pki-pkcs9规范资源-CSDN文库

pkcs规范

1星需积分: 50 132 浏览量 2014-10-10 12:57:44 上传评论收藏 129KB PDF 举报

资源推荐

资源详情

资源评论

is granted provided that it is identified as “RSA Security Inc. Public-Key Cryptography Standards (PKCS)”

in all material mentioning or referencing this document.

003-903024-200-000-000

PKCS #9 v2.0: Selected Object Classes and Attribute Types

RSA Laboratories

February 25, 2000

Table of Contents

1. INTRODUCTION...............................................................................................................................2

2. DEFINITIONS, NOTATION AND DOCUMENT CONVENTIONS ............................................2

2.1 D

EFINITIONS ......................................................................................................................................2

2.2 N

OTATION AND DOCUMENT CONVENTIONS........................................................................................3

3. OVERVIEW ........................................................................................................................................3

4. AUXILIARY OBJECT CLASSES ....................................................................................................4

4.1 T

HE PKCSENTITY AUXILIARY OBJECT CLASS.....................................................................................4

4.2 T

HE NATURALPERSON AUXILIARY OBJECT CLASS ............................................................................ 4

5. SELECTED ATTRIBUTE TYPES....................................................................................................5

5.1 A

TTRIBUTE TYPES FOR USE WITH THE “PKCSENTITY” OBJECT CLASS................................................. 5

5.2 A

TTRIBUTE TYPES FOR USE WITH THE “NATURALPERSON” OBJECT CLASS.........................................6

5.3 A

TTRIBUTE TYPES FOR USE IN PKCS #7 DATA ................................................................................10

5.4 A

TTRIBUTE TYPES FOR USE WITH PKCS #10 CERTIFICATE REQUESTS .............................................14

5.5 A

TTRIBUTES FOR USE IN PKCS #12 “PFX” PDUS OR PKCS #15 TOKENS......................................15

5.6 A

TTRIBUTES DEFINED IN S/MIME................................................................................................... 16

6. MATCHING RULES........................................................................................................................17

6.1 C

ASE IGNORE MATCH ......................................................................................................................17

6.2 S

IGNING TIME MATCH ......................................................................................................................17

A. ASN.1 MODULE............................................................................................................................... 19

B. BNF SCHEMA SUMMARY............................................................................................................26

B.1 S

YNTAXES.......................................................................................................................................26

B.2 O

BJECT CLASSES.............................................................................................................................27

B.3 A

TTRIBUTE TYPES ........................................................................................................................... 27

B.4 M

ATCHING RULES............................................................................................................................31

C. INTELLECTUAL PROPERTY CONSIDERATIONS..................................................................31

D. REVISION HISTORY...................................................................................................................... 32

E. REFERENCES..................................................................................................................................33

F. ABOUT PKCS...................................................................................................................................34

PKCS #9 V2.0: SELECTED OBJECT CLASSES AND ATTRIBUTE TYPES 2

1. Introduction

This document defines two new auxiliary object classes, pkcsEntity and naturalPerson,

and selected attribute types for use with these classes. It also defines some attribute types

for use in conjunction with PKCS #7 [14] (and S/MIME CMS [3]) digitally signed

messages, PKCS #10 [16] certificate-signing requests, PKCS #12 [17] personal

information exchanges and PKCS #15 [18] cryptographic tokens. Matching rules for use

with these attributes are also defined, whenever necessary.

2. Definitions, notation and document conventions

2.1 Definitions

For the purposes of this document, the following definitions apply.

ASN.1 Abstract Syntax Notation One, as defined in [5].

Attributes An ASN.1 type that specifies a set of attributes. Each attribute contains an

attribute type (specified by object identifier) and one or more attribute

values. Some attribute types are restricted in their definition to have a

single value; others may have multiple values. This type is defined in [7].

CertificationRequestInfo An ASN.1 type that specifies a subject name, a public key,

and a set of attributes. This type is defined in [16].

ContentInfo An ASN.1 type that specifies content exchanged between entities. The

contentType field, which has type OBJECT IDENTIFIER, specifies the

content type, and the content field, whose type is defined by the

contentType field, contains the content value. This type is defined in [14]

and [3].

PrivateKeyInfo A type that specifies a private key and a set of extended attributes.

This type and the associated

EncryptedPrivateKeyInfo type are defined in

[15].

SignerInfo A type that specifies per-signer information in the signed-data content

type, including a set of attributes authenticated by the signer, and a set of

attributes not authenticated by the signer. This type is defined in [14] and

[3].

DER Distinguished Encoding Rules for ASN.1, as defined in [6].

UCS Universal Multiple-Octet Coded Character Set, as defined in [11].

PKCS #9 V2.0: SELECTED OBJECT CLASSES AND ATTRIBUTE TYPES 3

UTF8String UCS Transformation Format encoded string. The UTF-8 encoding is

defined in [11].

2.2 Notation and document conventions

In this document, all ASN.1 types and values are written in bold Helvetica. Attribute type

and object class definitions are written in the ASN.1 value notation defined in [5].

Appendix B contains most of these definitions written in the augmented BNF notation

defined in [2] as well. This has been done in an attempt to simplify the task of integrating

this work into LDAP [22] development environments.

The keywords “MUST”, “MUST NOT”, “REQUIRED”, “SHALL”, “SHALL NOT”,

“SHOULD”, “SHOULD NOT”, “RECOMMENDED”, “MAY”, and “OPTIONAL” in

this document are to be interpreted as described in [1].

3. Overview

This document specifies two new auxiliary object classes, pkcsEntity and naturalPerson,

and some new attribute types and matching rules. All ASN.1 object classes, attributes,

matching rules and types are exported for use in other environments.

Attribute types defined in this document that are useful in conjunction with storage of

PKCS-related data and the pkcsEntity object class includes PKCS #12 PFX PDUs, PKCS

#15 tokens and encrypted private keys.

Attribute types defined in this document that are useful in conjunction with PKCS #10

certificate requests and the naturalPerson object class includes electronic-mail address,

pseudonym, unstructured name, and unstructured address.

Attribute types defined in this document that are useful in PKCS #7 digitally signed

messages are content type, message digest, signing time, sequence number, random nonce

and countersignature. The attributes would be used in the authenticatedAttributes and

unauthenticatedAttributes fields of a SignerInfo or an AuthenticatedData ([3]) value.

Attribute types that are useful especially in PKCS #10 certification requests are the

challenge password and the extension-request attribute. The attributes would be used in

the

attributes field of a CertificationRequestInfo value.

Note – The attributes types (from [8]) in Table 1, and probably several others, might also

be helpful in PKCS #10, PKCS #12 and PKCS #15-aware applications.

businessCategory preferredDeliveryMethod

commonName presentationAddress

countryName registeredAddress

description roleOccupant

destinationIndicator serialNumber

剩余33页未读，继续阅读

评论收藏

内容反馈

zhimei61580

2020-03-14

不是中文版，不是中文版，还要这么多分。

gxzfree68

粉丝: 0
资源: 2

pki-pkcs9规范

国密 SM2 X509 DER pkcs7 pkcs9 pkcs10

pkcs10 规范

PKCS 06.7z

PKI-WDA

cn-pkcs-10v1_7(认证请求语法标准)

PKCS #1: RSA Cryptography Specifications Version 2.2

pkcs_8v1.2 - 私钥信息语法格式标准 - 中文版

pkcs 7- 加密消息语法标准 - 中文版

pkcs#11规范2-20版

智能卡安全规范 PKCS标准

pkcs7的标准文档

PKCS.rar_pkcs_pkcs-10_pkcs-1v2-1.pdf_安全协议_完整

rsa pkcs-8

PKI原理与技术--清华

pkcs 1 标准文件 v2.2

PKCS11密码令牌接口标准中文版.pdf

PKI技术及应用开发指南

pki技术与发展

PKCS11(英文版)

PKI技术应用及开发指南

pkcs11头文件

pki的一些关键词简介

PKCS #9 v2.0: Selected Object Classes and Attribute Types

pki资料.zip_PKI

cn_pkcs_11v2.11

pkcs#1_V2.1.zip

GMT 0019-2012 通用密码服务接口规范.pdf

最新资源