Valid

GM/T 0091-2020Password-based key derivation specification (English PDF)

基于口令的密钥派生规范

Preview PDF

This is a limited preview

Buy now to download the full PDF (21 pages)

Need quotation for your management?

Get a formal quotation for GM/T 0091-2020 in 30 minutes.

Issued by

State Administration of Cryptography

Level / Type

National · Recommended

Issue date

December 28, 2020

Implementation date

July 1, 2021

Scope

GM/T 0091-2020 is the English-translated version of 基于口令的密钥派生规范.

GM/T 0091-2020 — This document specifies password-based key derivation specifications, including password-based key derivation function, password-based key encryption scheme, password-based message authentication code.

This document applies to the migrated key which is protected by password during certificate and key migration.

Found what you need?

Document preview — GM/T 0091-2020

National Standard of the People's Republic of China

ICS: 35.040
Classification: L 80

Foreword1
Scope2
Normative references3
Terms and definitions4
Algorithm identifier5
Key derivation function6
Symbols and abbreviations7
Password-based key derivation function8
Encryption operation9
Decryption operation10
MAC generation11
MAC verification12
Foreword13
MAC generation14
MAC verification15

Foreword

This document was drafted in accordance with the rules given in GB/T 1.1-2020, Directives for standardization - Part 1: Rules for the structure and drafting of standardizing documents.

1 Scope

This document specifies password-based key derivation specifications, including password-based key derivation function, password-based key encryption scheme, password-based message authentication code.

This document applies to the migrated key which is protected by password during certificate and key migration.

2 Normative references

The contents of the following documents constitute the indispensable clauses of this document through normative references in the text. For dated references, only the version corresponding to that date is applicable to this document; for undated references, the latest version (including all amendments) is applicable to this document.

GB/T 15852.2, Information technology - Security techniques - Message Authentication Codes (MACs) - Part 2: Mechanisms using a dedicated hash-function

3 Terms and definitions

Terms and definitions determined by GB/T 25069-2010, GM/Z 4001, and the following ones are applicable to this document.

3.1 Algorithm identifier

A symbol that is used to uniquely identify a cryptographic algorithm.

3.2 Key derivation function

A function that generates one or more shared secret keys by acting on the shared secret and other parameters which are known to both parties.

[Source. GB/T 25069-2010, 2.2.2.124]

4 Symbols and abbreviations

The following symbols and abbreviations apply to this document.

C. ciphertext, a byte string.

c. iteration count, a positive integer.

DK. derived key, a byte string.

dkLen. the number of bytes of the derived key, a positive integer.

6 Password-based key derivation function

The key derivation function KDF usually uses a password and other parameters to obtain the derived key.

7.1 Encryption operation

The encryption operation that is based on the password P specifically includes the following steps.

7.2 Decryption operation

The steps for decrypting ciphertext C into message M based on password P are as follows.

8.1 MAC generation

The specific steps for generating the message authentication code T of the message M based on the password P are as follows.

8.2 MAC verification

Process the message M based on the password P; the steps to verify the message authentication code T are as follows.

GM/T 0091-2020

CRYPTOGRAPHY INDUSTRY STANDARD ICS 35.040 CCS L 80 Password-based key derivation specification Issued on. DECEMBER 28, 2020 Implemented on. JULY 01, 2021 Issued by. State Cryptography Administration

Table of Contents

Foreword... 3

1 Scope... 4

2 Normative references... 4

3 Terms and definitions... 4

4 Symbols and abbreviations... 5

5 OID definition... 6

6 Password-based key derivation function... 6

7 Password-based key encryption scheme... 8

7.1 Encryption operation... 8

7.2 Decryption operation... 9

8 Password-based message authentication code... 9

8.1 MAC generation... 9

8.2 MAC verification... 10 Appendix A (Informative) Assistive technology... 11 Appendix B (Normative) ASN.1 grammar... 16 Appendix C (Normative) ASN.1 structure definition... 19 References... 21

Foreword

This document was drafted in accordance with the rules given in GB/T 1.1-2020, Directives for standardization - Part 1: Rules for the structure and drafting of standardizing documents.

8.1 MAC generation

The specific steps for generating the message authentication code T of the message M based on the password P are as follows.

8.2 MAC verification

Process the message M based on the password P; the steps to verify the message authentication code T are as follows.

......
This preview omits tables, figures, formulas and parts of the technical clauses. The complete document — 21 pages — is available in the English PDF.

Referenced standards

Normative references

GB/T 15852.2Cybersecurity technology - Message authentication codes(MACs) - Part 2: Mechanisms using a dedicated hash-function

How to Download GM/T 0091-2020

1
Add to cart
Click "Download PDF" on this page and choose "Buy this standard". You can add more standards before checkout.
2
Checkout
Enter your email and billing details. Payment is processed securely by Stripe (cards or bank transfer). Prefer bank details? Request a quotation (min. order $300).
3
Instant delivery (0–9 sec)
Delivery is automatic: within seconds of payment you'll receive an email with a secure download link. The link stays valid for 72 hours.
4
Invoice included
A tax invoice is attached to the confirmation email. Need a custom invoice? Contact us.