GB/T 17902.1-2023Information technology - Security techniques - Digital signatures with appendix - Part 1: General (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules for Standardization Documents" drafting.

This document is Part 1 of GB/T 17902 "Information Technology Security Technology Digital Signature with Appendix". GB/T 17902 has The following parts have been published.

--- Part 1: Overview;

--- Part 2: Identity-based mechanisms;

--- Part 3: Certificate-based mechanism.

This document replaces GB/T 17902.1-1999 "Information Technology Security Technology Digital Signature with Appendix - Part 1: Overview Compared with GB/T 17902.1-1999, except for structural adjustment and editorial changes, the main technical changes are as follows.

--- Adjust the original "Overview" part to Chapter 5 (see Chapter 5, Chapter 3 of the 1999 edition);

--- Removed "Assignment" "Collision-Free Hash Function" "Deterministic" "Hash Token" "Hash Code" "Pre-Signed" "Randomize" "Random Terms such as "value", "signature equation", "signature function" and "assignment" (see Chapter 4 of the 1999 edition), added "collision-resistant hash function terms such as "number", "data element", "field", "hash code", "key pair" and "message" (see Chapter 3);

---Deleted symbols such as "recalculated hash token", "prepared partial message", "assignment", "pre-signature", "recalculated pre-signature" number and the legend of "comparison" (see Chapter 5 of the 1999 edition), added the legend of "optional data" (see 4.3), and added "Usual" content (see 4.2);

---Added the chapter "Binding Options of Signature Mechanism and Hash Function", which describes several types of options for binding signature mechanism and hash function (see Chapter 7);

--- Merge the content of the signature process into Chapter 9, and use a general model to describe the existing mechanism uniformly, which is more universal than the original content (see Chapter 9, Chapter 8 and Chapter 9 of the 1999 edition);

--- Merge the verification process into Chapter 10, and update the general model to describe the existing mechanism, which is more universal than the original content (see Chapter 10 Chapter 10, Chapter 9 of the 1999 edition).

This document is equivalent to ISO /IEC 14888-1:2008 "Information Technology Security Technology Digital Signature with Appendix Part 1: Overview".

The following minimal editorial changes have been made to this document.

---Chapter 10 The signature verification section adds a note for easy understanding.

Introduction

Digital signature mechanism is a kind of asymmetric cryptographic mechanism, which is widely used in entity authentication, data source authentication, data integrity and non-repudiation. Serve. There are two digital signature mechanisms.

--- If a message is required as part of the input during the verification process, this type of mechanism is called "digital signature with appendix", and the appendix counts The calculation needs to use the hash function;

---If all or part of the message is disclosed during the verification process, this type of mechanism is called "digital signature with message recovery", and the signature generates Completion and verification also use hash functions.

Digital signatures with appendices are regulated in GB/T 17902, digital signatures with message recovery are regulated in ISO 10118 Specifications, hash functions are specified in GB/T 18238 (all parts).

GB/T 17902 "Information Technology Security Technology Digital Signature with Appendix" consists of three parts.

--- Part 1: Overview. The purpose is to standardize the general framework and general model of digital signature with appendix.

--- Part 2: Identity-based mechanisms. The purpose is to standardize the identity-based digital signature mechanism with appendices.

--- Part 3: Certificate-based mechanism. The purpose is to standardize the digital signature mechanism based on the certificate.

1 Scope

GB/T 17902 specifies several digital signature mechanisms with appendices for signing messages of arbitrary length.

This document includes the general principles and requirements of digital signatures with appendices, as well as the definitions and definitions used in various parts of GB/T 17902. symbol.

Related technologies such as certificate and key management are outside the specification scope of this document. For more information of this kind, see GB/T 16264.8-2005[2], ISO /IEC 11770-3[8] and ISO /IEC 15945:2002[9].

2 Normative references

This document has no normative references.

3 Terms and Definitions

The following terms and definitions apply to this document.