md ру
 
 

 
  PKI STANDARDS
 
1 group of standards

RFC 4210 Internet X.509 Public Key Infrastructure Certificate Management Protocol (CMP). C. Adams, S. Farrell, T. Kause, T. Mononen. September 2005 
RFC 4211 Certificate Request Protocol
Internet X.509 Public Key Infrastructure Certificate Request Message Format (CRMF). J. Schaad. September 2005. 
RFC 2527 Internet X.509 Public Key Infrastructure Certificate Policy and Certification Practices Framework. S. Chokhani, W. Ford, R. Sabett, C. Merrill, S. Wu. November 2003. 
RFC 3494 Lightweight Directory Access Protocol version 2 (LDAPv2) to Historic Status. K. Zeilenga. March 2003. 
RFC 2560 X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP. M. Myers, R. Ankney, A. Malpani, S. Galperin, C. Adams. June 1999. 
RFC 2585 Internet X.509 Public Key Infrastructure Operational Protocols: FTP and HTTP. R. Housley, P. Hoffman.May1999. 
RFC 2587 Internet X.509 Public Key Infrastructure LDAPv2 Schema. S. Boeyen, T. Howes, P. Richard. June 1999. 
RFC 2797 Certificate Management Messages over CMS. M. Myers, X. Liu, J. Schaad, J. Weinstein. April 2000. 
RFC 2875 Diffie-Hellman Proof-of-Possession Algorithms. H. Prafullchandra, J. Schaad. July 2000. 
RFC 3029 Internet X.509 Public Key Infrastructure Data Validation and Certification Server Protocols. C. Adams, P. Sylvester, M. Zolotarev, R. Zuccherato. February 2001. 
RFC 3739 Internet X.509 Public Key Infrastructure: Qualified Certificates Profile. S. Santesson, M. Nystrom, T. Polk. March 2004. 
RFC 3161 Internet X.509 Public Key Infrastructure Time-Stamp Protocol (TSP). C. Adams, P. Cain, D. Pinkas, R. Zuccherato. August 2001. 
RFC 3279 Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile. L. Bassham, W. Polk, R. Housley. April 2002. 
RFC 3280 Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile. R. Housley, W. Polk, W. Ford, D. Solo. April 2002. 
RFC 3281 An Internet Attribute Certificate Profile for Authorization. S. Farrell, R. Housley. April 2002. 

2 group of standards

CWA 14167-1:2003 Security Requirements for Trustworthy Systems Managing Certificates for Electronic Signatures - Part 1: System Security Requirements 
CWA 14167-2:2003 Cryptographic module for CSP signing operations with backup -Protection profile - CMCSOB PP 
CWA 14167-3:2004 Cryptographic module for CSP key generation services protection profile CMCKG-PP 
CWA 14167-4:2004 Cryptographic module for CSP signing operations – Protection profile - CMCSO PP 
CWA 14170:2003 Security requirements for signature creation applications 
CWA 14171:2004 General guidelines for electronic signature verification 
CWA 14172-1:2003 EESSI Conformity Assessment Guidance - Part 1: General introduction 
CWA 14172-2:2003 EESSI Conformity Assessment Guidance - Part 2: Certification Authority services and processes 
CWA 14172-3:2003 EESSI Conformity Assessment Guidance - Part 3: Trustworthy systems managing certificates for electronic signatures 
CWA 14172-4:2004 EESSI Conformity Assessment Guidance - Part 4: Signature creation applications and general guidelines for electronic signature verification 
CWA 14172-5:2004 EESSI Conformity Assessment Guidance - Part 5: Secure signature-creation devices 
CWA 14172-6:2004 EESSI Conformity Assessment Guidance - Part 6: Signature creation device supporting signatures other than qualified 
CWA 14172-7:2004 EESSI Conformity Assessment Guidance - Part 7:
Cryptographic modules used by Certification Service Providers for signing operations and key generation services 
CWA 14172-8:2004 EESSI Conformity Assessment Guidance - Part 8: Timestamping Authority services and processes 
CWA 14355:2004 Guidelines for the implementation of Secure Signature-Creation Devices 
CWA 14890-1:2004 Application Interface for smart cards used as Secure Signature Creation Devices - Part 1: Basic requirements 
CWA 14890-2:2004 Application Interface for smart cards used as Secure Signature Creation Devices - Part 2: Additional Services 

3 group of standards

ISO/IEC 9796-2:2002 Information technology - Security techniques - Digital signature schemes giving message recovery - Part 2: Integer factorization based mechanisms 
ISO/IEC 9796-3:2000 Information technology - Security techniques - Digital signature schemes giving message recovery - Part 3: Discrete logarithm based mechanisms 
ISO/IEC 10118-1:2000 Information technology - Security techniques - Hash-functions - Part 1: General 
ISO/IEC 10118-2:2000 Information technology - Security techniques - Hash-functions - Part 2: Hash-functions using an n-bit block cipher 
ISO/IEC 10118-3:2004 Information technology - Security techniques - Hash-functions - Part 3: Dedicated hash-functions 
ISO/IEC 10118-4:1998 Information technology - Security techniques - Hash-functions - Part 4: Hash-functions using modular arithmetic 
ISO/IEC 14888-1:1998 Information technology - Security techniques - Digital signatures with appendix - Part 1: General 
ISO/IEC 14888-2:1999 Information technology - Security techniques - Digital signatures with appendix - Part 2: Identity-based mechanisms 
ISO/IEC 14888-3:1998 Information technology - Security techniques - Digital signatures with appendix - Part 3: Certificate-based mechanisms 
ISO/IEC 18033-1:2005 Information technology - Security techniques - Encryption algorithms - Part 1: General 
ISO/IEC 18033-3:2005 Information technology - Security techniques - Encryption algorithms - Part 3: Block ciphers 
ISO/IEC 18033-4:2005 Information technology - Security techniques - Encryption algorithms - Part 4: Stream ciphers 

4 group of standards

PKCS#1 RSA Cryptography Standard 
PKCS #3 Diffie-Hellman Key Agreement Standard 
PKCS #5 Password-Based Encryption Standard 
PKCS #6 Extended-Certificate Syntax Standard 
PKCS#7 Cryptographic Message Syntax Standard 
PKCS #8 Private-Key Information Syntax Standard 
PKCS #9 Selected Object Classes and Attribute Types. 
PKCS #10 Certification Request Syntax Standard 
PKCS#ll Cryptographic Token Interface Standard 
PKCS #12 Personal Information Exchange Syntax Standard 
PKCS #13 Elliptic Curve Cryptography Standard 

5 group of standards

 
S/MIME 
RFC 2311 S/MIME Version 2 Message Specification. S. Dusse, P. Hoffman, B. Ramsdell, L. Lundblade, L. Repka. March 1998. 
RFC 2312 S/MIME Version 2 Certificate Handling. S. Dusse, P. Hoffman, B. Ramsdell, J. Weinstein. March 1998. 
RFC 2630 Cryptographic Message Syntax. R. Housley. June 1999. 
RFC 2632 S/MIME Version 3 Certificate Handling. B. Ramsdell, Ed.. June 1999. 
RFC 2633 S/MIME Version 3 Message Specification. B. Ramsdell, Ed.. June 1999. 
RFC 2634 Enhanced Security Services for S/MIME. P. Hoffman, Ed.. June 1999. 
RFC 2785 Methods for Avoiding the "Small-Subgroup" Attacks on the Diffie-Hellman Key Agreement Method for S/MIME. R. Zuccherato. March 2000. 
 

S/HTTP TLS 
RFC 2246 The TLS Protocol Version 1.0. T. Dierks, C. Allen. January 1999. 
RFC 2659 Security Extensions For HTML. E. Rescorla, A. Schiffman. August 1999. 
RFC 2660 The Secure HyperText Transfer Protocol. E. Rescorla, A. Schiffman. August 1999. 
RFC 2817 Upgrading to TLS Within HTTP/1.1. R. Khare, S. Lawrence. May 2000. 
RFC 2818 HTTP Over TLS. E. Rescorla. May 2000. 
 

IPSec 
RFC2401 Security Architecture for the Internet Protocol. S. Kent, R. Atkinson. November 1998. 
RFC 2402 IP Authentication Header. S. Kent, R. Atkinson. November 1998. 
RFC 2406 IP Encapsulating Security Payload (ESP). S. Kent, R. Atkinson. November 1998. 
RFC 2408 Internet Security Association and Key Management Protocol (ISAKMP). D. Maughan, M. Schertler, M. Schneider, J. Turner. November 1998. 
 

DNS 
RFC 3007 Secure Domain Name System (DNS) Dynamic Update. B. Wellington. November 2000. 
RFC 2535 Domain Name System Security Extensions. D. Eastlake 3rd. March 1999. 
RFC 2536 DSA KEYs and SIGs in the Domain Name System (DNS). D. Eastlake 3rd. March 1999. 
RFC 3110 RSA/SHA-1 SIGs and RSA KEYs in the Domain Name System (DNS). D.Eastlake 3rd. May 2001. 
RFC 2538 Storing Certificates in the Domain Name System (DNS). D. Eastlake 3rd, O. Gudmundsson. March 1999. 
RFC 2539 Storage of Diffie-Hellman Keys in the Domain Name System (DNS). D.Eastlake 3rd. March 1999. 
RFC 2540 Detached Domain Name System (DNS) Information. D. Eastlake 3rd. March 1999. 
RFC 2541 DNS Security Operational Considerations. D. Eastlake 3rd. March 1999. 

DESPRE CENTRU   BAZA NORMATIVĂ   DOCUMENTE   STANDARTELE PKI REGISTRUL CENTRULUI   ÎNTREBĂRI ŞI RĂSPUNSURI   CENTRE DE CERTIFICARE

© 2007

Elaborarea şi suport tehnic: Centrul de telecomunicaţii speciale