ISO/IEC 14888-3:2018
IT Security techniques — Digital signatures with appendix — Part 3: Discrete logarithm based mechanisms
This document specifies digital signature mechanisms with appendix whose security is based on the discrete logarithm problem.
This document provides
— a general description of a digital signature with appendix mechanism, and
— a variety of mechanisms that provide digital signatures with appendix.
For each mechanism, this document specifies
— the process of generating a pair of keys,
— the process of producing signatures, and
— the process of verifying signatures.
Annex A defines object identifiers assigned to the digital signature mechanisms specified in this document, and defines algorithm parameter structures.
Annex B defines conversion functions of FE2I, I2FE, FE2BS, BS2I, I2BS, I2OS and OS2I used in this document.
Annex D defines how to generate DSA domain parameters.
| Get this standard | Prices exclude GST | |
|---|---|---|
| PDF ( Single user document) |
$429.00 NZD
|
|
| HardCopy |
$473.00 NZD
|
|
| Networkable PDF |
Price varies
|
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Symbols and abbreviated terms
5 General model
5.1 Parameter generation process
5.1.1 Certificate-based mechanisms
5.1.2 Identity-based mechanisms
5.1.3 Parameter selection
5.1.4 Validity of domain parameters and verification key
5.2 Signature process
5.2.1 General
5.2.2 Producing the randomizer
5.2.3 Producing the pre-signature
5.2.4 Preparing the message for signing
5.2.5 Computing the witness (the first part of the signature)
5.2.6 Computing the assignment
5.2.7 Computing the second part of the signature
5.2.8 Constructing the appendix
5.2.9 Constructing the signed message
5.3 Verification process
5.3.1 General
5.3.2 Retrieving the witness
5.3.3 Preparing message for verification
5.3.4 Retrieving the assignment
5.3.5 Recomputing the pre-signature
5.3.6 Recomputing the witness
5.3.7 Verifying the witness
6 Certificate-based mechanisms
6.1 General
6.2 DSA
6.2.1 General
6.2.2 Parameters
6.2.3 Generation of signature key and verification key
6.2.4 Signature process
6.2.5 Verification process
6.3 KCDSA
6.3.1 General
6.3.2 Parameters
6.3.3 Generation of signature key and verification key
6.3.4 Signature process
6.3.5 Verification process
6.4 Pointcheval/Vaudenay algorithm
6.4.1 General
6.4.2 Parameters
6.4.3 Generation of signature key and verification key
6.4.4 Signature process
6.4.5 Verification process
6.5 SDSA
6.5.1 General
6.5.2 Parameters
6.5.3 Generation of signature key and verification key
6.5.4 Signature process
6.5.5 Verification process
6.6 EC-DSA
6.6.1 General
6.6.2 Parameters
6.6.3 Generation of signature key and verification key
6.6.4 Signature process
6.6.5 Verification process
6.7 EC-KCDSA
6.7.1 General
6.7.2 Parameters
6.7.3 Generation of signature key and verification key
6.7.4 Signature process
6.7.5 Verification process
6.8 EC-GDSA
6.8.1 General
6.8.2 Parameters
6.8.3 Generation of signature key and verification key
6.8.4 Signature process
6.8.5 Verification process
6.9 EC-RDSA
6.9.1 General
6.9.2 Parameters
6.9.3 Generation of signature key and verification key
6.9.4 Signature process
6.9.5 Verification process
6.10 EC-SDSA
6.10.1 General
6.10.2 Parameters
6.10.3 Generation of signature key and verification key
6.10.4 Signature process
6.10.5 Verification process
6.11 EC-FSDSA
6.11.1 General
6.11.2 Parameters
6.11.3 Generation of signature key and verification key
6.11.4 Signature process
6.11.5 Verification process
6.12 SM2
6.12.1 General
6.12.2 Parameters
6.12.3 Generation of signature key and verification key
6.12.4 Signature process
6.12.5 Verification process
7 Identity-based mechanisms
7.1 General
7.2 IBS-1
7.2.1 General
7.2.2 Parameters
7.2.3 Generation of master key and signature/verification key
7.2.4 Signature process
7.2.5 Verification process
7.3 IBS-2
7.3.1 General
7.3.2 Parameters
7.3.3 Generation of master key and signature/verification key
7.3.4 Signature process
7.3.5 Verification process
7.4 Chinese IBS
7.4.1 General
7.4.2 Parameters
7.4.3 Generation of master key and signature/verification key
7.4.4 Signature process
7.4.5 Verification process
Annex A (normative) Object identifiers
Annex B (normative) Conversion functions (I)
Annex C (informative) Conversion functions (II)
Annex D (normative) Generation of DSA domain parameters
Annex E (informative) The Weil and Tate pairings
Annex F (informative) Numerical examples
Annex G (informative) Comparison of the signature schemes
Annex H (informative) Claimed features for choosing a mechanism
Bibliography
Previous versions
Keep me up-to-date
Sign up to receive updates when there are changes to this standard
Related Information
Similar Standards
-
AS/NZS ISO/IEC 27001:2023
Information security, cybersecurity and privacy protection – Information security management systems – Requirements
-
AS/NZS ISO/IEC 27001:2023 A1
Information security, cybersecurity and privacy protection - Privacy enhancing data de-identification framework
-
AS/NZS ISO/IEC 27002:2022
Information security, cybersecurity and privacy protection — Information security controls
-
AS/NZS ISO/IEC 27035.1:2025
Information technology – Information security incident management – Part 1: Principles and process
Foreword
Introduction
1 Scope
2 Normative references
3 Terms and definitions
4 Symbols and abbreviated terms
5 General model
5.1 Parameter generation process
5.1.1 Certificate-based mechanisms
5.1.2 Identity-based mechanisms
5.1.3 Parameter selection
5.1.4 Validity of domain parameters and verification key
5.2 Signature process
5.2.1 General
5.2.2 Producing the randomizer
5.2.3 Producing the pre-signature
5.2.4 Preparing the message for signing
5.2.5 Computing the witness (the first part of the signature)
5.2.6 Computing the assignment
5.2.7 Computing the second part of the signature
5.2.8 Constructing the appendix
5.2.9 Constructing the signed message
5.3 Verification process
5.3.1 General
5.3.2 Retrieving the witness
5.3.3 Preparing message for verification
5.3.4 Retrieving the assignment
5.3.5 Recomputing the pre-signature
5.3.6 Recomputing the witness
5.3.7 Verifying the witness
6 Certificate-based mechanisms
6.1 General
6.2 DSA
6.2.1 General
6.2.2 Parameters
6.2.3 Generation of signature key and verification key
6.2.4 Signature process
6.2.5 Verification process
6.3 KCDSA
6.3.1 General
6.3.2 Parameters
6.3.3 Generation of signature key and verification key
6.3.4 Signature process
6.3.5 Verification process
6.4 Pointcheval/Vaudenay algorithm
6.4.1 General
6.4.2 Parameters
6.4.3 Generation of signature key and verification key
6.4.4 Signature process
6.4.5 Verification process
6.5 SDSA
6.5.1 General
6.5.2 Parameters
6.5.3 Generation of signature key and verification key
6.5.4 Signature process
6.5.5 Verification process
6.6 EC-DSA
6.6.1 General
6.6.2 Parameters
6.6.3 Generation of signature key and verification key
6.6.4 Signature process
6.6.5 Verification process
6.7 EC-KCDSA
6.7.1 General
6.7.2 Parameters
6.7.3 Generation of signature key and verification key
6.7.4 Signature process
6.7.5 Verification process
6.8 EC-GDSA
6.8.1 General
6.8.2 Parameters
6.8.3 Generation of signature key and verification key
6.8.4 Signature process
6.8.5 Verification process
6.9 EC-RDSA
6.9.1 General
6.9.2 Parameters
6.9.3 Generation of signature key and verification key
6.9.4 Signature process
6.9.5 Verification process
6.10 EC-SDSA
6.10.1 General
6.10.2 Parameters
6.10.3 Generation of signature key and verification key
6.10.4 Signature process
6.10.5 Verification process
6.11 EC-FSDSA
6.11.1 General
6.11.2 Parameters
6.11.3 Generation of signature key and verification key
6.11.4 Signature process
6.11.5 Verification process
6.12 SM2
6.12.1 General
6.12.2 Parameters
6.12.3 Generation of signature key and verification key
6.12.4 Signature process
6.12.5 Verification process
7 Identity-based mechanisms
7.1 General
7.2 IBS-1
7.2.1 General
7.2.2 Parameters
7.2.3 Generation of master key and signature/verification key
7.2.4 Signature process
7.2.5 Verification process
7.3 IBS-2
7.3.1 General
7.3.2 Parameters
7.3.3 Generation of master key and signature/verification key
7.3.4 Signature process
7.3.5 Verification process
7.4 Chinese IBS
7.4.1 General
7.4.2 Parameters
7.4.3 Generation of master key and signature/verification key
7.4.4 Signature process
7.4.5 Verification process
Annex A (normative) Object identifiers
Annex B (normative) Conversion functions (I)
Annex C (informative) Conversion functions (II)
Annex D (normative) Generation of DSA domain parameters
Annex E (informative) The Weil and Tate pairings
Annex F (informative) Numerical examples
Annex G (informative) Comparison of the signature schemes
Annex H (informative) Claimed features for choosing a mechanism
Bibliography