GB/T 29829-2022Information security technology—Functionality and interface specification of cryptographic support platform for trusted computing (English PDF)

Foreword

This document is in accordance with the provisions of GB/T 1.1-2020 "Guidelines for Standardization Work Part 1: Structure and Drafting Rules of Standardization Documents" drafted.

This document replaces GB/T 29829-2013 "Information Security Technology Trusted Computing Cryptography Support Platform Function and Interface Specification", and Compared with GB/T 29829-2013, in addition to structural adjustment and editorial changes, the main technical content changes are as follows.

a) Changed "Terms, Definitions and Abbreviations", and added and changed the content of terms and definitions (see Chapter 3,.2013 edition of 3.1);

b) Chapter 4 "Abbreviations" was added and some contents were added and changed (see Chapter 4, 3.2 of the.2013 edition);

c) Changed the contents of "Platform Architecture" and "Functional Principles" and adjusted them to 6.1 and 6.2, and made some changes to the contents Changes (see 6.1 and 6.2, 4.1 and 4.3 of the.2013 edition);

d) Deleted the content of "Cryptographic Algorithm Requirements" (see 4.2 of the.2013 edition);

e) Added the content of "Overview of Trusted Computing Cryptography Support Platform" (see Chapter 5);

f) Deleted the content of "Trusted Computing Cryptography Support Platform Functional Service Interface" (Chapter 5 of the.2013 edition);

g) Added the content of "Trusted Cryptographic Module Interface" (see Chapter 7);

h) Added the implementation requirements for SM2 asymmetric encryption and decryption instructions (see 7.7);

i) Added the content of "verification method" (see Chapter 8);

j) Changed Appendix A (normative) "Data Structure" (see Appendix A).

Introduction

In order to meet the new needs of the growing trusted computing industry. This document focuses on the application of commercial cryptographic algorithms, and uses trusted computing technology as the core.

Based on the requirements, the function of the trusted computing cryptographic support platform is described; referring to the commercial cryptographic algorithms and trusted computing technology in my country in ISO The results adopted and applied in international standards define the interface form of trusted computing cryptography support platform. This document conforms to different application scenarios Trusted computing cryptographic support platform design requirements, compatible with various hardware platforms, host software systems, and application systems, to ensure the unification of industrial products.

The consistency and compatibility are used to guide the development and application of trusted computing related products in my country.

1 Scope

This document gives the system framework and functional principle of the trusted computing cryptography support platform, specifies the interface specification of the trusted cryptography module, describes the corresponding verification methods.

This document is applicable to the development, production, evaluation and application development of products related to the trusted computing cryptography support platform.

2 Normative references

The contents of the following documents constitute essential provisions of this document through normative references in the text. Among them, dated citations documents, only the version corresponding to that date applies to this document; for undated references, the latest edition (including all amendments) applies to this document.

GB/T 20518 Information Security Technology Public Key Infrastructure Digital Certificate Format

GB/T 25069 Information Security Technical Terminology

GB/T 32905 Information Security Technology SM3 Cryptographic Hash Algorithm

GB/T 32907 Information Security Technology SM4 Block Cipher Algorithm

GB/T 32915 Information Security Technology Binary Sequence Randomness Detection Method

GB/T 32918.2 Information Security Technology SM2 Elliptic Curve Public Key Cryptographic Algorithms Part 2: Digital Signature Algorithms

GB/T 32918.3 Information Security Technology SM2 Elliptic Curve Public Key Cryptographic Algorithm Part 3: Key Exchange Protocol

GB/T 32918.4 Information Security Technology SM2 Elliptic Curve Public Key Cryptographic Algorithms Part 4: Public Key Cryptography Algorithms

GB/T 35276 Information Security Technology SM2 Cryptographic Algorithm Usage Specification

3 Terms and Definitions

The terms and definitions defined in GB/T 25069 and the following apply to this document.