algorithm profiles
play

Algorithm Profiles Phillip Hallam-Baker Principal Scientist - PowerPoint PPT Presentation

Algorithm Profiles Phillip Hallam-Baker Principal Scientist VeriSign Inc. Traditional Approach Plat du jour + A-la-carte MUST implement Becomes obsolete A-la-carte Combinatorial explosion Hidden Constraints Box says supports SHA-1,


  1. Algorithm Profiles Phillip Hallam-Baker Principal Scientist VeriSign Inc.

  2. Traditional Approach

  3. Plat du jour + A-la-carte

  4. MUST implement Becomes obsolete

  5. A-la-carte Combinatorial explosion

  6. Hidden Constraints Box says ‘supports SHA-1, SHA-256, RSA, DSA’ BUT DSA implementation does not support SHA-256

  7. Result Many variations to test Many configurations for security analysis Real ‘must implement’ deviates from specification Hidden constraints are not exposed

  8. Objectives Constrain number of variations Allow for specialty (vanity) crypto

  9. Proposal Quantum Profiles

  10. Each Profile defines One encryption, one digest, one MAC, one key exchange, one signature, &ct. Has unique URI [Parameters, Modes]

  11. Finite Field Profile RSA SHA2 HMAC-SHA2 AES One C18N

  12. ECC Profile NIST Suite B One C18N

  13. SHA3 Profile To be released 2009/2010

  14. Non-Standard Profile NIST Suite A Private definition

  15. Parameters / Modes Limited, discrete options Master profile specifies set of sub profiles

  16. Finite Field Profile Level1: RSA2048, SHA256, AES128 Level1a: RSA4096, SHA256, AES128 Level2: RSA3072, SHA386, AES192 Level3: RSA4096, SHA512, AES256 Level3x = Level1 + Level1a + Level2 + Level3

  17. Finite Field Profile v2007 Level1: RSA2048, SHA256, AES128 Level2: RSA4096, SHA256, AES128 Level3: RSA4096, SHA512, AES256 Level3x = Level1 + Level2 + Level3

  18. Finite Field Profile v2009 Level1: RSA2048-RND-PSS, SHA256, AES128 Level2: RSA4096-RND-PSS, SHA256, AES128 Level3: RSA4096-RND-PSS, SHA512, AES256

  19. URIs e.g. http://w3.org/2008/xmlsec/profile-ff-level1 [Intentionally opaque]

  20. Question Specify Crypto and XML issues in same profile Specify separate profiles for crypto and XML

Download Presentation
Download Policy: The content available on the website is offered to you 'AS IS' for your personal information and use only. It cannot be commercialized, licensed, or distributed on other websites without prior consent from the author. To download a presentation, simply click this link. If you encounter any difficulties during the download process, it's possible that the publisher has removed the file from their server.

Recommend


More recommend