Russian cryptographic algorithms GOST in Internet X 509

Russian cryptographic algorithms (GOST) in Internet X. 509 Public Key Infrastructure Grigory Chudov Crypto-Pro Ltd. , Russia Chudov@cryptopro. ru draft-leontiev-cryptopro-cppk-00. txt

Russian state standards Encryption GOST 28147 -89 - "Cryptographic Protection for Data Processing System“, 1989 Hashing GOST R 34. 10 -94 - "Information technology. Cryptographic Data Security. Hashing function. ", 1994. Digital signature GOST R 34. 10 -94 - "Information technology. Cryptographic Data Security. Produce and check procedures of Electronic Digital Signatures based on Asymmetric Cryptographic Algorithm. ", 1994. GOST R 34. 10 -2001 - "Information technology. Cryptographic data security. Signature and verification processes of [electronic] digital signature. “, 2001.

Compatibility problem Algorithm parameters Encryption S-BOX not defined (except for test values) Digest S-BOX not defined Digital signature P, Q, A not defined (except for test values) Elliptic Curve parameters not defined Russian Federal Digital Signature Law, 10 Jan 2002 PKI ready

Cryptographic Software Compatibility Agreement Russian commercial cryptographic software vendors FGUE STC "Atlas" CRYPTO-PRO Factor-TC MD PREI Infotecs Gmb. H SPRCIS (SPb. RCZI) Cryptocom R-Alpha www. stcnet. ru www. cryptopro. ru www. factor-ts. ru www. security. ru www. infotecs. ru www. rczi. spb. ru www. cryptocom. ru www. alpha. ru

Internet Drafts Algorithms and Identifiers for the Internet X. 509 Public Key Infrastructure Certificates and Certificate Revocation List (CRL), corresponding to the algorithms GOST R 34. 10 -94, GOST R 34. 10 -2001, GOST R 34. 11 -94 http: //www. ietf. org/internet-drafts/draft-leontiev-cryptopro-cppk-00. txt Addition of GOST Ciphersuites to Transport Layer Security (TLS) http: //www. ietf. org/internet-drafts/draft-chudov-cryptopro-cptls-00. txt Cryptographic Message Syntax (CMS) algorithms for GOST 28147 -89, GOST R 34. 10 -94, GOST R 34. 10 -2001, GOST R 34. 11 -94. http: //www. ietf. org/internet-drafts/draft-leontiev-cryptopro-cpcms-00. txt

PKIX GOST OIDs id-Crypto. Pro-algorithms OBJECT IDENTIFIER : : = { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) } id-Gost. R 3410 -94 OBJECT IDENTIFIER : : = { id-Crypto. Pro-algorithms gost. R 3410 -94(20) } id-Gost. R 3411 -94 -with-Gost. R 3410 -94 OBJECT IDENTIFIER : : = { id-Crypto. Pro-algorithms gost. R 3411 -94 -with-gost. R 3410 -94(4)} id-Gost. R 3410 -2001 OBJECT IDENTIFIER : : = { id-Crypto. Pro-algorithms gost. R 3410 -2001(19) } id-Gost. R 3411 -94 -with-Gost. R 3410 -2001 OBJECT IDENTIFIER : : = { id-Crypto. Pro-algorithms gost. R 3411 -94 -with-gost. R 3410 -2001(3) }

PKIX GOST Parameters Gost. R 3410 -94 -Public. Key. Parameters : : = SEQUENCE { public. Key. Param. Set OBJECT IDENTIFIER, digest. Param. Set OBJECT IDENTIFIER, encryption. Param. Set OBJECT IDENTIFIER OPTIONAL } Gost. R 3410 -94 -Public. Key. Algorithms ALGORITHM-IDENTIFIER : : = { { Gost. R 3410 -94 -Public. Key. Parameters IDENTIFIED BY id-Gost. R 3410 -94 } } Gost. R 3410 -94 -Certificate. Signature. Algorithms ALGORITHM-IDENTIFIER : : = { { NULL IDENTIFIED BY id-Gost. R 3411 -94 -with-Gost. R 3410 -94 } | { Gost. R 3410 -94 -Public. Key. Parameters IDENTIFIED BY id-Gost. R 3411 -94 -with-Gost. R 3410 -94 } }

End Entity Implementations Microsoft Windows Crypto. Pro CSP – Russian cryptography standards through Microsoft Cryptographic Service Provider Interface. Crypto. Pro TLS – adds GOST cipher suites to Microsoft Schannel SSP (Security Support Provider). CSP, TLS Solaris (Sun, Intel), VSTa - released Linux, Free BSD, AIX - in progress CSP, TLS SAP R/3 SNC, SSF adapters Apache, Open SSL, mod_ssl, JCA ISV products

CA Implementations Microsoft CA with Crypto. Pro CSP Crypto. Pro CA based on MS certificate services RSA Keon 6. 5 W 2 K - released Sun Solaris – in progress Unicert 5. 01 W 2 K - released