDs for Parameters Set parameter sets are imported from
-- Gost28147-89-EncryptionSyntax
Gost28147-89-ParamSetParameters ::=
SEQUENCE {
eUZ Gost28147-89-UZ,
mode INTEGER {
gost28147-89-OFB(0),
gost28147-89-CNT(0),
gost28147-89-CFB(1),
cryptoPro-CBC(2)
},
shiftBits INTEGER { gost28147-89-block(64) },
keyWrap AlgorithmIdentifier,
keyMeshing AlgorithmIdentifier {{
Gost28147-89-KeyWrapAlgorithms
}},
keyMix AlgorithmIdentifier {{
Gost28147-89-KeyMixAlgorithms
}}
}
Gost28147-89-ParamSetAlgorithms ALGORITHM-IDENTIFIER ::= {
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-TestParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-A-ParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-B-ParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-C-ParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-D-ParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-Simple-A-ParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-Simple-B-ParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-Simple-C-ParamSet } |
{ Gost28147-89-ParamSetParameters IDENTIFIED BY
id-Gost28147-89-CryptoPro-Simple-D-ParamSet }
}
id-Gost28147-89-CryptoPro-KeyWrap OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms keyWrap(13) cryptoPro(1) }
id-Gost28147-89-None-KeyWrap OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms keyWrap(13) none(0) }
Gost28147-89-KeyWrapAlgorithms ALGORITHM-IDENTIFIER ::= {
{ NULL IDENTIFIED BY id-Gost28147-89-CryptoPro-KeyWrap } |
{ NULL IDENTIFIED BY id-Gost28147-89-None-KeyWrap }
}
id-Gost28147-89-CryptoPro-KeyMix
id-Gost28147-89-CryptoPro-KeyMeshing OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms keyMix(14) keyMeshing(14) cryptoPro(1) }
id-Gost28147-89-None-KeyMix
id-Gost28147-89-None-KeyMeshing OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms keyMix(14) keyMeshing(14) none(0) }
Gost28147-89-KeyMixAlgorithms
Gost28147-89-KeyMeshingAlgorithms ALGORITHM-IDENTIFIER ::= {
{ NULL IDENTIFIED BY id-Gost28147-89-CryptoPro-KeyMix id-Gost28147-89-CryptoPro-KeyMeshing } |
{ NULL IDENTIFIED BY id-Gost28147-89-None-KeyMix id-Gost28147-89-None-KeyMeshing }
}
-- GOST 28147-89 Cryptographic Parameters Set: cryptographic parameter set: values
-- Test Parameters Set parameter set
gost28147-89-UZ-Test Gost28147-89-UZ ::=
'4CDE389C2989EFB6FFEB56C55EC29B029875613B113F896003970C798AA1D55
DE210AD43375DB38EB42C77E7CD46CAFAD66A201F70F41EA4AB03F22165B844D8'H
gost28147-89-TestParamSetAI
AlgorithmIdentifier {{
Gost28147-89-ParamSetAlgorithms
}} ::= {
algorithm
id-Gost28147-89-TestParamSet,
parameters
Gost28147-89-ParamSetParameters:{
eUZ '4CDE389C2989EFB6FFEB56C55EC29B029875613B113F896
003970C798AA1D55DE210AD43375DB38EB42C77E7CD46CAFAD66A201F70F41EA4AB
03F22165B844D8'H, gost28147-89-UZ-Test,
mode gost28147-89-OFB, gost28147-89-CNT,
shiftBits 64,
keyWrap { algorithm id-Gost28147-89-None-KeyWrap },
keyMix
keyMeshing { algorithm id-Gost28147-89-None-KeyMix id-Gost28147-89-None-KeyMeshing
}
}
}
-- CryptoPro Parameters Sets parameter sets
gost28147-89-UZ-CryptoPro-A Gost28147-89-UZ ::=
-- K1 K2 K3 K4 K5 K6 K7 K8
-- 9 3 E E B 3 1 B
-- 6 7 4 7 5 A D A
-- 3 E 6 A 1 D 2 F
-- 2 9 2 C 9 C 9 5
-- 8 8 B D 8 1 7 0
-- B A 3 1 D 2 A C
-- 1 F D 3 F 0 6 E
-- 7 0 8 9 0 B 0 8
-- A 5 C 0 E 7 8 6
-- 4 2 F 2 4 5 C 2
-- E 6 5 B 2 9 4 3
-- F C A 4 3 4 5 9
-- C B 0 F C 8 F 1
-- 0 4 7 8 7 F 3 7
-- D D 1 5 A E B D
-- 5 1 9 6 6 6 E 4
'93EEB31B67475ADA3E6A1D2F292C9C9588BD8170BA31D2AC1FD3F06E70
890B08A5C0E78642F245C2E65B2943FCA43459CB0FC8F104787F37DD15AEBD51966
6E4'H
'93EEB31B67475ADA3E6A1D2F292C9C9588BD8170BA31D2AC1FD3F06E70890B0
8A5C0E78642F245C2E65B2943FCA43459CB0FC8F104787F37DD15AEBD519666E4'H
gost28147-89-CryptoPro-A-ParamSetAI
AlgorithmIdentifier {{
Gost28147-89-ParamSetAlgorithms
}} ::=
{
algorithm
id-Gost28147-89-CryptoPro-A-ParamSet,
parameters
Gost28147-89-ParamSetParameters:{
eUZ gost28147-89-UZ-CryptoPro-A,
mode gost28147-89-CFB,
shiftBits 64,
keyWrap
{ algorithm id-Gost28147-89-CryptoPro-KeyWrap id-Gost28147-89-CryptoPro-KeyWr
ap },
keyMix
keyMeshing
{ algorithm id-Gost28147-89-CryptoPro-KeyMix id-Gost28147-89-CryptoPro-KeyMe
shing }
}
}
--
gost28147-89-UZ-CryptoPro-B Gost28147-89-UZ ::=
-- K1 K2 K3 K4 K5 K6 K7 K8
-- 8 0 E 7 2 8 5 0
-- 4 1 C 5 7 3 2 4
-- B 2 0 0 C 2 A B
-- 1 A A D F 6 B E
-- 3 4 9 B 9 4 9 8
-- 5 D 2 6 5 D 1 3
-- 0 5 D 1 A E C 7
-- 9 C B 2 B B 3 1
-- 2 9 7 3 1 C 7 A
-- E 7 5 A 4 1 4 2
-- A 3 8 C 0 7 D 9
-- C F F F D F 0 6
-- D B 3 4 6 A 6 F
-- 6 8 6 E 8 0 F D
-- 7 6 1 9 E 9 8 5
-- F E 4 8 3 5 E C
'80E7285041C57324B200C2AB1AADF6BE349B94985D265D1305D1AEC79C
B2BB3129731C7AE75A4142A38C07D9CFFFDF06DB346A6F686E80FD7619E985FE483
5EC'H
'80E7285041C57324B200C2AB1AADF6BE349B94985D265D1305D1AEC79CB2BB3
129731C7AE75A4142A38C07D9CFFFDF06DB346A6F686E80FD7619E985FE4835EC'H
gost28147-89-CryptoPro-B-ParamSetAI
AlgorithmIdentifier {{
Gost28147-89-ParamSetAlgorithms
}} ::=
{
algorithm
id-Gost28147-89-CryptoPro-B-ParamSet,
parameters
Gost28147-89-ParamSetParameters:{
eUZ gost28147-89-UZ-CryptoPro-B,
mode gost28147-89-CFB,
shiftBits 64,
keyWrap
{ algorithm id-Gost28147-89-CryptoPro-KeyWrap id-Gost28147-89-CryptoPro-KeyWr
ap },
keyMix
keyMeshing
{ algorithm id-Gost28147-89-CryptoPro-KeyMix id-Gost28147-89-CryptoPro-KeyMe
shing }
}
}
--
gost28147-89-UZ-CryptoPro-C Gost28147-89-UZ ::=
-- K1 K2 K3 K4 K5 K6 K7 K8
-- 1 0 8 3 8 C A 7
-- B 1 2 6 D 9 9 4
-- C 7 5 0 B B 6 0
-- 2 D 0 1 0 1 8 5
-- 9 B 4 5 4 8 D A
-- D 4 9 D 5 E E 2
-- 0 5 F A 1 2 2 F
-- F 2 A 8 2 4 0 E
-- 4 8 3 B 9 7 F C
-- 5 E 7 2 3 3 3 6
-- 8 F C 9 C 6 5 1
-- E C D 7 E 5 B B
-- A 9 6 E 6 A 4 D
-- 7 A E F F 0 1 9
-- 6 6 1 C A F C 3
-- 3 3 B 4 7 D 7 8
'10838CA7B126D994C750BB602D0101859B4548DAD49D5EE205FA122FF2
A8240E483B97FC5E7233368FC9C651ECD7E5BBA96E6A4D7AEFF019661CAFC333B47
D78'H
'10838CA7B126D994C750BB602D0101859B4548DAD49D5EE205FA122FF2A8240
E483B97FC5E7233368FC9C651ECD7E5BBA96E6A4D7AEFF019661CAFC333B47D78'H
gost28147-89-CryptoPro-C-ParamSetAI
AlgorithmIdentifier {{
Gost28147-89-ParamSetAlgorithms
}} ::=
{
algorithm
id-Gost28147-89-CryptoPro-C-ParamSet,
parameters
Gost28147-89-ParamSetParameters:{
eUZ gost28147-89-UZ-CryptoPro-C,
mode gost28147-89-CFB,
shiftBits 64,
keyWrap
{ algorithm id-Gost28147-89-CryptoPro-KeyWrap id-Gost28147-89-CryptoPro-KeyWr
ap },
keyMix
keyMeshing
{ algorithm id-Gost28147-89-CryptoPro-KeyMix id-Gost28147-89-CryptoPro-KeyMe
shing }
}
}
--
gost28147-89-UZ-CryptoPro-D Gost28147-89-UZ ::=
-- K1 K2 K3 K4 K5 K6 K7 K8
-- F B 1 1 0 8 3 1
-- C 6 C 5 C 0 0 A
-- 2 3 B E 8 F 6 6
-- A 4 0 C 9 3 F 8
-- 6 C F A D 2 1 F
-- 4 F E 7 2 5 E B
-- 5 E 6 0 A E 9 0
-- 0 2 5 D B B 2 4
-- 7 7 A 6 7 1 D C
-- 9 D D 2 3 A 8 3
-- E 8 4 B 6 4 C 5
-- D 0 8 4 5 7 4 9
-- 1 5 9 9 4 C B 7
-- B A 3 3 E 9 A D
-- 8 9 7 F F D 5 2
-- 3 1 2 8 1 6 7 E'H
'FB110831C6C5C00A23BE8F66A40C93F86CFAD21F4FE725EB5E60AE9002
5DBB2477A671DC9DD23A83E84B64C5D084574915994CB7BA33E9AD897FFD5231281
67E'H
'FB110831C6C5C00A23BE8F66A40C93F86CFAD21F4FE725EB5E60AE90025DBB2
477A671DC9DD23A83E84B64C5D084574915994CB7BA33E9AD897FFD523128167E'H
gost28147-89-CryptoPro-D-ParamSetAI
AlgorithmIdentifier {{
Gost28147-89-ParamSetAlgorithms
}} ::=
{
algorithm
id-Gost28147-89-CryptoPro-D-ParamSet,
parameters
Gost28147-89-ParamSetParameters:{
eUZ gost28147-89-UZ-CryptoPro-D,
mode gost28147-89-CFB,
shiftBits 64,
keyWrap
{ algorithm id-Gost28147-89-CryptoPro-KeyWrap id-Gost28147-89-CryptoPro-KeyWr
ap },
keyMix
keyMeshing
{ algorithm id-Gost28147-89-CryptoPro-KeyMix id-Gost28147-89-CryptoPro-KeyMe
shing }
}
}
--
gost28147-89-CryptoPro-Simple-A-ParamSetAI
AlgorithmIdentifier {{
Gost28147-89-ParamSetAlgorithms
}} ::=
{
algorithm
id-Gost28147-89-CryptoPro-Simple-A-ParamSet,
parameters
Gost28147-89-ParamSetParameters:{
eUZ gost28147-89-UZ-CryptoPro-A,
mode gost28147-89-CFB,
shiftBits 64,
keyWrap
{ algorithm id-Gost28147-89-None-KeyWrap },
keyMix
keyMeshing
{ algorithm id-Gost28147-89-CryptoPro-KeyMix id-Gost28147-89-CryptoPro-KeyMe
shing }
}
}
--
gost28147-89-CryptoPro-Simple-B-ParamSetAI
AlgorithmIdentifier {{
Gost28147-89-ParamSetAlgorithms
}} ::=
{
algorithm
id-Gost28147-89-CryptoPro-Simple-B-ParamSet,
parameters
Gost28147-89-ParamSetParameters:{
eUZ gost28147-89-UZ-CryptoPro-B,
mode gost28147-89-CFB,
shiftBits 64,
keyWrap
{ algorithm id-Gost28147-89-None-KeyWrap },
keyMix
keyMeshing
{ algorithm id-Gost28147-89-CryptoPro-KeyMix id-Gost28147-89-CryptoPro-KeyMe
shing }
}
}
--
gost28147-89-CryptoPro-Simple-C-ParamSetAI
AlgorithmIdentifier {{
Gost28147-89-ParamSetAlgorithms
}} ::=
{
algorithm
id-Gost28147-89-CryptoPro-Simple-C-ParamSet,
parameters
Gost28147-89-ParamSetParameters:{
eUZ gost28147-89-UZ-CryptoPro-C,
mode gost28147-89-CFB,
shiftBits 64,
keyWrap
{ algorithm id-Gost28147-89-None-KeyWrap },
keyMix
keyMeshing
{ algorithm id-Gost28147-89-CryptoPro-KeyMix id-Gost28147-89-CryptoPro-KeyMe
shing }
}
}
--
gost28147-89-CryptoPro-Simple-D-ParamSetAI
AlgorithmIdentifier {{
Gost28147-89-ParamSetAlgorithms
}} ::=
{
algorithm
id-Gost28147-89-CryptoPro-Simple-D-ParamSet,
parameters
Gost28147-89-ParamSetParameters:{
eUZ gost28147-89-UZ-CryptoPro-D,
mode gost28147-89-CFB,
shiftBits 64,
keyWrap
{ algorithm id-Gost28147-89-None-KeyWrap },
keyMix
keyMeshing
{ algorithm id-Gost28147-89-CryptoPro-KeyMix id-Gost28147-89-CryptoPro-KeyMe
shing }
}
}
END -- Gost28147-89-ParamSetSyntax
8.3
10.4 GostR3411-94-DigestSyntax
GostR3411-94-DigestSyntax
{ iso(1) member-body(2) ru(643) rans(2) cryptopro(2)
other(1) modules(1) gostR3411-94-DigestSyntax(1) 1 }
DEFINITIONS ::=
BEGIN
-- EXPORTS All --
-- The types and values defined in this module are exported for
-- use in the other ASN.1 modules contained within the Russian
-- Cryptography "GOST" & "GOST R" Specifications, and for the use
-- of other applications which will use them to access Russian
-- Cryptography services. Other applications may use them for
-- their own purposes, but this will not constrain extensions and
-- modifications needed to maintain or improve the Russian
-- Cryptography service.
IMPORTS
id-CryptoPro-algorithms, id-CryptoPro-hashes,
gost28147-89-EncryptionSyntax, ALGORITHM-IDENTIFIER,
cryptographic-Gost-Useful-Definitions
FROM Cryptographic-Gost-Useful-Definitions
{ iso(1) member-body(2) ru(643) rans(2)
cryptopro(2) other(1) modules(1)
cryptographic-Gost-Useful-Definitions(0) 1 }
Gost28147-89-Data, Gost28147-89-UZ
FROM Gost28147-89-EncryptionSyntax
gost28147-89-EncryptionSyntax
AlgorithmIdentifier, ALGORITHM-IDENTIFIER
FROM Cryptographic-Gost-Useful-Definitions
cryptographic-Gost-Useful-Definitions
;
-- GOST R 34.11-94 OID
id-GostR3411-94 OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms gostR3411-94(9) }
-- GOST R 34.11-94 Cryptographic Parameters Set cryptographic parameter set OIDs
id-GostR3411-94-TestParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-hashes test(0) }
id-GostR3411-94-CryptoProParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-hashes cryptopro(1) }
-- GOST R 34.11-94 Data Types data types
GostR3411-94-Data ::= Gost28147-89-Data
GostR3411-94-Digest ::= OCTET STRING (SIZE (32))
-- GOST R 34.11-94 Digest Parameters digest algorithm & Algorithms parameters
GostR3411-94-DigestParameters ::=
OBJECT IDENTIFIER (
id-GostR3411-94-TestParamSet | -- Only for tests use testing
purposes
id-GostR3411-94-CryptoProParamSet
)
GostR3411-94-DigestAlgorithms ALGORITHM-IDENTIFIER ::= {
{ NULL IDENTIFIED BY id-GostR3411-94 } |
-- Assume id-GostR3411-94-CryptoProParamSet
{ GostR3411-94-DigestParameters
IDENTIFIED BY id-GostR3411-94 }
}
END -- GostR3411-94-DigestSyntax
8.4
10.5 GostR3411-94-ParamSetSyntax
GostR3411-94-ParamSetSyntax
{ iso(1) member-body(2) ru(643) rans(2) cryptopro(2)
other(1) modules(1) gostR3411-94-ParamSetSyntax(7) 1 }
DEFINITIONS ::=
BEGIN
-- EXPORTS All --
-- The types and values defined in this module are exported for
-- use in the other ASN.1 modules contained within the Russian
-- Cryptography "GOST" & "GOST R" Specifications, and for the use
-- of other applications which will use them to access Russian
-- Cryptography services. Other applications may use them for
-- their own purposes, but this will not constrain extensions and
-- modifications needed to maintain or improve the Russian
-- Cryptography service.
IMPORTS
id-CryptoPro-algorithms, id-CryptoPro-hashes,
gost28147-89-EncryptionSyntax,
gostR3411-94-DigestSyntax, ALGORITHM-IDENTIFIER,
cryptographic-Gost-Useful-Definitions
FROM Cryptographic-Gost-Useful-Definitions
{ iso(1) member-body(2) ru(643) rans(2)
cryptopro(2) other(1) modules(1)
cryptographic-Gost-Useful-Definitions(0) 1 }
Gost28147-89-UZ
FROM Gost28147-89-EncryptionSyntax
gost28147-89-EncryptionSyntax
id-GostR3411-94-TestParamSet,
id-GostR3411-94-CryptoProParamSet,
GostR3411-94-Digest
FROM GostR3411-94-DigestSyntax gostR3411-94-DigestSyntax
AlgorithmIdentifier, ALGORITHM-IDENTIFIER
AlgorithmIdentifier
FROM Cryptographic-Gost-Useful-Definitions
cryptographic-Gost-Useful-Definitions PKIX1Explicit88 {iso(1) identified-organization(3)
dod(6) internet(1) security(5) mechanisms(5) pkix(7)
id-mod(0) id-pkix1-explicit-88(1)}
;
-- GOST R 34.11-94 Cryptographic Parameters Set:
-- algorithm & parameters cryptographic parameter sets:
-- OID OIDs for Parameters Set parameter sets are imported from GostR3411-94-DigestSyntax GostR3411-94-DigestS
yntax
GostR3411-94-ParamSetParameters ::=
SEQUENCE {
hUZ Gost28147-89-UZ, -- S-Box for digest
h0 GostR3411-94-Digest -- start initial digest value
}
GostR3411-94-ParamSetAlgorithms ALGORITHM-IDENTIFIER ::= {
{ GostR3411-94-ParamSetParameters IDENTIFIED BY
id-GostR3411-94-TestParamSet
} |
{ GostR3411-94-ParamSetParameters IDENTIFIED BY
id-GostR3411-94-CryptoProParamSet
}
}
-- GOST R 34.11-94 Tests parameters parameter set
-- (GOST R 34.11-94 Annex A. Test vector)
gostR3411TestParamSetAI
AlgorithmIdentifier
{{ GostR3411-94-ParamSetAlgorithms }} ::=
{
algorithm
id-GostR3411-94-TestParamSet,
parameters
GostR3411-94-ParamSetParameters:{
hUZ
-- pi1 pi2 pi3 pi4 pi5 pi6 pi7 pi8
-- 4 E 5 7 6 4 D 1
-- A B 8 D C B B F
-- 9 4 1 A 7 A 4 D
-- 2 C D 1 1 0 1 0
-- D 6 A 0 5 7 3 5
-- 8 D 3 8 F 2 F 7
-- 0 F 4 9 D 1 5 A
-- E A 2 F 8 D 9 4
-- 6 2 E E 4 3 0 9
-- B 3 F 4 A 6 A 2
-- 1 8 C 6 9 8 E 3
-- C 1 7 C E 5 7 E
-- 7 0 6 B 0 9 6 6
-- F 7 0 2 3 C 8 B
-- 5 5 9 5 B F 2 8
-- 3 9 B 3 2 E C C
'4E5764D1AB8DCBBF941A7A4D2CD11010D6A057358D38F2F7
0F49D15AEA2F8D9462EE4309B3F4A6A218C698E3C17CE57E706B0966F7023C8B559
5BF2839B32ECC'H,
'4E5764D1AB8DCBBF941A7A4D2CD11010D6A057358
D38F2F70F49D15AEA2F8D9462EE4309B3F4A6A218C698E3C17CE57E706B0966F702
3C8B5595BF2839B32ECC'H,
h0 '000000000000000000000000000000000000000000000000
0000000000000000'H '00000000000000000000000000000000000000000
00000000000000000000000'H
}
}
-- CryptoPro parameters
gostR3411CryptoProParamSetAI
AlgorithmIdentifier
{{ GostR3411-94-ParamSetAlgorithms }} ::=
{
algorithm
id-GostR3411-94-CryptoProParamSet,
parameters
GostR3411-94-ParamSetParameters:{
hUZ
-- pi1 pi2 pi3 pi4 pi5 pi6 pi7 pi8
-- A 5 7 4 7 7 D 1
-- 4 F F A 6 6 E 3
-- 5 4 C 7 4 2 4 A
-- 6 0 E C B 4 1 9
-- 8 2 9 0 9 D 7 5
-- 1 D 4 F C 9 0 B
-- 3 B 1 2 2 F 5 4
-- 7 9 0 8 A 0 A F
-- D 1 3 E 1 A 3 8
-- C 7 B 1 8 1 C 6
-- E 6 5 6 0 5 8 7
-- 0 3 2 5 E B F E
-- 9 C 6 D F 8 6 D
-- 2 E A B D E 2 0
-- B A 8 9 3 C 9 2
-- F 8 D 3 5 3 B C
'A57477D14FFA66E354C7424A60ECB41982909D751D4FC90B3B122F5
47908A0AFD13E1A38C7B181C6E65605870325EBFE9C6DF86D2EABDE20BA893C92F8
D353BC'H,
'A57477D14FFA66E354C7424A60ECB41982909D751
D4FC90B3B122F547908A0AFD13E1A38C7B181C6E65605870325EBFE9C6DF86D2EAB
DE20BA893C92F8D353BC'H,
h0 '000000000000000000000000000000000000000000000000
0000000000000000'H '00000000000000000000000000000000000000000
00000000000000000000000'H
}
}
END -- GostR3411-94-ParamSetSyntax
8.5
10.6 GostR3410-94-PKISyntax
GostR3410-94-PKISyntax
{ iso(1) member-body(2) ru(643) rans(2) cryptopro(2)
other(1) modules(1) gostR3410-94-PKISyntax(2) 1 }
DEFINITIONS ::=
BEGIN
-- EXPORTS All --
-- The types and values defined in this module are exported for
-- use in the other ASN.1 modules contained within the Russian
-- Cryptography "GOST" & "GOST R" Specifications, and for the use
-- of other applications which will use them to access Russian
-- Cryptography services. Other applications may use them for
-- their own purposes, but this will not constrain extensions and
-- modifications needed to maintain or improve the Russian
-- Cryptography service.
IMPORTS
id-CryptoPro-algorithms,
id-CryptoPro-signs, id-CryptoPro-exchanges,
gost28147-89-EncryptionSyntax,
gostR3411-94-DigestSyntax, ALGORITHM-IDENTIFIER,
cryptographic-Gost-Useful-Definitions
FROM Cryptographic-Gost-Useful-Definitions
{ iso(1) member-body(2) ru(643) rans(2)
cryptopro(2) other(1) modules(1)
cryptographic-Gost-Useful-Definitions(0) 1 }
id-Gost28147-89-TestParamSet,
id-Gost28147-89-CryptoPro-A-ParamSet,
id-Gost28147-89-CryptoPro-B-ParamSet,
id-Gost28147-89-CryptoPro-C-ParamSet,
id-Gost28147-89-CryptoPro-D-ParamSet,
id-Gost28147-89-CryptoPro-Simple-A-ParamSet,
id-Gost28147-89-CryptoPro-Simple-B-ParamSet,
id-Gost28147-89-CryptoPro-Simple-C-ParamSet,
id-Gost28147-89-CryptoPro-Simple-D-ParamSet
FROM Gost28147-89-EncryptionSyntax
gost28147-89-EncryptionSyntax
id-GostR3411-94-TestParamSet,
id-GostR3411-94-CryptoProParamSet
FROM GostR3411-94-DigestSyntax gostR3411-94-DigestSyntax
AlgorithmIdentifier, ALGORITHM-IDENTIFIER
FROM Cryptographic-Gost-Useful-Definitions
cryptographic-Gost-Useful-Definitions
;
-- GOST R 34.10-94 OIDs
id-GostR3410-94 OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms gostR3410-94(20) }
id-GostR3411-94-with-GostR3410-94 OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms
gostR3411-94-with-gostR3410-94(4) }
-- GOST R 34.10-94 Public Key Cryptographic Parameters Set public key parameter set OIDs
id-GostR3410-94-TestParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-signs test(0) }
id-GostR3410-94-CryptoPro-A-ParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-signs cryptopro-A(2) }
id-GostR3410-94-CryptoPro-B-ParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-signs cryptopro-B(3) }
id-GostR3410-94-CryptoPro-C-ParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-signs cryptopro-C(4) }
id-GostR3410-94-CryptoPro-D-ParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-signs cryptopro-D(5) }
id-GostR3410-94-CryptoPro-XchA-ParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-exchanges cryptopro-XchA(1) }
id-GostR3410-94-CryptoPro-XchB-ParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-exchanges cryptopro-XchB(2) }
id-GostR3410-94-CryptoPro-XchC-ParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-exchanges cryptopro-XchC(3) }
-- GOST R 34.10-94 Data Types data types
GostR3410-94-CertificateSignature ::=
BIT STRING ( SIZE(256..512) )
GostR3410-94-PublicKeyOctetString ::=
OCTET STRING ( SIZE(
64 | -- Only for tests use testing purposes
128
) )
GostR3410-94-PublicKey ::=
BIT STRING ( SIZE(16..1048) )
-- Container for GostR3410-94-PublicKeyOctetString GostR3410-94-PublicKeyOcte
tString
GostR3410-94-PublicKeyParameters ::=
SEQUENCE {
publicKeyParamSet
OBJECT IDENTIFIER (
id-GostR3410-94-TestParamSet | -- Only for tests use
testing purposes
id-GostR3410-94-CryptoPro-A-ParamSet |
id-GostR3410-94-CryptoPro-B-ParamSet |
id-GostR3410-94-CryptoPro-C-ParamSet |
id-GostR3410-94-CryptoPro-D-ParamSet |
id-GostR3410-94-CryptoPro-XchA-ParamSet |
id-GostR3410-94-CryptoPro-XchB-ParamSet |
id-GostR3410-94-CryptoPro-XchC-ParamSet
),
digestParamSet
OBJECT IDENTIFIER (
id-GostR3411-94-TestParamSet | -- Only for tests use
testing purposes
id-GostR3411-94-CryptoProParamSet
),
encryptionParamSet
OBJECT IDENTIFIER (
id-Gost28147-89-TestParamSet | -- Only for tests use
testing purposes
id-Gost28147-89-CryptoPro-A-ParamSet |
id-Gost28147-89-CryptoPro-B-ParamSet |
id-Gost28147-89-CryptoPro-C-ParamSet |
id-Gost28147-89-CryptoPro-D-ParamSet |
id-Gost28147-89-CryptoPro-Simple-A-ParamSet |
id-Gost28147-89-CryptoPro-Simple-B-ParamSet |
id-Gost28147-89-CryptoPro-Simple-C-ParamSet |
id-Gost28147-89-CryptoPro-Simple-D-ParamSet
) OPTIONAL
}
GostR3410-94-PublicKeyAlgorithms ALGORITHM-IDENTIFIER ::= {
{ GostR3410-94-PublicKeyParameters IDENTIFIED BY
id-GostR3410-94 }
}
GostR3410-94-CertificateSignatureAlgorithms
ALGORITHM-IDENTIFIER ::= {
{ NULL IDENTIFIED BY
id-GostR3411-94-with-GostR3410-94 } |
{ GostR3410-94-PublicKeyParameters IDENTIFIED BY
id-GostR3411-94-with-GostR3410-94 }
}
END -- GostR3410-94-PKISyntax
8.6
10.7 GostR3410-94-ParamSetSyntax
GostR3410-94-ParamSetSyntax
{ iso(1) member-body(2) ru(643) rans(2) cryptopro(2)
other(1) modules(1) gostR3410-94-ParamSetSyntax(8) 1 }
DEFINITIONS ::=
BEGIN
-- EXPORTS All --
-- The types and values defined in this module are exported for
-- use in the other ASN.1 modules contained within the Russian
-- Cryptography "GOST" & "GOST R" Specifications, and for the use
-- of other applications which will use them to access Russian
-- Cryptography services. Other applications may use them for
-- their own purposes, but this will not constrain extensions and
-- modifications needed to maintain or improve the Russian
-- Cryptography service.
IMPORTS
id-CryptoPro-algorithms,
id-CryptoPro-signs, id-CryptoPro-exchanges,
gostR3410-94-PKISyntax, ALGORITHM-IDENTIFIER,
cryptographic-Gost-Useful-Definitions
FROM Cryptographic-Gost-Useful-Definitions
{ iso(1) member-body(2) ru(643) rans(2)
cryptopro(2) other(1) modules(1)
cryptographic-Gost-Useful-Definitions(0) 1 }
id-GostR3410-94,
id-GostR3410-94-TestParamSet,
id-GostR3410-94-CryptoPro-A-ParamSet,
id-GostR3410-94-CryptoPro-B-ParamSet,
id-GostR3410-94-CryptoPro-C-ParamSet,
id-GostR3410-94-CryptoPro-D-ParamSet,
id-GostR3410-94-CryptoPro-XchA-ParamSet,
id-GostR3410-94-CryptoPro-XchB-ParamSet,
id-GostR3410-94-CryptoPro-XchC-ParamSet
FROM GostR3410-94-PKISyntax gostR3410-94-PKISyntax
AlgorithmIdentifier, ALGORITHM-IDENTIFIER
AlgorithmIdentifier
FROM Cryptographic-Gost-Useful-Definitions
cryptographic-Gost-Useful-Definitions PKIX1Explicit88 {iso(1) identified-organization(3)
dod(6) internet(1) security(5) mechanisms(5) pkix(7)
id-mod(0) id-pkix1-explicit-88(1)}
;
-- GOST R 34.10-94 Public Key Cryptographic Parameters Set:
-- algorithm & parameters public key parameter sets:
-- OID OIDs for Parameters Set parameter sets are imported from GostR3410-94-PKISyntax GostR3410-94-PKISynt
ax
GostR3410-94-ParamSetParameters ::=
SEQUENCE {
t INTEGER (512 | 1024), -- 512 - only for tests use testing p
urposes
p INTEGER (
167597599124282463744675312477573076593492072757404917221
5445180465220503759193372100234287270862928461253982273310756356719
235351493321243304206125760513
1675975991242824637446753124775730765934920
7275740491722154451804652205037591933721002342872708629284612539822
73310756356719235351493321243304206125760513
..
134078079299425970995740249982058461274793658205923933777
2356144372176403007354697680187429816690342769003185818648605085375
3882811946569946433649006084095
|
112355820928894744233081574424314045851123561183894160795
8938007235829223784381019579427983265047100132000711749196208485367
4360550901038905802964414967132773610493339054092829768888725077880
8824658176845053128605523844176464039300921195694088017023227094069
17786643639996702871154982269052209770601514008577
1340780792994259709957402499820584612747936
5820592393377723561443721764030073546976801874298166903427690031858
186486050853753882811946569946433649006084095
|
1123558209288947442330815744243140458511235
6118389416079589380072358292237843810195794279832650471001320007117
4919620848536743605509010389058029644149671327736104933390540928297
6888872507788088246581768450531286055238441764640393009211956940880
1702322709406917786643639996702871154982269052209770601514008577
..
179769313486231590772930519078902473361797697894230657273
4300811577326758055009631327084773224075360211201138798713933576587
8976881441662249284743063947412437776789342486548527630221960124609
4119453082952085005768838150682342462881473913110540827237163350510
684586298239947245938479716304835356329624224137215
1797693134862315907729305190789024733617976
9789423065727343008115773267580550096313270847732240753602112011387
9871393357658789768814416622492847430639474124377767893424865485276
3022196012460941194530829520850057688381506823424628814739131105408
27237163350510684586298239947245938479716304835356329624224137215
), -- 2^509 < p < 2^512 or 2^1020 < p
< 2^1024
q INTEGER (
289480223093290488558927462521719769633174961664101410098
64396001978282409985
2894802230932904885589274625217197696331749
6166410141009864396001978282409985
..
115792089237316195423570985008687907853269984665640564039
457584007913129639935
1157920892373161954235709850086879078532699
84665640564039457584007913129639935
), -- 2^254 < q < 2^256
a INTEGER (
2
..
179769313486231590772930519078902473361797697894230657273
4300811577326758055009631327084773224075360211201138798713933576587
8976881441662249284743063947412437776789342486548527630221960124609
4119453082952085005768838150682342462881473913110540827237163350510
684586298239947245938479716304835356329624224137214
1797693134862315907729305190789024733617976
9789423065727343008115773267580550096313270847732240753602112011387
9871393357658789768814416622492847430639474124377767893424865485276
3022196012460941194530829520850057688381506823424628814739131105408
27237163350510684586298239947245938479716304835356329624224137214
), -- 1 < a < p-1 < 2^1024-1
validationAlgorithm
AlgorithmIdentifier OPTIONAL
-- {{ GostR3410-94-ValidationAlgorithms }} OPTIONAL
}
GostR3410-94-ParamSetAlgorithm ALGORITHM-IDENTIFIER ::= {
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-TestParamSet } |
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-CryptoPro-A-ParamSet } |
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-CryptoPro-B-ParamSet } |
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-CryptoPro-C-ParamSet } |
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-CryptoPro-D-ParamSet } |
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-CryptoPro-XchA-ParamSet }
|
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-CryptoPro-XchB-ParamSet }
|
{ GostR3410-94-ParamSetParameters IDENTIFIED BY
id-GostR3410-94-CryptoPro-XchC-ParamSet }
}
-- GOST R 34.10-94 validation/constructor
id-GostR3410-94-a OBJECT IDENTIFIER ::=
{ id-GostR3410-94 a(1) }
id-GostR3410-94-aBis OBJECT IDENTIFIER ::=
{ id-GostR3410-94 aBis(2) }
id-GostR3410-94-b OBJECT IDENTIFIER ::=
{ id-GostR3410-94 b(3) }
id-GostR3410-94-bBis OBJECT IDENTIFIER ::=
{ id-GostR3410-94 bBis(4) }
GostR3410-94-ValidationParameters ::=
SEQUENCE {
t INTEGER (512 | 1024), -- 512 - only for tests use testing p
urposes
x0 INTEGER (0 .. 65535),
c INTEGER (0 .. 65535),
d INTEGER (
2
..
179769313486231590772930519078902473361797697894230657273
4300811577326758055009631327084773224075360211201138798713933576587
8976881441662249284743063947412437776789342486548527630221960124609
4119453082952085005768838150682342462881473913110540827237163350510
684586298239947245938479716304835356329624224137214
1797693134862315907729305190789024733617976
9789423065727343008115773267580550096313270847732240753602112011387
9871393357658789768814416622492847430639474124377767893424865485276
3022196012460941194530829520850057688381506823424628814739131105408
27237163350510684586298239947245938479716304835356329624224137214
) -- 1 < d < p-1 < 2^1024-1
OPTIONAL
}
GostR3410-94-ValidationBisParameters ::=
SEQUENCE {
t INTEGER (512 | 1024), -- 512 - only for tests use testing p
urposes
x0 INTEGER (0 .. 4294967295),
c INTEGER (0 .. 4294967295),
d INTEGER (
2
..
179769313486231590772930519078902473361797697894230657273
4300811577326758055009631327084773224075360211201138798713933576587
8976881441662249284743063947412437776789342486548527630221960124609
4119453082952085005768838150682342462881473913110540827237163350510
684586298239947245938479716304835356329624224137214
1797693134862315907729305190789024733617976
9789423065727343008115773267580550096313270847732240753602112011387
9871393357658789768814416622492847430639474124377767893424865485276
3022196012460941194530829520850057688381506823424628814739131105408
27237163350510684586298239947245938479716304835356329624224137214
) -- 1 < d < p-1 < 2^1024-1
OPTIONAL
}
GostR3410-94-ValidationAlgorithms ALGORITHM-IDENTIFIER ::= {
{ GostR3410-94-ValidationParameters IDENTIFIED BY
id-GostR3410-94-a } |
{ GostR3410-94-ValidationBisParameters IDENTIFIED BY
id-GostR3410-94-aBis } |
{ GostR3410-94-ValidationParameters IDENTIFIED BY
id-GostR3410-94-b } |
{ GostR3410-94-ValidationBisParameters IDENTIFIED BY
id-GostR3410-94-bBis }
}
-- GOST R 34.10-94 Keys Parameters keys parameter sets
-- GOST R 34.10-94 Tests parameters parameter set
-- (GOST R 34.10-94 Annex A. Test vector)
gostR3410-94-TestParamSetAI
AlgorithmIdentifier {{
GostR3410-94-ParamSetAlgorithm
}} ::=
{
algorithm
id-GostR3410-94-TestParamSet,
parameters
GostR3410-94-ParamSetParameters:{
t 512,
p 1249155479661639739200729184536168101998078908
4728846304013646795466302633346425772369277064638881858428879662416
202925770315709968465491470753112581700067, 124915547966163973920072918453616810199
8078908472884630401364679546630263334642577236927706463888185842887
9662416202925770315709968465491470753112581700067,
q 6900839799123747821852952871175357885746435622
1556536838757636132646301588781, 690083979912374782185295287117535788574
64356221556536838757636132646301588781,
a 8305821956779628193852750508811757244889982632
8218435214910357131733714685287987538317442674072307045274610623217
32669034432746173786958142572929772413468, 830582195677962819385275050881175724488
9982632821843521491035713173371468528798753831744267407230704527461
062321732669034432746173786958142572929772413468,
validationAlgorithm {
algorithm
id-GostR3410-94-a,
parameters
GostR3410-94-ValidationParameters:
{
t 512,
x0 24265,
c 29505,
d 2
}
}
}
}
-- CryptoPro parameters
gostR3410-94-CryptoPro-A-ParamSetAI
AlgorithmIdentifier {{
GostR3410-94-ParamSetAlgorithm
}} ::=
{
algorithm
id-GostR3410-94-CryptoPro-A-ParamSet,
parameters
GostR3410-94-ParamSetParameters:{
t 1024,
p 1270212482889324174659070427771764435257876535
0891653581281750726570503126098509849742318833348340118092599999512
0988934130659205614996724254121049274349357074920312769561451689224
1105793112488126102296785346384016935200132889950003622606842227508
13532307004517341633685004541062586971416883686778842537820383, 127021248288932417465907042777176443525
7876535089165358128175072657050312609850984974231883334834011809259
9999512098893413065920561499672425412104927434935707492031276956145
1689224110579311248812610229678534638401693520013288995000362260684
2227508135323070045173416336850045410625869714168836867788425378203
83,
q 6836319614495570078444416561182725289510217088
8761442055095051287550314083023, 683631961449557007844441656118272528951
02170888761442055095051287550314083023,
a 1009979067550553047720818155359252248698410825
7205345787482351587557714799052927277724415285269929879648335669968
2842027972896052747173175480590485607134746852141928680912561502802
2221856475391909026561163678472701450190667942909301854462163997308
72221732889830323194097355403213400972588322876850946740663962, 100997906755055304772081815535925224869
8410825720534578748235158755771479905292727772441528526992987964833
5669968284202797289605274717317548059048560713474685214192868091256
1502802222185647539190902656116367847270145019066794290930185446216
3997308722217328898303231940973554032134009725883228768509467406639
62,
validationAlgorithm {
algorithm
id-GostR3410-94-bBis,
parameters
GostR3410-94-ValidationBisParameters:
GostR3410-94-ValidationBisParameter
s: {
t 1024,
x0 1376285941,
c 3996757427
}
}
}
}
--
gostR3410-94-CryptoPro-B-ParamSetAI
AlgorithmIdentifier {{
GostR3410-94-ParamSetAlgorithm
}} ::=
{
algorithm
id-GostR3410-94-CryptoPro-B-ParamSet,
parameters
GostR3410-94-ParamSetParameters:{
t 1024,
p 1394548711991158256014096551076907131070417070
5992803179775800145437576535772298409412436852228823983303911468164
8076688236921220737322672160740747771700911134550432053804647694904
6861201130878162407401848004770471573366629262494235712488239685422
21753660143391485680840520336859458494803187341288580489525163, 139454871199115825601409655107690713107
0417070599280317977580014543757653577229840941243685222882398330391
1468164807668823692122073732267216074074777170091113455043205380464
7694904686120113087816240740184800477047157336662926249423571248823
9685422217536601433914856808405203368594584948031873412885804895251
63,
q 7988514166341097689762711893575632374730795191
6507639758300472692338873533959, 798851416634109768976271189357563237473
07951916507639758300472692338873533959,
a 4294182614861580414387344773795550239267234596
8607143066798112994089471231420027060385216699563848719957657284814
8989097707594626134376694563648827303708389347910808359326479767786
0191534347440096103423131667257868692048219493287863336020338479709
2684342247621055760235016132614780652761028509445403338652341, 429418261486158041438734477379555023926
7234596860714306679811299408947123142002706038521669956384871995765
7284814898909770759462613437669456364882730370838934791080835932647
9767786019153434744009610342313166725786869204821949328786333602033
8479709268434224762105576023501613261478065276102850944540333865234
1,
validationAlgorithm {
algorithm
id-GostR3410-94-bBis,
parameters
GostR3410-94-ValidationBisParameters:
GostR3410-94-ValidationBisParameter
s: {
t 1024,
x0 1536654555,
c 1855361757,
d
14408629386140014567655490293928205654785780
2241461782996702017713059974755104394739915140611528479102443906273
5788342744854120601660303926203867703556828005895720381811489539897
6594425537561271800850306 14408629386140014567655
4902939282056547857802241461782996702017713059974755104394739915140
6115284791024439062735788342744854120601660303926203867703556828005
8957203818114895398976594425537561271800850306
}
}
}
}
--
gostR3410-94-CryptoPro-C-ParamSetAI
AlgorithmIdentifier {{
GostR3410-94-ParamSetAlgorithm
}} ::=
{
algorithm
id-GostR3410-94-CryptoPro-C-ParamSet,
parameters
GostR3410-94-ParamSetParameters:{
t 1024,
p 1106246792335119630405189524170170402485862954
8198313837741963962985843959489706089561702242106285255603278638246
7166554392976544029218447478930795186699928278807921929927011428546
5514338758063771104435342935540667126530349962770993207157743542287
62128367184370370914135017194504580505029177050363451780493801, 110624679233511963040518952417017040248
5862954819831383774196396298584395948970608956170224210628525560327
8638246716655439297654402921844747893079518669992827880792192992701
1428546551433875806377110443534293554066712653034996277099320715774
3542287621283671843703709141350171945045805050291770503634517804938
01,
q 1134688611998193505648682333788751980432679477
76488510997961231672532899549103, 113468861199819350564868233378875198043
267947776488510997961231672532899549103,
a 8165527179708810160178931914153003482262544051
3533581624682494676818766212834782128842865458440139551426222087723
4850237228680222750095022248278662017444940216977164820083536398202
2980248926204808986993355080643323135297253322088194568951085155178
1002210034593705882910730711865530059621499368407371287108323, 816552717970881016017893191415300348226
2544051353358162468249467681876621283478212884286545844013955142622
2087723485023722868022275009502224827866201744494021697716482008353
6398202298024892620480898699335508064332313529725332208819456895108
5155178100221003459370588291073071186553005962149936840737128710832
3,
validationAlgorithm {
algorithm
id-GostR3410-94-bBis,
parameters
GostR3410-94-ValidationBisParameters:
GostR3410-94-ValidationBisParameter
s: {
t 1024,
x0 113275885,
c 3037364845,
d 9175906676429839327
}
}
}
}
--
gostR3410-94-CryptoPro-D-ParamSetAI
AlgorithmIdentifier {{
GostR3410-94-ParamSetAlgorithm
}} ::=
{
algorithm
id-GostR3410-94-CryptoPro-D-ParamSet,
parameters
GostR3410-94-ParamSetParameters:{
t 1024,
p 9054576496219299659042909587746253156113056083
9073897669714048125244222625125560544746208559960915707867135849550
2367419155841859906278010664658095100957847139898194138208715964648
9144930534079207370788905204827306230388377677101736648382398574828
7878912864712014604743266126978496936655180738644364978932149, 905457649621929965904290958774625315611
3056083907389766971404812524422262512556054474620855996091570786713
5849550236741915584185990627801066465809510095784713989819413820871
5964648914493053407920737078890520482730623038837767710173664838239
8574828787891286471201460474326612697849693665518073864436497893214
9,
q 1089884357963535069123745914989721926201904875
57619582334771735390599299211593, 108988435796353506912374591498972192620
190487557619582334771735390599299211593,
a 7569766110217073017821287578016106280855283803
1095711588295742814192085325890416600170178598582163414003714687551
4127944005628789352666307543926770145985821033659831191739244732511
2254647122523868033159027077276687153434760863504720252982827271461
6901250506168582383843663310897774635410130339267237432548337, 756976611021707301782128757801610628085
5283803109571158829574281419208532589041660017017859858216341400371
4687551412794400562878935266630754392677014598582103365983119173924
4732511225464712252386803315902707727668715343476086350472025298282
7271461690125050616858238384366331089777463541013033926723743254833
7,
validationAlgorithm {
algorithm
id-GostR3410-94-bBis,
parameters
GostR3410-94-ValidationBisParameters:
GostR3410-94-ValidationBisParameter
s: {
t 1024,
x0 333089693,
c 2699681355,
d
69158877639013014811917446652402788947864438
22142755842460366243252 69158877639013014811917
44665240278894786443822142755842460366243252
}
}
}
}
--
gostR3410-94-CryptoPro-XchA-ParamSetAI
AlgorithmIdentifier {{
GostR3410-94-ParamSetAlgorithm
}} ::=
{
algorithm
id-GostR3410-94-CryptoPro-XchA-ParamSet,
parameters
GostR3410-94-ParamSetParameters:{
t 1024,
p 1420117415975634811963682860223180897432761383
9524373876287257344192745939351271897363116607846760036084894662356
7625795282774719212241929071046134208380636394084512691828894000571
5246254452957693493567527289568315417754417631393844571917550968471
07846595662547942312293338483924514339614727760681880609734239, 142011741597563481196368286022318089743
2761383952437387628725734419274593935127189736311660784676003608489
4662356762579528277471921224192907104613420838063639408451269182889
4000571524625445295769349356752728956831541775441763139384457191755
0968471078465956625479423122933384839245143396147277606818806097342
39,
q 9177152989655460594558814901838275021729685839
3520724172743325725474374979801, 917715298965546059455881490183827502172
96858393520724172743325725474374979801,
a 1335318132727206734338595199483190012179423759
6784748689948235959936964252873471246159040332773182141032801252925
3871914788598993103310567744136196364803064721377826656898686468463
2777101508094011826087702016153249904683329312949209127762411378780
30224355746606283971659376426832674269780880061631528163475887, 133531813272720673433859519948319001217
9423759678474868994823595993696425287347124615904033277318214103280
1252925387191478859899310331056774413619636480306472137782665689868
6468463277710150809401182608770201615324990468332931294920912776241
1378780302243557466062839716593764268326742697808800616315281634758
87,
validationAlgorithm {
algorithm
id-GostR3410-94-bBis,
parameters
GostR3410-94-ValidationBisParameters:
GostR3410-94-ValidationBisParameter
s: {
t 1024,
x0 3495862036,
c 1177570399,
d
35478896102409188951396470647720832819623918
6534141058228233456746622201867258017799725121699052644608624377641
60334831107459 35478896102409188951396
4706477208328196239186534141058228233456746622201867258017799725121
69905264460862437764160334831107459
}
}
}
}
--
gostR3410-94-CryptoPro-XchB-ParamSetAI
AlgorithmIdentifier {{
GostR3410-94-ParamSetAlgorithm
}} ::=
{
algorithm
id-GostR3410-94-CryptoPro-XchB-ParamSet,
parameters
GostR3410-94-ParamSetParameters:{
t 1024,
p 1028946126624994859676552074360530315217970499
9893048882484132448474923022758470167998871003604670704877377286176
1712276940986331539089568784129110109512690503345393869871295783467
2572648683417200196629860561193666752429682367397084815179752036423
59573653368957392061769855284593965042530895046088067160269433, 102894612662499485967655207436053031521
7970499989304888248413244847492302275847016799887100360467070487737
7286176171227694098633153908956878412911010951269050334539386987129
5783467257264868341720019662986056119366675242968236739708481517975
2036423595736533689573920617698552845939650425308950460880671602694
33,
q 9109671391802626916582318050603555673628769498
1825930883887968885281641595199, 910967139180262691658231805060355567362
87694981825930883887968885281641595199,
a 8890864727828423151699995801875757891031463338
6525791400519736593048131440685857067369829407947744496306656291505
5036082523994437900272386749145996230867832228661977543992816745254
8232986298598753575466286051738837854736167685769017780335804511440
7733371962538423532919394477873664752824509986617878992443177, 889086472782842315169999580187575789103
1463338652579140051973659304813144068585706736982940794774449630665
6291505503608252399443790027238674914599623086783222866197754399281
6745254823298629859875357546628605173883785473616768576901778033580
4511440773337196253842353291939447787366475282450998661787899244317
7,
validationAlgorithm {
algorithm
id-GostR3410-94-bBis,
parameters
GostR3410-94-ValidationBisParameters:
GostR3410-94-ValidationBisParameter
s: {
t 1024,
x0 2046851076,
c 3541716983,
d
57332667610989476056615969728891533566058787
317492748441827236576904274546146 57332667610989476056615
969728891533566058787317492748441827236576904274546146
}
}
}
}
--
gostR3410-94-CryptoPro-XchC-ParamSetAI
AlgorithmIdentifier {{
GostR3410-94-ParamSetAlgorithm
}} ::=
{
algorithm
id-GostR3410-94-CryptoPro-XchC-ParamSet,
parameters
GostR3410-94-ParamSetParameters:{
t 1024,
p 1246996366993477513607147265794064436203408861
3950559892172484557299870737698999651480662364723992859320868822848
7511654383509433276647222625940615560580450040947211826027729977563
5402371690630448079715771649447778447000597419032457722226253269698
37444652835352729304393746106576383349151001715930924115499549, 124699636699347751360714726579406443620
3408861395055989217248455729987073769899965148066236472399285932086
8822848751165438350943327664722262594061556058045004094721182602772
9977563540237169063044807971577164944777844700059741903245772222625
3269698374446528353527293043937461065763833491510017159309241154995
49,
q 6787876137336591234380295020065682527118129468
0501479431146754294748422492761, 678787613733659123438029502006568252711
81294680501479431146754294748422492761,
a 4430618464297584182473135030809859326863990650
1189417569952700748609973181426950235239623239110557450826919295792
8789387521018677047181623251027516953100431855964837602657827828194
2496055618936965865325513137194483136247773653468410118796740709840
8254969979375560722345106704721086025979309968763193072908334, 443061846429758418247313503080985932686
3990650118941756995270074860997318142695023523962323911055745082691
9295792878938752101867704718162325102751695310043185596483760265782
7828194249605561893696586532551313719448313624777365346841011879674
0709840825496997937556072234510670472108602597930996876319307290833
4,
validationAlgorithm {
algorithm
id-GostR3410-94-bBis,
parameters
GostR3410-94-ValidationBisParameters:
GostR3410-94-ValidationBisParameter
s: {
t 1024,
x0 371898640,
c 2482514131,
d
39341170171309491894611690922945474002657559
0650016887148241594213466186452691964676993 39341170171309491894611
6909229454740026575590650016887148241594213466186452691964676993
}
}
}
}
END -- GostR3410-94-ParamSetSyntax
8.7
10.8 GostR3410-2001-PKISyntax
GostR3410-2001-PKISyntax
{ iso(1) member-body(2) ru(643) rans(2) cryptopro(2)
other(1) modules(1) gostR3410-2001-PKISyntax(9) 1 }
DEFINITIONS ::=
BEGIN
-- EXPORTS All --
-- The types and values defined in this module are exported for
-- use in the other ASN.1 modules contained within the Russian
-- Cryptography "GOST" & "GOST R" Specifications, and for the use
-- of other applications which will use them to access Russian
-- Cryptography services. Other applications may use them for
-- their own purposes, but this will not constrain extensions and
-- modifications needed to maintain or improve the Russian
-- Cryptography service.
IMPORTS
id-CryptoPro-algorithms,
id-CryptoPro-ecc-signs, id-CryptoPro-ecc-exchanges,
gost28147-89-EncryptionSyntax,
gostR3411-94-DigestSyntax, ALGORITHM-IDENTIFIER,
cryptographic-Gost-Useful-Definitions
FROM Cryptographic-Gost-Useful-Definitions
{ iso(1) member-body(2) ru(643) rans(2)
cryptopro(2) other(1) modules(1)
cryptographic-Gost-Useful-Definitions(0) 1 }
id-Gost28147-89-TestParamSet,
id-Gost28147-89-CryptoPro-A-ParamSet,
id-Gost28147-89-CryptoPro-B-ParamSet,
id-Gost28147-89-CryptoPro-C-ParamSet,
id-Gost28147-89-CryptoPro-D-ParamSet,
id-Gost28147-89-CryptoPro-Simple-A-ParamSet,
id-Gost28147-89-CryptoPro-Simple-B-ParamSet,
id-Gost28147-89-CryptoPro-Simple-C-ParamSet,
id-Gost28147-89-CryptoPro-Simple-D-ParamSet
FROM Gost28147-89-EncryptionSyntax
gost28147-89-EncryptionSyntax
id-GostR3411-94-TestParamSet,
id-GostR3411-94-CryptoProParamSet
FROM GostR3411-94-DigestSyntax gostR3411-94-DigestSyntax
AlgorithmIdentifier, ALGORITHM-IDENTIFIER
FROM Cryptographic-Gost-Useful-Definitions
cryptographic-Gost-Useful-Definitions
;
-- GOST R 34.10-2001 OIDs
id-GostR3410-2001 OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms gostR3410-2001(19) }
id-GostR3411-94-with-GostR3410-2001 OBJECT IDENTIFIER ::=
{ id-CryptoPro-algorithms
gostR3411-94-with-gostR3410-2001(3) }
-- GOST R 34.10-2001 Public Key Cryptographic Parameters Set public key parameter set OIDs
id-GostR3410-2001-TestParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-ecc-signs test(0) }
id-GostR3410-2001-CryptoPro-A-ParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-ecc-signs cryptopro-A(1) }
id-GostR3410-2001-CryptoPro-B-ParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-ecc-signs cryptopro-B(2) }
id-GostR3410-2001-CryptoPro-C-ParamSet OBJECT IDENTIFIER ::=
{ id-CryptoPro-ecc-signs cryptopro-C(3) }
id-GostR3410-2001-CryptoPro-XchA-ParamSet
OBJECT IDENTIFIER ::=
{ id-CryptoPro-ecc-exchanges cryptopro-XchA(0) }
id-GostR3410-2001-CryptoPro-XchB-ParamSet
OBJECT IDENTIFIER ::=
{ id-CryptoPro-ecc-exchanges cryptopro-XchB(1) }
-- GOST R 34.10-2001 Data Types
GostR3410-2001-CertificateSignature ::=
BIT STRING ( SIZE(256..512) )
GostR3410-2001-PublicKeyOctetString ::=
OCTET STRING ( SIZE(64) )
GostR3410-2001-PublicKey ::=
BIT STRING ( SIZE(16..524) )
-- Container for GostR3410-2001-PublicKeyOctetString GostR3410-2001-PublicKeyOc
tetString
GostR3410-2001-PublicKeyParameters ::=
SEQUENCE {
publicKeyParamSet
OBJECT IDENTIFIER (
id-GostR3410-2001-TestParamSet | -- Only for tests use
testing purposes
id-GostR3410-2001-CryptoPro-A-ParamSet |
id-GostR3410-2001-CryptoPro-B-ParamSet |
id-GostR3410-2001-CryptoPro-C-ParamSet |
id-GostR3410-2001-CryptoPro-XchA-ParamSet |
id-GostR3410-2001-CryptoPro-XchB-ParamSet
),
digestParamSet
OBJECT IDENTIFIER (
id-GostR3411-94-TestParamSet | -- Only for tests use
testing purposes
id-GostR3411-94-CryptoProParamSet
),
encryptionParamSet
OBJECT IDENTIFIER (
id-Gost28147-89-TestParamSet | -- Only for tests use
testing purposes
id-Gost28147-89-CryptoPro-A-ParamSet |
id-Gost28147-89-CryptoPro-B-ParamSet |
id-Gost28147-89-CryptoPro-C-ParamSet |
id-Gost28147-89-CryptoPro-D-ParamSet |
id-Gost28147-89-CryptoPro-Simple-A-ParamSet |
id-Gost28147-89-CryptoPro-Simple-B-ParamSet |
id-Gost28147-89-CryptoPro-Simple-C-ParamSet |
id-Gost28147-89-CryptoPro-Simple-D-ParamSet
) OPTIONAL
}
GostR3410-2001-PublicKeyAlgorithms ALGORITHM-IDENTIFIER ::= {
{ GostR3410-2001-PublicKeyParameters IDENTIFIED BY
id-GostR3410-2001 }
}
GostR3410-2001-CertificateSignatureAlgorithms
ALGORITHM-IDENTIFIER ::= {
{ NULL IDENTIFIED BY
id-GostR3411-94-with-GostR3410-2001 } |
{ GostR3410-2001-PublicKeyParameters IDENTIFIED BY
id-GostR3411-94-with-GostR3410-2001 }
}
END -- GostR3410-2001-PKISyntax
8.8
10.9 GostR3410-2001-ParamSetSyntax
GostR3410-2001-ParamSetSyntax
{ iso(1) member-body(2) ru(643) rans(2) cryptopro(2)
other(1) modules(1) gostR3410-2001-ParamSetSyntax(12) 1 }
DEFINITIONS ::=
BEGIN
-- EXPORTS All --
-- The types and values defined in this module are exported for
-- use in the other ASN.1 modules contained within the Russian
-- Cryptography "GOST" & "GOST R" Specifications, and for the use
-- of other applications which will use them to access Russian
-- Cryptography services. Other applications may use them for
-- their own purposes, but this will not constrain extensions and
-- modifications needed to maintain or improve the Russian
-- Cryptography service.
IMPORTS
id-CryptoPro-algorithms,
id-CryptoPro-ecc-signs, id-CryptoPro-ecc-exchanges,
gostR3410-2001-PKISyntax, ALGORITHM-IDENTIFIER,
cryptographic-Gost-Useful-Definitions
FROM Cryptographic-Gost-Useful-Definitions
{ iso(1) member-body(2) ru(643) rans(2)
cryptopro(2) other(1) modules(1)
cryptographic-Gost-Useful-Definitions(0) 1 }
id-GostR3410-2001,
id-GostR3410-2001-TestParamSet,
id-GostR3410-2001-CryptoPro-A-ParamSet,
id-GostR3410-2001-CryptoPro-B-ParamSet,
id-GostR3410-2001-CryptoPro-C-ParamSet,
id-GostR3410-2001-CryptoPro-XchA-ParamSet,
id-GostR3410-2001-CryptoPro-XchB-ParamSet
FROM GostR3410-2001-PKISyntax gostR3410-2001-PKISyntax
AlgorithmIdentifier, ALGORITHM-IDENTIFIER
AlgorithmIdentifier
FROM Cryptographic-Gost-Useful-Definitions
cryptographic-Gost-Useful-Definitions PKIX1Explicit88 {iso(1) identified-organization(3)
dod(6) internet(1) security(5) mechanisms(5) pkix(7)
id-mod(0) id-pkix1-explicit-88(1)}
;
GostR3410-2001-ParamSetParameters ::=
SEQUENCE {
a INTEGER (
1
..
115792089237316195423570985008687907853269984665640564039
457584007913129639935
1157920892373161954235709850086879078532699
84665640564039457584007913129639935
), -- 0 < a < p < 2^256
b INTEGER (
1
..
115792089237316195423570985008687907853269984665640564039
457584007913129639935
1157920892373161954235709850086879078532699
84665640564039457584007913129639935
), -- 0 < b < p < 2^256
p INTEGER (
289480223093290488558927462521719769633174961664101410098
64396001978282409985
2894802230932904885589274625217197696331749
6166410141009864396001978282409985
..
115792089237316195423570985008687907853269984665640564039
457584007913129639935
1157920892373161954235709850086879078532699
84665640564039457584007913129639935
), -- 2^254 < p < 2^256
q INTEGER (
289480223093290488558927462521719769633174961664101410098
64396001978282409985
2894802230932904885589274625217197696331749
6166410141009864396001978282409985
..
115792089237316195423570985008687907853269984665640564039
457584007913129639935
1157920892373161954235709850086879078532699
84665640564039457584007913129639935
), -- 2^254 < q < 2^256
x INTEGER (0
..
115792089237316195423570985008687907853269984665640564039
457584007913129639935
1157920892373161954235709850086879078532699
84665640564039457584007913129639935
), -- 0 < x < p < 2^256
y INTEGER (0
..
115792089237316195423570985008687907853269984665640564039
457584007913129639935
1157920892373161954235709850086879078532699
84665640564039457584007913129639935
) -- 0 < y < p < 2^256
}
-- GOST R 34.10-2001 Public Key Cryptographic Parameters Set:
-- algorithm & parameters public key parameter set:
-- OID OIDs for Parameters Set parameter sets are imported from GostR3410-2001-PKISyntax GostR3410-2001-PKISy
ntax
GostR3410-2001-ParamSetAlgorithm ALGORITHM-IDENTIFIER ::= {
{ GostR3410-2001-ParamSetParameters IDENTIFIED BY
id-GostR3410-2001-TestParamSet } |
{ GostR3410-2001-ParamSetParameters IDENTIFIED BY
id-GostR3410-2001-CryptoPro-A-ParamSet } |
{ GostR3410-2001-ParamSetParameters IDENTIFIED BY
id-GostR3410-2001-CryptoPro-B-ParamSet } |
{ GostR3410-2001-ParamSetParameters IDENTIFIED BY
id-GostR3410-2001-CryptoPro-C-ParamSet } |
{ GostR3410-2001-ParamSetParameters IDENTIFIED BY
id-GostR3410-2001-CryptoPro-XchA-ParamSet
} |
{ GostR3410-2001-ParamSetParameters IDENTIFIED BY
id-GostR3410-2001-CryptoPro-XchB-ParamSet
}
}
gostR3410-2001-TestParamSet
AlgorithmIdentifier {{
GostR3410-2001-ParamSetAlgorithm
}} ::=
{
algorithm
id-GostR3410-2001-TestParamSet,
parameters
GostR3410-2001-ParamSetParameters:{
a 7,
b 43308876546767276905765904595650931995942111794451
039583252968842033849580414, 4330887654676727690576590459565093199594211
1794451039583252968842033849580414,
-- 5FBFF498AA938CE739B8E022FBAFEF40563F6E6A
3472FC2A514C0CE9DAE23B7E
p 57896044618658097711785492504343953926634992332820
282019728792003956564821041, 5789604461865809771178549250434395392663499
2332820282019728792003956564821041,
-- 80000000000000000000000000000000000000000000000
00000000000000431 8000000000000000000000000000000000000000
000000000000000000000431
q 57896044618658097711785492504343953927082934583725
450622380973592137631069619, 5789604461865809771178549250434395392708293
4583725450622380973592137631069619,
-- 8000000000000000000000000000000150FE8A18
92976154C59CFC193ACCF5B3
x 2,
y 40189740565903750333544942293705977563573938990554
5080690979365213431566280 4018974056590375033354494229370597756357393
89905545080690979365213431566280
-- 8E2A8A0E65147D4BD6316030E16D19C85C97F0A9CA26712
2B96ABBCEA7E8FC8 8E2A8A0E65147D4BD6316030E16D19C85C97F0A9
CA267122B96ABBCEA7E8FC8
}
}
gostR3410-2001-CryptoPro-A-ParamSet
AlgorithmIdentifier {{
GostR3410-2001-ParamSetAlgorithm
}} ::=
{
algorithm
id-GostR3410-2001-CryptoPro-A-ParamSet,
parameters
GostR3410-2001-ParamSetParameters:{
a 11579208923731619542357098500868790785326998466564
0564039457584007913129639316, 1157920892373161954235709850086879078532699
84665640564039457584007913129639316,
-- -3 == p - 3
b 166,
-- a6
p 11579208923731619542357098500868790785326998466564
0564039457584007913129639319, 1157920892373161954235709850086879078532699
84665640564039457584007913129639319,
-- fffffffffffffffffffffffffffffffffffffffffffffff
ffffffffffffffd97 ffffffffffffffffffffffffffffffffffffffff
fffffffffffffffffffffd97
q 11579208923731619542357098500868790785307376290849
9243225378155805079068850323, 1157920892373161954235709850086879078530737
62908499243225378155805079068850323,
-- ffffffffffffffffffffffffffffffff6c611070
995ad10045841b09b761b893
x 1,
y 64033881142927202683649881450433473985931760268884
941288852745803908878638612 6403388114292720268364988145043347398593176
0268884941288852745803908878638612
-- 8d91e471e0989cda27df505a453f2b7635294f2ddf23e3b
122acc99c9e9f1e14 8d91e471e0989cda27df505a453f2b7635294f2d
df23e3b122acc99c9e9f1e14
}
}
gostR3410-2001-CryptoPro-B-ParamSet
AlgorithmIdentifier {{
GostR3410-2001-ParamSetAlgorithm
}} ::=
{
algorithm
id-GostR3410-2001-CryptoPro-B-ParamSet,
parameters
GostR3410-2001-ParamSetParameters:{
a 57896044618658097711785492504343953926634992332820
282019728792003956564823190, 5789604461865809771178549250434395392663499
2332820282019728792003956564823190,
-- -3 == p - 3
b 28091019353058090096996979000309560759124368558014
865957655842872397301267595, 2809101935305809009699697900030956075912436
8558014865957655842872397301267595,
-- 3e1af419a269a5f866a7d3c25c3df80ae979259373ff2b1
82f49d4ce7e1bbc8b 3e1af419a269a5f866a7d3c25c3df80ae9792593
73ff2b182f49d4ce7e1bbc8b
p 57896044618658097711785492504343953926634992332820
282019728792003956564823193, 5789604461865809771178549250434395392663499
2332820282019728792003956564823193,
-- 80000000000000000000000000000000000000000000000
00000000000000c99 8000000000000000000000000000000000000000
000000000000000000000c99
q 57896044618658097711785492504343953927102133160255
826820068844496087732066703, 5789604461865809771178549250434395392710213
3160255826820068844496087732066703,
-- 800000000000000000000000000000015f700cff
f1a624e5e497161bcc8a198f
x 1,
y 28792665814854611296992347458380284135028636778229
113005756334730996303888124 2879266581485461129699234745838028413502863
6778229113005756334730996303888124
-- 3fa8124359f96680b83d1c3eb2c070e5c545c9858d03ecf
b744bf8d717717efc 3fa8124359f96680b83d1c3eb2c070e5c545c985
8d03ecfb744bf8d717717efc
}
}
gostR3410-2001-CryptoPro-C-ParamSet
AlgorithmIdentifier {{
GostR3410-2001-ParamSetAlgorithm
}} ::=
{
algorithm
id-GostR3410-2001-CryptoPro-C-ParamSet,
parameters
GostR3410-2001-ParamSetParameters:{
a 70390085352083305199547718019018437841079516630045
180471284346843705633502616, 7039008535208330519954771801901843784107951
6630045180471284346843705633502616,
-- -3 == p - 3
b 32858,
-- 805a
p 70390085352083305199547718019018437841079516630045
180471284346843705633502619, 7039008535208330519954771801901843784107951
6630045180471284346843705633502619,
-- 9b9f605f5a858107ab1ec85e6b41c8aacf846e86789051d
37998f7b9022d759b 9b9f605f5a858107ab1ec85e6b41c8aacf846e86
789051d37998f7b9022d759b
q 70390085352083305199547718019018437840920882647164
081035322601458352298396601, 7039008535208330519954771801901843784092088
2647164081035322601458352298396601,
-- 9b9f605f5a858107ab1ec85e6b41c8aa582ca351
1eddfb74f02f3a6598980bb9
x 0,
y 29818893917731240733471273240314769927240550812383
695689146495261604565990247 2981889391773124073347127324031476992724055
0812383695689146495261604565990247
-- 41ece55743711a8c3cbf3783cd08c0ee4d4dc440d4641a8
f366e550dfdb3bb67 41ece55743711a8c3cbf3783cd08c0ee4d4dc440
d4641a8f366e550dfdb3bb67
}
}
gostR3410-2001-CryptoPro-ExA-ParamSet
AlgorithmIdentifier {{
GostR3410-2001-ParamSetAlgorithm
}} ::=
{
algorithm
id-GostR3410-2001-CryptoPro-XchA-ParamSet,
parameters
GostR3410-2001-ParamSetParameters:{
a 11579208923731619542357098500868790785326998466564
0564039457584007913129639316, 1157920892373161954235709850086879078532699
84665640564039457584007913129639316,
-- -3 == p - 3
b 166,
-- a6
p 11579208923731619542357098500868790785326998466564
0564039457584007913129639319, 1157920892373161954235709850086879078532699
84665640564039457584007913129639319,
-- fffffffffffffffffffffffffffffffffffffffffffffff
ffffffffffffffd97 ffffffffffffffffffffffffffffffffffffffff
fffffffffffffffffffffd97
q 11579208923731619542357098500868790785307376290849
9243225378155805079068850323, 1157920892373161954235709850086879078530737
62908499243225378155805079068850323,
-- ffffffffffffffffffffffffffffffff6c611070
995ad10045841b09b761b893
x 1,
y 64033881142927202683649881450433473985931760268884
941288852745803908878638612 6403388114292720268364988145043347398593176
0268884941288852745803908878638612
-- 8d91e471e0989cda27df505a453f2b7635294f2ddf23e3b
122acc99c9e9f1e14 8d91e471e0989cda27df505a453f2b7635294f2d
df23e3b122acc99c9e9f1e14
}
}
gostR3410-2001-CryptoPro-ExB-ParamSet
AlgorithmIdentifier {{
GostR3410-2001-ParamSetAlgorithm
}} ::=
{
algorithm
id-GostR3410-2001-CryptoPro-XchB-ParamSet,
parameters
GostR3410-2001-ParamSetParameters:{
a 70390085352083305199547718019018437841079516630045
180471284346843705633502616, 7039008535208330519954771801901843784107951
6630045180471284346843705633502616,
-- -3 == p - 3
b 32858,
-- 805a
p 70390085352083305199547718019018437841079516630045
180471284346843705633502619, 7039008535208330519954771801901843784107951
6630045180471284346843705633502619,
-- 9b9f605f5a858107ab1ec85e6b41c8aacf846e86789051d
37998f7b9022d759b 9b9f605f5a858107ab1ec85e6b41c8aacf846e86
789051d37998f7b9022d759b
q 70390085352083305199547718019018437840920882647164
081035322601458352298396601, 7039008535208330519954771801901843784092088
2647164081035322601458352298396601,
-- 9b9f605f5a858107ab1ec85e6b41c8aa582ca351
1eddfb74f02f3a6598980bb9
x 0,
y 29818893917731240733471273240314769927240550812383
695689146495261604565990247 2981889391773124073347127324031476992724055
0812383695689146495261604565990247
-- 41ece55743711a8c3cbf3783cd08c0ee4d4dc440d4641a8
f366e550dfdb3bb67 41ece55743711a8c3cbf3783cd08c0ee4d4dc440
d4641a8f366e550dfdb3bb67
}
}
END -- GostR3410-2001-ParamSetSyntax
9
11 References
[GOST28147] "Cryptographic Protection for Data Processing Sys-
tem", GOST 28147-89, Gosudarstvennyi Standard of
USSR, Government Committee of the USSR for Standards,
1989. (In Russian);
[GOSTR341094] "Information technology. Cryptographic Data Security.
Produce and check procedures of Electronic Digital
Signatures based on Asymmetric Cryptographic Algo-
rithm.", GOST R 34.10-94, Gosudarstvennyi Standard of
Russian Federation, Government Committee of the Rus-
sia for Standards, 1994. (In Russian);
[GOSTR34102001] "Information technology. Cryptographic data security.
Signature and verification processes of [electronic]
digital signature.", GOST R 34.10-2001, Gosudarstven-
nyi Standard of Russian Federation, Government Com-
mittee of the Russia for Standards, 2001. (In Rus-
sian);
[GOSTR341194] "Information technology. Cryptographic Data Security.
Hashing function.", GOST R 34.11-94, Gosudarstvennyi
Standard of Russian Federation, Government Committee
of the Russia for Standards, 1994. (In Russian);
[Schneier95] B. Schneier, Applied cryptography, second edition,
John Wiley & Sons, Inc., 1995;
[X.660] ITU-T Recommendation X.660 Information Technology -
ASN.1 encoding rules: Specification of Basic Encoding
Rules (BER), Canonical Encoding Rules (CER) and Dis-
tinguished Encoding Rules (DER), 1997.
[RFC 2119] Bradner, S., "Key Words for Use in RFCs to Indi-
cateRequirement Levels", BCP 14, RFC 2119, March
1997.
[HMAC] H. Krawczyk, M. Bellare, R. Canetti, "HMAC: Keyed-
Hashing for Message Authentication", RFC 2104 Febru-
ary 1997.
[TLS] The TLS Protocol Version 1.0. T. Dierks, C. Allen.
January 1999, RFC 2246.
[RFDSL] "Russian Federal Digital Signature Law", 10 Jan 2002
N1-FZ
[RFLLIC] "Russian Federal Law on Licensing of Selected Activ-
ity Categories", 08 Aug 2001 N 128-FZ
[CRYPTOLIC] "Russian Federal Goverment Regulation on Licensing of
Selected Activity Categories in Cryptography Area",
23 Sep 2002 N 691
12 Acknowledgments
This document was created in accordance with "Russian Cryptographic
Software Compatibility Agreement", signed by FGUE STC "Atlas",
CRYPTO-PRO, Factor-TC, MD PREI, Infotecs GmbH, SPRCIS (SPbRCZI),
Cryptocom, R-Alpha. The aim of this agreement is to achieve mutual
compatibility of the products and solutions.
The authors wish to thank:
Microsoft Corporation Russia for provided information about
company products and solutions, and also for technical consulting
in PKI.
RSA Security Russia and Demos Co Ltd for active collaboration and
critical help in creation of this document.
Russ Hously (Vigil Security, LLC, housley@vigilsec.com) and
Vasilij Sakharov (DEMOS Co Ltd, svp@dol.ru) for initiative,
creating this document.
This document is based on a contribution of CRYPTO-PRO Company. Any
substantial use of the text from this document must acknowledge
CRYPTO-PRO. CRYPTO-PRO requests that all material mentioning or
referencing this document identify this as "CRYPTO-PRO CPALGS".
Author's Addresses
Vladimir Popov
CRYPTO-PRO
38, Obraztsova,
Moscow, 127018, Russian Federation
EMail: vpopov@cryptopro.ru
Igor Kurepkin
CRYPTO-PRO
38, Obraztsova,
Moscow, 127018, Russian Federation
EMail: kure@cryptopro.ru
Serguei Leontiev
CRYPTO-PRO
38, Obraztsova,
Moscow, 127018, Russian Federation
EMail: lse@cryptopro.ru
Grigorij Chudov
CRYPTO-PRO
38, Obraztsova,
Moscow, 127018, Russian Federation
EMail: chudov@cryptopro.ru
Alexandr Afanasiev
Factor-TC
office 711, 14, Presnenskij val,
Moscow, 123557, Russian Federation
EMail: aaaf@factor-ts.ru
Nikolaj Nikishin
Infotecs GmbH
p/b 35, 80-5, Leningradskij prospekt,
Moscow, 125315, Russian Federation
EMail: nikishin@infotecs.ru
Boleslav Izotov
FGUE STC "Atlas"
38, Obraztsova,
Moscow, 127018, Russian Federation
EMail: izotov@stcnet.ru
Elena Minaeva
MD PREI
build 3, 6A, Vtoroj Troitskij per.,
Moscow, Russian Federation
EMail: evminaeva@mo.msk.ru
Serguei Murugov
R-Alpha
4/1, Raspletina,
Moscow, 123060, Russian Federation
EMail: msm@office.ru
Igori Ustinov
Cryptocom
office 239, 51, Leninskij prospekt,
Moscow, 119991, Russian Federation
EMail: igus@cryptocom.ru
Anatolij Erkin
SPRCIS (SPbRCZI)
1, Obrucheva,
St.Petersburg, 195220, Russian Federation
EMail: erkin@nevsky.net
Full Copyright Statement
Copyright (C) The Internet Society (2004). All Rights Reserved.
This document and translations of it may be copied and furnished to
others, and derivative works that comment on or otherwise explain it
or assist in its implementation may be prepared, copied, published
and distributed, in whole or in part, without restriction of any
kind, provided that the above copyright notice and this paragraph are
included on all such copies and derivative works. However, this
document itself may not be modified in any way, such as by removing
the copyright notice or references to the Internet Society or other
Internet organizations, except as needed for the purpose of
developing Internet standards in which case the procedures for
copyrights defined in the Internet Standards process must be
followed, or as required to translate it into languages other than
English.
The limited permissions granted above are perpetual and will not be
revoked by the Internet Society or its successors or assigns.
This document and the information contained herein is provided on an
"AS IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING
TASK FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING
BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION
HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.