view Side-By-Side changes
Internet Draft Vladimir Popov, CRYPTO-PRO Igor Kurepkin, CRYPTO-PRO Expires March 2, 2006 Serguei Leontiev, CRYPTO-PRO IntendedNetwork Working Group V. Popov Request for Comments: 4357 I. Kurepkin Category: InformationalSeptember 2, 2005S. Leontiev CRYPTO-PRO January 2006 Additionalcryptographic algorithmsCryptographic Algorithms foruseUse with GOST 28147-89, GOST R 34.10-94, GOST R 34.10-2001, and GOST R 34.11-94algorithms. <draft-popov-cryptopro-cpalgs-04.txt>Algorithms Status ofthisThis MemoBy submitting this Internet-Draft, each author represents that any applicable patent or other IPR claims of which he or she is aware have been or will be disclosed, and any of which he or she becomes aware will be disclosed, in accordance with Section 6 of BCP 79. Internet-Drafts are working documents ofThis memo provides information for the InternetEngineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet- Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time.community. Itis inappropriate to use Internet-Drafts as reference material or to cite them other than a "work in progress." The listdoes not specify an Internet standard ofcurrent Internet-Drafts can be accessed at http://www.ietf.org/1id-abstracts.html. The listany kind. Distribution ofInternet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html. This Internet-Draft will expire on March 1, 2006.this memo is unlimited. Copyright Notice Copyright (C) The Internet Society(2005).(2006). Abstract This document describes the cryptographic algorithms and parameters supplementary to the original GOSTspecificationsspecifications, GOST 28147-89, GOST R 34.10-94, GOST R34.10-200134.10-2001, and GOST R34.11-9434.11-94, for use in Internet applications. Table of ContentsPopov,Kurepkin,Leontiev Informational [Page 1] Internet-Draft Crypto-Pro cryptographic algorithms September 2005 11. Introduction. . . . . . . . . . . . . . . . . . . . . . 2 1.2 Terminology. . . . . . . . . . . . . . . . . . . . . . . 3 2....................................................2 1.1. Terminology ................................................2 2. CiphermodesModes andparameters. . . . . . . . . . . . . . . 3 2.1Parameters .....................................3 2.1. GOST 28147-89 CBCmode . . . . . . . . . . . . . . . . . 4 2.2Mode .....................................4 2.2. GOST 28147-89padding modes. . . . . . . . . . . . . . . 4 2.3Padding Modes ................................4 2.3. Key Meshing Algorithms. . . . . . . . . . . . . . . . . 4 2.3.1.....................................4 2.3.1. Null Key Meshing. . . . . . . . . . . . . . . . . . . . 5 2.3.2....................................5 2.3.2. CryptoPro KeyMeshing. . . . . . . . . . . . . . . . . . 5 3Meshing ...............................5 3. HMAC_GOSTR3411. . . . . . . . . . . . . . . . . . . . . 6 4 PRF_GOSTR3411. . . . . . . . . . . . . . . . . . . . . . 6 5..................................................6 4. PRF_GOSTR3411 ...................................................6 5. Key DerivationAlgorithms. . . . . . . . . . . . . . . . 6 5.1Algorithms .......................................6 5.1. VKO GOST R34.10-94. . . . . . . . . . . . . . . . . . . 7 5.234.10-94 ........................................6 5.2. VKO GOST R34.10-2001. . . . . . . . . . . . . . . . . . 7 634.10-2001 ......................................7 6. Key Wrapalgorithms. . . . . . . . . . . . . . . . . . . 7 6.1Algorithms .............................................7 6.1. GOST 28147-89 Key Wrap. . . . . . . . . . . . . . . . . 8 6.2.....................................7 6.2. GOST 28147-89 Key Unwrap. . . . . . . . . . . . . . . . 8 6.3...................................8 6.3. CryptoPro Key Wrap. . . . . . . . . . . . . . . . . . . 8 6.4.........................................8 6.4. CryptoPro Key Unwrap. . . . . . . . . . . . . . . . . . 9 6.5.......................................9 6.5. CryptoPro KEK DiversificationAlgorithm. . . . . . . . . 9 7Algorithm ....................9 Popov, et al. Informational [Page 1] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 7. Secret Key Diversification. . . . . . . . . . . . . . . 10 8.....................................10 8. Algorithmparameters . . . . . . . . . . . . . . . . . . 10 8.1Parameters ...........................................10 8.1. Encryptionalgorithm parameters . . . . . . . . . . . . 10 8.2Algorithm Parameters ...........................10 8.2. Digestalgorithm parameters. . . . . . . . . . . . . . . 11 8.3Algorithm Parameters ...............................11 8.3. GOST R 34.10-94public key algorithm parameters . . . . 12 8.4Public Key Algorithm Parameters ...........12 8.4. GOST R 34.10-2001public key algorithm parameters. . . . 13 9Public Key Algorithm Parameters .........13 9. SecurityConsiderations. . . . . . . . . . . . . . . . . 14 10Considerations ........................................14 10. Appendix ASN.1 Modules. . . . . . . . . . . . . . . . . 14 11 Appendix Parameters. . . . . . . . . . . . . . . . . . . 30 11.1 Encryption algorithm parameters. . . . . . . . . . . . . 30 11.2 Digest algorithm parameters. . . . . . . . . . . . . . . 33 11.3........................................15 10.1. Cryptographic-Gost-Useful-Definitions ....................15 10.2. Gost28147-89-EncryptionSyntax ............................17 10.3. Gost28147-89-ParamSetSyntax ..............................19 10.4. GostR3411-94-DigestSyntax ................................21 10.5. GostR3411-94-ParamSetSyntax ..............................22 10.6. GostR3410-94-PKISyntax ...................................23 10.7. GostR3410-94-ParamSetSyntax ..............................25 10.8. GostR3410-2001-PKISyntax .................................27 10.9. GostR3410-2001-ParamSetSyntax ............................29 11. Appendix Parameters ...........................................30 11.1. Encryption Algorithm Parameters ..........................30 11.2. Digest Algorithm Parameters ..............................33 11.3. GOST R 34.10-94public key algorithm parameters. . . . . 34 11.4Public Key Algorithm Parameters ..........34 11.4. GOST R 34.10-2001public key algorithm parameters. . . . 42 12Public Key Algorithm Parameters ........42 12. Acknowledgements ..............................................46 13. References. . . . . . . . . . . . . . . . . . . . . . . 46 13 Acknowledgments. . . . . . . . . . . . . . . . . . . . . 47 Author's Addresses. . . . . . . . . . . . . . . . . . . . . . . 48 Full Copyright Statement. . . . . . . . . . . . . . . . . . . . 49 1....................................................47 13.1. Normative References .....................................47 13.2. Informative References ...................................47 1. Introduction Russian cryptographic standards that define the algorithms GOST 28147-89 [GOST28147], GOST R 34.10-94 [GOSTR341094], GOST R 34.10-2001[GOSTR341001][GOSTR341001], and GOST R34.11-94 [GOSTR341194] provide basic information about how the algorithms work, butneedsupplemental specifications are needed to effectively use the algorithms (a briefenglishEnglish technical description of these algorithms can be found in [Schneier95]). This document is a proposal put forward by theCRYPT-PROCRYPTO-PRO Company toPopov,Kurepkin,Leontiev Informational [Page 2] Internet-Draft Crypto-Pro cryptographic algorithms September 2005provide supplemental information and specifications needed by the "Russian Cryptographic Software Compatibility Agreement" community.1.21.1. Terminology In this document, the key words MUST, MUST NOT, REQUIRED, SHOULD, SHOULD NOT, RECOMMENDED, and MAY are to be interpreted as described in[RFC 2119].[RFC2119]. Popov, et al. Informational [Page 2] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 The following functions and operators are also used in this document: '|' stands for concatenation. '~' stands for bitwise NOTopetator.operator. '^' stands for the poweropetator.operator. encryptECB (K, D)-is D, encrypted with key K using GOST 28147-89 in "prostaya zamena" (ECB) mode. decryptECB (K, D)-is D, decrypted with key K using GOST 28147-89 in ECB mode. encryptCFB (IV, K, D)-is D, encrypted with key K using GOST 28147-89 in "gammirovanie s obratnoj svyaziyu" (64-bit CFB) mode, and IV is used as the initialization vector. encryptCNT (IV, K, D)-is D, encrypted with key K using GOST 28147-89 in "gammirovanie" (counter) mode, and IV is used as the initialization vector. gostR3411 (D)-is the 256-bit result of the GOST R 34.11-94 hash function, used with zerointitializationinitialization vector, and S-Box parameter, defined by id-GostR3411-94-CryptoProParamSet (seechapterSection 11.2). gost28147IMIT (IV, K, D)-is the 32-bit result of the GOST 28147-89 in "imitovstavka" (MAC) mode, used with D as plaintext, K as key and IV as initialization vector.Note,Note that the standard specifiesit'sits use in this mode only withzeroan initializationvector.vector of zero. When keys and initialization vectors are converted to/from byte arrays, little-endian byte order is assumed.22. CiphermodesModes andparametersParameters This document defines four cipher properties that allow an implementer to vary cipher operations. The four parameters are thePopov,Kurepkin,Leontiev Informational [Page 3] Internet-Draft Crypto-Pro cryptographic algorithms September 2005cipher mode, the key meshing algorithm, the padding mode, and theS- box.S-box. [GOST28147] defines only three cipher modes for GOST 28147-89: ECB,CFBCFB, and counter mode. This document defines an additional cipher mode, CBC. Popov, et al. Informational [Page 3] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 When GOST 28147-89 is used to process large amounts of data, a symmetric key should be protected by a key meshing algorithm. Key meshing transforms a symmetric key after some amount of data has been processed. This document defines the CryptoPro key meshing algorithm. The cipher mode, key meshing algorithm, padding mode, and S-box are specified by algorithm parameters.2.12.1. GOST 28147-89 CBCmodeMode This section provides the supplemental informationtofor GOST 28147-89 (ablock to blockblock-to-block primitive) needed to operate in CBC mode. Before each plaintext block is encrypted, it is combined with the cipher text of the previous block via a bitwise XOR operation. This ensures that even if the plaintext contains many identical blocks, each block will encrypt to a different cipher text block. The initialization vector is combined with the first plaintext block by a bitwise XOR operation before the block is encrypted.2.22.2. GOST 28147-89padding modesPadding Modes This section provides the supplemental informationtofor GOST 28147-89, needed to operate on plaintext where the length is not divisible by GOST 28147-89 block size (8 bytes). Let x (0 < x<<= 8) be the number of bytes in the last, possibly incomplete, block of data. There are three padding modes: * Zero padding: 8-x remaining bytes are filled with zero * PKCS#5 padding: 8-x remaining bytes are filled with the value of 8-x. If there's no incomplete block, one extra block filled with value 8 is added. * Random padding: 8-x remaining bytes of the last block are set to random.2.32.3. Key Meshing Algorithms Key meshing algorithms transform the key after processing a certain amount of data. In applications that must be strictly robust toPopov,Kurepkin,Leontiev Informational [Page 4] Internet-Draft Crypto-Pro cryptographic algorithms September 2005attacks based on timing and EMIanalysisanalysis, one symmetric key should not be used for quantities of plaintext larger than 1024 octets.KeyPopov, et al. Informational [Page 4] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 A key meshing algorithm affects internal cipher state; it is not a protocol level feature. Its role is similar to that of a cipher mode. The choice of key meshing algorithm is usually dictated by the encryption algorithm parameters, but some protocols explicitly specify applicable key meshing algorithms. All encryption parameter sets defined in this document specify the use of the CryptoPro key meshing algorithm, except forid- Gost28147-89-TestParamSet,id-Gost28147- 89-TestParamSet, which specifies use of null key meshing algorithm.2.3.12.3.1. Null Key Meshing The null key meshing algorithm never changes a key. The identifier for this algorithm is: id-Gost28147-89-None-KeyMeshing OBJECT IDENTIFIER ::= { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) keyMeshing(14) none(0) } There are no meaningful parameters to this algorithm. If present, AlgorithmIdentifier.parameters MUST contain NULL.2.3.22.3.2. CryptoPro Key Meshing The CryptoPro key meshing algorithm transforms the key and initialization vector every 1024 octets (8192 bits, or 256 64-bit blocks) of plaintext data. This algorithm has the same drawback as OFB ciphermode -mode: it is impossible to re-establish crypto synch while decrypting aciphertext, when someciphertext if parts of encrypted data are corrupted,lostlost, or processed out of order. Furthermore, it is impossible to re-synch even if an IV for each data packet is provided explicitly. Use of this algorithm insuchprotocols such as IPsec ESP requires special care. The identifier for this algorithm is: id-Gost28147-89-CryptoPro-KeyMeshing OBJECT IDENTIFIER ::= { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) keyMeshing(14) cryptoPro(1) } There are no meaningful parameters to this algorithm. If present, AlgorithmIdentifier.parameters MUST contain NULL.Popov,Kurepkin,Leontiev Informational [Page 5] Internet-Draft Crypto-Pro cryptographic algorithms September 2005 EncryptionGOST 28147-89, in encrypt, decrypt, ordecryptionMAC mode, starts with key K[0] = K, IV0[0] = IV, i = 0. Let IVn[0] be the value of the initialization vector after processing the first 1024 octets of data.Encryption or decryptionPopov, et al. Informational [Page 5] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 Processing of the next 1024 octets will start with K[1] and IV0[1], which are calculated using the following formula: K[i+1] = decryptECB (K[i], C); IV0[i+1] = encryptECB (K[i+1],IVn[i]) Where C = {0x69, 0x00, 0x72, 0x22, 0x64, 0xC9, 0x04, 0x23, 0x8D, 0x3A, 0xDB, 0x96, 0x46, 0xE9, 0x2A, 0xC4, 0x18, 0xFE, 0xAC, 0x94, 0x00, 0xED, 0x07, 0x12, 0xC0, 0x86, 0xDC, 0xC2, 0xEF, 0x4C, 0xA9, 0x2B}; After processingeveryeach 1024 octets of data: * the resulting initialization vector is stored asIVn[i].IVn[i]; * K[i+1] and IV0[i+1] arecalculatedcalculated; * i isincremented.incremented; * Encryption or decryption of next 1024 bytes starts, using the new key andIV.IV; The process is repeated until all the data has been processed.33. HMAC_GOSTR3411 HMAC_GOSTR3411 (K,text) function is based on the hash function GOST R 34.11-94, as defined in [HMAC], with the following parameter values: B = 32, L = 32.44. PRF_GOSTR3411 PRF_GOSTR3411 is a pseudorandom function, based on HMAC_GOSTR3411. It is calculated as P_hash, defined insectionSection 5 of [TLS]. PRF_GOSTR3411(secret,label,seed) = P_GOSTR3411 (secret,label|seed).55. Key Derivation Algorithms Standards [GOSTR341094] and [GOSTR341001] do not define any key derivation algorithms. Section 5.1 specifies algorithm VKO GOST R 34.10-94, which generates GOST KEK using two GOST R 34.10-94 keypairs. Section 5.2 specifies algorithm VKO GOST R 34.10-2001, which generates GOST KEK using two GOST R 34.10-2001 keypairs and UKM. Keypairs MUST have identical parameters.Popov,Kurepkin,Leontiev Informational [Page 6] Internet-Draft Crypto-Pro cryptographic algorithms September 2005 5.15.1. VKO GOST R 34.10-94 This algorithm creates a key encryption key (KEK) using the sender's private key and the recipient's public key (or vice versa). Popov, et al. Informational [Page 6] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 Exchange key KEK is a 256-bit hash of the 1024-bit shared secret that is generated using Diffie-Hellman key agreement. 1) Let K(x,y) = a^(x*y) (mod p), where x - sender's private key, a^x - sender's public key y - recipient's private key, a^y - recipient's public key a, p - parameters 2) Calculate a 256-bit hash of K(x,y): KEK(x,y) = gostR3411 (K(x,y)) Keypairs (x,a^x) and (y,a^y) MUST comply with [GOSTR341094]. This algorithm MUST NOT be used when a^x = a (mod p) or a^y = a (mod p).5.25.2. VKO GOST R 34.10-2001 This algorithm creates a key encryption key (KEK) using 64 bit UKM, the sender's privatekeykey, and the recipient's public key (or the reverse of the latter pair). 1) Let K(x,y,UKM) = ((UKM*x)(mod q)) . (y.P) (512 bit), where x - sender's private key (256 bit) x.P - sender's public key (512 bit) y - recipient's private key (256 bit) y.P - recipient's public key (512 bit) UKM -User Keying Material (64 bit)non-zero integer, produced as in step 2 p. 6.1 [GOSTR341001] P - base point on the elliptic curve (two 256-bit coordinates) UKM*x - x multiplied by UKM as integers x.P - a multiple point 2) Calculate a 256-bit hash of K(x,y,UKM): KEK(x,y,UKM) = gostR3411 (K(x,y,UKM)) Keypairs (x,x.P) and (y,y.P) MUST comply with [GOSTR341001]. This algorithm MUST NOT be used when x.P = P, y.P = P66. Key WrapalgorithmsAlgorithms This document defines two key wrap algorithms: GOST 28147-89 Key Wrap and CryptoPro Key Wrap. These are used to encrypt a Content Encryption Key (CEK) with a Key Encryption Key (KEK).Popov,Kurepkin,Leontiev Informational [Page 7] Internet-Draft Crypto-Pro cryptographic algorithms September 2005 6.16.1. GOST 28147-89 Key Wrap This algorithm encrypts GOST 28147-89 CEK with a GOST 28147-89 KEK. Popov, et al. Informational [Page 7] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 Note: This algorithm MUST NOT be used with a KEK produced by VKO GOST R 34.10-94, because such a KEK is constant for every sender-recipient pair. Encrypting many different content encryption keys on the same constant KEK may reveal that KEK. The GOST 28147-89 key wrap algorithm is: 1) For a unique symmetric KEK, generate 8 octets atrandom,random and call the result UKM. For a KEK, produced by VKO GOST R 34.10-2001, use the UKM that was used for key derivation. 2) Compute a 4-byte checksum value, gost28147IMIT (UKM, KEK, CEK). Call the result CEK_MAC. 3) Encrypt the CEK in ECB mode using the KEK. Call the ciphertext CEK_ENC. 4) The wrapped content-encryption key is (UKM | CEK_ENC | CEK_MAC).6.26.2. GOST 28147-89 Key Unwrap This algorithm decrypts GOST 28147-89 CEK with a GOST 28147-89 KEK. The GOST 28147-89 key unwrap algorithm is: 1) If the wrapped content-encryption key is not 44 octets, then error. 2) Decompose thethewrapped content-encryption key into UKM,CEK_ENCCEK_ENC, and CEK_MAC. UKM is the most significant (first) 8 octets. CEK_ENC is next 32 octets, and CEK_MAC is the least significant (last) 4 octets. 3) Decrypt CEK_ENC in ECB mode using the KEK. Call the output CEK. 4) Compute a 4-byte checksum value, gost28147IMIT (UKM, KEK, CEK), compare the result with CEK_MAC. If they are not equal, then error.6.36.3. CryptoPro Key Wrap This algorithm encrypts GOST 28147-89 CEK with a GOST 28147-89 KEK. It can be used with any KEK(e.g.(e.g., produced by VKO GOST R 34.10-94 or VKO GOST R 34.10-2001) because a unique UKM is used to diversify the KEK. The CryptoPro key wrap algorithm is: 1) For a unique symmetric KEK or a KEK produced by VKO GOST R 34.10-94, generate 8 octets at random. Call the result UKM. For a KEK, produced by VKO GOST R 34.10-2001, use the UKM that was used for key derivation.Popov,Kurepkin,Leontiev Informational [Page 8] Internet-Draft Crypto-Pro cryptographic algorithms September 20052) Diversify KEK, using the CryptoPro KEK Diversification Algorithm, described insectionSection 6.5. Call the result KEK(UKM). Popov, et al. Informational [Page 8] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 3) Compute a 4-byte checksum value, gost28147IMIT (UKM, KEK(UKM), CEK). Call the result CEK_MAC. 4) Encrypt CEK in ECB mode using KEK(UKM). Call the ciphertext CEK_ENC. 5) The wrapped content-encryption key is (UKM | CEK_ENC | CEK_MAC).6.46.4. CryptoPro Key Unwrap This algorithm encrypts GOST 28147-89 CEK with a GOST 28147-89 KEK. The CryptoPro key unwrap algorithm is: 1) If the wrapped content-encryption key is not 44 octets, then it is an error. 2) Decompose thethewrapped content-encryption key into UKM,CEK_ENCCEK_ENC, and CEK_MAC. UKM is the most significant (first) 8 octets. CEK_ENC is next 32 octets, and CEK_MAC is the least significant (last) 4 octets. 3) Diversify KEK using the CryptoPro KEK Diversification Algorithm, described in section 6.5. Call the result KEK(UKM). 4) Decrypt CEK_ENC in ECB mode using KEK(UKM). Call the output CEK. 5) Compute a 4-byte checksum value, gost28147IMIT (UKM, KEK(UKM), CEK), compare the result with CEK_MAC. If they are not equal, then it is an error.6.56.5. CryptoPro KEK Diversification Algorithm Given a random 64-bitUKM,UKM and a GOST 28147-89 key K, this algorithm creates a new GOST 28147-89 key K(UKM). 1) Let K[0] = K; 2) UKM is split into components a[i,j]: UKM = a[0]|..|a[7] (a[i] - byte, a[i,0]..a[i,7] - it's bits) 3) Let i be 0. 4) K[1]..K[8] are calculated by repeating the following algorithm eight times: A) K[i] is split into components k[i,j]: K[i] = k[i,0]|k[i,1]|..|k[i,7] (k[i,j] - 32-bit integer) B) Vector S[i] is calculated: S[i] = ((a[i,0]*k[i,0] + ... + a[i,7]*k[i,7]) mod 2^32)OR| (((~a[i,0])*k[i,0] + ... + (~a[i,7])*k[i,7]) mod 2^32); C) K[i+1] = encryptCFB (S[i], K[i], K[i]) D) i = i + 1Popov,Kurepkin,Leontiev Informational [Page 9] Internet-Draft Crypto-Pro cryptographic algorithms September 20055) Let K(UKM) be K[8].7Popov, et al. Informational [Page 9] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 7. Secret Key Diversification This algorithm creates a GOST 28147-89 key Kd, given GOST R 34.10-94 or GOST R 34.10-2001 secret key K and diversification data D of size 4..40 bytes. 1) 40-byte blob B is created from D by cloning it enough times to fill all 40 bytes. For example, if D is 40-bytes long, B = D; If D is4-bytes6-bytes long, B =D|D|D|D|D|D|D|D|D|D.D|D|D|D|D|D|D[0..3]. 2) B is split into 8-byte UKM and 32-byte SRCKEY (B = UKM|SRCKEY). 3) The algorithm fromsectionSection 6.5 is used to create K(UKM) from key K andUKMUKM, with two differences: * Instead of S[i], vector (0,0,0,UKM[i],ff,ff,ff,ff XOR UKM[i]) is used. * During each encryption step, only 8 out of 32 GOST 28147-89 rounds are done. 4) Kd is calculated: Kd = encryptCFB (UKM, K(UKM), SRCKEY).88. AlgorithmparametersParameters Standards [GOST28147], [GOST341194],[GOSTR341094][GOSTR341094], and [GOSTR341001] do not define specific values for algorithm parameters. This document introduces the use of ASN.1 object identifiers (OIDs) to specify algorithm parameters. Identifiers for all of the proposed parameter sets can be found in Appendix ASN.1 modules. Corresponding parameter values for proposed parameter sets can be found insectionSection 11.8.18.1. Encryptionalgorithm parametersAlgorithm Parameters GOST 28147-89 can be used in severalmodes,modes; additional CBC mode is defined insection 2.1 this document.Section 2.1. It also has an S-Boxparameter (seeparameter. (See the Algorithm Parameters part in [GOST28147] inRussian,Russian; for a description inEnglishEnglish, seein [Schneier95][Schneier95], ch. 14.1, p.331).331.) This table contains the list of proposed parameter sets for GOST 28147-89: Gost28147-89-ParamSetAlgorithms ALGORITHM-IDENTIFIER ::= { { Gost28147-89-ParamSetParameters IDENTIFIED BYPopov,Kurepkin,Leontiev Informational [Page 10] Internet-Draft Crypto-Pro cryptographic algorithms September 2005id-Gost28147-89-TestParamSet } | { Gost28147-89-ParamSetParameters IDENTIFIED BY id-Gost28147-89-CryptoPro-A-ParamSet } | { Gost28147-89-ParamSetParameters IDENTIFIED BY id-Gost28147-89-CryptoPro-B-ParamSet } | Popov, et al. Informational [Page 10] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 { Gost28147-89-ParamSetParameters IDENTIFIED BY id-Gost28147-89-CryptoPro-C-ParamSet } | { Gost28147-89-ParamSetParameters IDENTIFIED BY id-Gost28147-89-CryptoPro-D-ParamSet } } Identifier values are in the Appendix ASN.1 modules, and corresponding parameters are insectionSection 11.1. Parameters for GOST 28147-89 are presented in the following form: Gost28147-89-ParamSetParameters ::= SEQUENCE { eUZ Gost28147-89-UZ, mode INTEGER { gost28147-89-CNT(0), gost28147-89-CFB(1), cryptoPro-CBC(2) }, shiftBits INTEGER { gost28147-89-block(64) }, keyMeshing AlgorithmIdentifier } Gost28147-89-UZ ::= OCTET STRING (SIZE (64)) Gost28147-89-KeyMeshingAlgorithms ALGORITHM-IDENTIFIER ::= { { NULL IDENTIFIED BY id-Gost28147-89-CryptoPro-KeyMeshing } | { NULL IDENTIFIED BY id-Gost28147-89-None-KeyMeshing } } where eUZ - S-box value; mode - cipher mode; shiftBits - cipher parameter; keyMeshing - key meshing algorithm identifier.8.28.2. Digestalgorithm parametersAlgorithm Parameters This table contains the list of proposed parameter sets for [GOST341194]: GostR3411-94-ParamSetAlgorithms ALGORITHM-IDENTIFIER ::= { { GostR3411-94-ParamSetParameters IDENTIFIED BY id-GostR3411-94-TestParamSet } | { GostR3411-94-ParamSetParameters IDENTIFIED BYPopov,Kurepkin,Leontievid-GostR3411-94-CryptoProParamSet } } Popov, et al. Informational [Page 11]Internet-DraftRFC 4357 Crypto-Procryptographic algorithms September 2005 id-GostR3411-94-CryptoProParamSet } }Cryptographic Algorithms January 2006 Identifier values are in the Appendix ASN.1 modules, and corresponding parameters are insectionSection 11.2. Parameters for [GOST341194] are presented in the following form: GostR3411-94-ParamSetParameters ::= SEQUENCE { hUZ Gost28147-89-UZ, -- S-Box for digest h0 GostR3411-94-Digest -- start digest value } GostR3411-94-Digest ::= OCTET STRING (SIZE (32))8.38.3. GOST R 34.10-94public key algorithm parametersPublic Key Algorithm Parameters This table contains the list of proposed parameter sets for GOST R 34.10-94: GostR3410-94-ParamSetAlgorithm ALGORITHM-IDENTIFIER ::= { { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-TestParamSet } | { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-CryptoPro-A-ParamSet } | { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-CryptoPro-B-ParamSet } | { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-CryptoPro-C-ParamSet } | { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-CryptoPro-D-ParamSet } | { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-CryptoPro-XchA-ParamSet } | { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-CryptoPro-XchB-ParamSet } | { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-CryptoPro-XchC-ParamSet } } Identifier values are in the Appendix ASN.1 modules, and corresponding parameters are insectionSection 11.3. Parameters for GOST R 34.10-94 are presented in the following form: GostR3410-94-ParamSetParameters ::= SEQUENCE { t INTEGER,Popov,Kurepkin,Leontiev Informational [Page 12] Internet-Draft Crypto-Pro cryptographic algorithms September 2005p INTEGER, q INTEGER, a INTEGER, validationAlgorithm AlgorithmIdentifier {{ Popov, et al. Informational [Page 12] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 GostR3410-94-ValidationAlgorithms }} OPTIONAL } GostR3410-94-ValidationParameters ::= SEQUENCE { x0 INTEGER, c INTEGER, d INTEGER OPTIONAL } Where t - bit length of p (512 or 1024 bits); p - modulus, prime number, 2^(t-1)<p<2^t; q - order of cyclic group, prime number, 2^254<q<2^256, q is a factor of p-1; a - generator, integer, 1<a<p-1, at that aq (mod p) = 1; validationAlgorithm - constant p, q and a calculating algorithm. x0 - seed; c - used for p and q generation; d - used for a generation.8.48.4. GOST R 34.10-2001public key algorithm parametersPublic Key Algorithm Parameters This table contains the list of proposed parameter sets for GOST R 34.10-2001: GostR3410-2001-ParamSetAlgorithm ALGORITHM-IDENTIFIER ::= { { GostR3410-2001-ParamSetParameters IDENTIFIED BY id-GostR3410-2001-TestParamSet } | { GostR3410-2001-ParamSetParameters IDENTIFIED BY id-GostR3410-2001-CryptoPro-A-ParamSet } | { GostR3410-2001-ParamSetParameters IDENTIFIED BY id-GostR3410-2001-CryptoPro-B-ParamSet } | { GostR3410-2001-ParamSetParameters IDENTIFIED BY id-GostR3410-2001-CryptoPro-C-ParamSet } | { GostR3410-2001-ParamSetParameters IDENTIFIED BY id-GostR3410-2001-CryptoPro-XchA-ParamSet } | { GostR3410-2001-ParamSetParameters IDENTIFIED BY id-GostR3410-2001-CryptoPro-XchB-ParamSet } } Identifier values are in the Appendix ASN.1 modules, andPopov,Kurepkin,Leontiev Informational [Page 13] Internet-Draft Crypto-Pro cryptographic algorithms September 2005corresponding parameters are insectionSection 11.4. Parameters for GOST R 34.10-2001 are presented in the following form: Popov, et al. Informational [Page 13] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 GostR3410-2001-ParamSetParameters ::= SEQUENCE { a INTEGER, b INTEGER, p INTEGER, q INTEGER, x INTEGER, y INTEGER } a, b - coefficients a and b of the elliptic curve E; p - prime number - elliptic curve modulus; q - prime number - order of cyclic group; x, y - base point p coordinates.99. Security Considerations It is RECOMMENDED that software applications verify signaturevalues,values and subject public keys and algorithm parameters to conform to[GOSTR341001],[GOSTR341001] and [GOSTR341094] standards prior to their use. Cryptographic algorithm parameters affect rigidity of algorithms. The algorithm parameters proposed and describedhereinherein, except for the test parameter sets (id-Gost28147-89-TestParamSet,id- GostR3411-94-TestParamSet,id-GostR3411- 94-TestParamSet, id-GostR3410-94-TestParamSet,id- GostR3410-2001-TestParamSet)id-GostR3410-2001- TestParamSet), have been analyzed by a special certification laboratory of Scientific and TechnicalCenter "ATLAS"Center, "ATLAS", and by the Center of Certificational Investigations in appropriate levels of target_of_evaluation (TOE), according to [RFDSL],[RFLLIC][RFLLIC], and [CRYPTOLIC]. Use of the test parameter sets or parameter sets not described herein is NOT RECOMMENDED. When different parameters areusedused, it is RECOMMENDEDto subject themthat they be subjected to examination by an authorized agency with approved methods of cryptographic analysis.10Popov, et al. Informational [Page 14] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 10. Appendix ASN.1 Modules10.110.1. Cryptographic-Gost-Useful-Definitions Cryptographic-Gost-Useful-Definitions { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) cryptographic-Gost-Useful-Definitions(0) 1 }Popov,Kurepkin,Leontiev Informational [Page 14] Internet-Draft Crypto-Pro cryptographic algorithms September 2005DEFINITIONS ::= BEGIN -- EXPORTS All -- -- The types and values defined in this module are exported for -- use in the other ASN.1 modules contained within the Russian -- Cryptography "GOST" & "GOST R" Specifications, and for the use -- of other applicationswhichthat will use them to access Russian -- Cryptography services. Other applications may use them for -- their own purposes, but this will not constrain extensions and -- modifications needed to maintain or improve the Russian -- Cryptography service. -- Crypto-Pro OID branch id-CryptoPro OBJECT IDENTIFIER ::= { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) } id-CryptoPro-algorithms OBJECT IDENTIFIER ::= id-CryptoPro id-CryptoPro-modules OBJECT IDENTIFIER ::= { id-CryptoPro other(1) modules(1) } id-CryptoPro-hashes OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms hashes(30) } id-CryptoPro-encrypts OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms encrypts(31) } id-CryptoPro-signs OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms signs(32) } id-CryptoPro-exchanges OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms exchanges(33) } id-CryptoPro-extensions OBJECT IDENTIFIER ::= { id-CryptoPro extensions(34) } id-CryptoPro-ecc-signs OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms ecc-signs(35) } id-CryptoPro-ecc-exchanges OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms ecc-exchanges(36) } id-CryptoPro-private-keys OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms private-keys(37) } id-CryptoPro-policyIds OBJECT IDENTIFIER ::= { id-CryptoPro policyIds(38) } id-CryptoPro-policyQt OBJECT IDENTIFIER ::= { id-CryptoPro policyQt(39) } id-CryptoPro-pkixcmp-infos OBJECT IDENTIFIER ::= Popov, et al. Informational [Page 15] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 { id-CryptoPro-algorithms pkixcmp-infos(41) } id-CryptoPro-audit-service-types OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms audit-service-types(42) } id-CryptoPro-audit-record-types OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms audit-record-types(43) } id-CryptoPro-attributes OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms attributes(44) } id-CryptoPro-name-service-types OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms name-service-types(45) }Popov,Kurepkin,Leontiev Informational [Page 15] Internet-Draft Crypto-Pro cryptographic algorithms September 2005-- ASN.1 modules of Russian Cryptography "GOST" & "GOST R" -- Specifications cryptographic-Gost-Useful-Definitions OBJECT IDENTIFIER ::= { id-CryptoPro-modules cryptographic-Gost-Useful-Definitions(0) 1 } -- GOST R 34.11-94 gostR3411-94-DigestSyntax OBJECT IDENTIFIER ::= { id-CryptoPro-modules gostR3411-94-DigestSyntax(1) 1 } gostR3411-94-ParamSetSyntax OBJECT IDENTIFIER ::= { id-CryptoPro-modules gostR3411-94-ParamSetSyntax(7) 1 } -- GOST R 34.10-94 gostR3410-94-PKISyntax OBJECT IDENTIFIER ::= { id-CryptoPro-modules gostR3410-94-PKISyntax(2) 1 } gostR3410-94-SignatureSyntax OBJECT IDENTIFIER ::= { id-CryptoPro-modules gostR3410-94-SignatureSyntax(3) 1 } gostR3410-EncryptionSyntax OBJECT IDENTIFIER ::= { id-CryptoPro-modules gostR3410-EncryptionSyntax(5) 2 } gostR3410-94-ParamSetSyntax OBJECT IDENTIFIER ::= { id-CryptoPro-modules gostR3410-94-ParamSetSyntax(8) 1 } -- GOST R 34.10-2001 gostR3410-2001-PKISyntax OBJECT IDENTIFIER ::= { id-CryptoPro-modules gostR3410-2001-PKISyntax(9) 1 } gostR3410-2001-SignatureSyntax OBJECT IDENTIFIER ::= { id-CryptoPro-modules gostR3410-2001-SignatureSyntax(10) 1 } gostR3410-2001-ParamSetSyntax OBJECT IDENTIFIER ::= { id-CryptoPro-modules gostR3410-2001-ParamSetSyntax(12) 1 } -- GOST 28147-89 gost28147-89-EncryptionSyntax OBJECT IDENTIFIER ::= { id-CryptoPro-modules gost28147-89-EncryptionSyntax(4) 1 } gost28147-89-ParamSetSyntax OBJECT IDENTIFIER ::= { id-CryptoPro-modules gost28147-89-ParamSetSyntax(6) 1 } -- Extended Key Usage for Crypto-Pro Popov, et al. Informational [Page 16] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 gost-CryptoPro-ExtendedKeyUsage OBJECT IDENTIFIER ::= { id-CryptoPro-modules gost-CryptoPro-ExtendedKeyUsage(13) 1 } -- Crypto-Pro Private keys gost-CryptoPro-PrivateKey OBJECT IDENTIFIER ::= { id-CryptoPro-modules gost-CryptoPro-PrivateKey(14) 1 } -- Crypto-Pro PKIXCMP structuresPopov,Kurepkin,Leontiev Informational [Page 16] Internet-Draft Crypto-Pro cryptographic algorithms September 2005gost-CryptoPro-PKIXCMP OBJECT IDENTIFIER ::= { id-CryptoPro-modules gost-CryptoPro-PKIXCMP(15) 1 } -- Crypto-Pro Transport Layer Security structures gost-CryptoPro-TLS OBJECT IDENTIFIER ::= { id-CryptoPro-modules gost-CryptoPro-TLS(16) 1 } -- Crypto-Pro Policy gost-CryptoPro-Policy OBJECT IDENTIFIER ::= { id-CryptoPro-modules gost-CryptoPro-Policy(17) 1 } gost-CryptoPro-Constants OBJECT IDENTIFIER ::= { id-CryptoPro-modules gost-CryptoPro-Constants(18) 1 } -- Useful types ALGORITHM-IDENTIFIER ::= CLASS { &id OBJECT IDENTIFIER UNIQUE, &Type OPTIONAL } WITH SYNTAX { [&Type] IDENTIFIED BY &id } END -- Cryptographic-Gost-Useful-Definitions10.210.2. Gost28147-89-EncryptionSyntax Gost28147-89-EncryptionSyntax { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) gost28147-89-EncryptionSyntax(4) 1 } DEFINITIONS EXPLICIT TAGS ::= BEGIN -- EXPORTS All -- -- The types and values defined in this module are exported for -- use in the other ASN.1 modules contained within the Russian -- Cryptography "GOST" & "GOST R" Specifications, and for the use -- of other applicationswhichthat will use them to access Russian -- Cryptography services. Other applications may use them for -- their own purposes, but this will not constrain extensions and -- modifications needed to maintain or improve the Russian -- Cryptography service. IMPORTS id-CryptoPro-algorithms, id-CryptoPro-encrypts, ALGORITHM-IDENTIFIER, cryptographic-Gost-Useful-Definitions Popov, et al. Informational [Page 17] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 FROM Cryptographic-Gost-Useful-Definitions { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) cryptographic-Gost-Useful-Definitions(0) 1 } ; -- GOST 28147-89 OID id-Gost28147-89 OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms gost28147-89(21) } id-Gost28147-89-MAC OBJECT IDENTIFIER ::=Popov,Kurepkin,Leontiev Informational [Page 17] Internet-Draft Crypto-Pro cryptographic algorithms September 2005{ id-CryptoPro-algorithms gost28147-89-MAC(22) } -- GOST 28147-89 cryptographic parameter sets OIDs id-Gost28147-89-TestParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-encrypts test(0) } id-Gost28147-89-CryptoPro-A-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-encrypts cryptopro-A(1) } id-Gost28147-89-CryptoPro-B-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-encrypts cryptopro-B(2) } id-Gost28147-89-CryptoPro-C-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-encrypts cryptopro-C(3) } id-Gost28147-89-CryptoPro-D-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-encrypts cryptopro-D(4) } id-Gost28147-89-CryptoPro-Oscar-1-1-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-encrypts cryptopro-Oscar-1-1(5) } id-Gost28147-89-CryptoPro-Oscar-1-0-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-encrypts cryptopro-Oscar-1-0(6) } id-Gost28147-89-CryptoPro-RIC-1-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-encrypts cryptopro-RIC-1(7) } -- GOST 28147-89 Types Gost28147-89-UZ ::= OCTET STRING (SIZE (64)) Gost28147-89-IV ::= OCTET STRING (SIZE (8)) Gost28147-89-Key ::= OCTET STRING (SIZE (32)) Gost28147-89-MAC ::= OCTET STRING (SIZE (1..4)) Gost28147-89-EncryptedKey ::= SEQUENCE { encryptedKey Gost28147-89-Key, maskKey [0] IMPLICIT Gost28147-89-Key OPTIONAL, macKey Gost28147-89-MAC (SIZE (4)) } Gost28147-89-ParamSet ::= OBJECT IDENTIFIER ( id-Gost28147-89-TestParamSet | -- Only for testing purposes id-Gost28147-89-CryptoPro-A-ParamSet | id-Gost28147-89-CryptoPro-B-ParamSet | id-Gost28147-89-CryptoPro-C-ParamSet | Popov, et al. Informational [Page 18] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 id-Gost28147-89-CryptoPro-D-ParamSet | id-Gost28147-89-CryptoPro-Oscar-1-1-ParamSet | id-Gost28147-89-CryptoPro-Oscar-1-0-ParamSet | id-Gost28147-89-CryptoPro-RIC-1-ParamSet ) Gost28147-89-BlobParameters ::= SEQUENCE { encryptionParamSet Gost28147-89-ParamSet, ...Popov,Kurepkin,Leontiev Informational [Page 18] Internet-Draft Crypto-Pro cryptographic algorithms September 2005} -- GOST 28147-89 encryption algorithm parameters Gost28147-89-Parameters ::= SEQUENCE { iv Gost28147-89-IV, encryptionParamSet Gost28147-89-ParamSet } Gost28147-89-Algorithms ALGORITHM-IDENTIFIER ::= { { Gost28147-89-Parameters IDENTIFIED BY id-Gost28147-89 } } END -- Gost28147-89-EncryptionSyntax10.310.3. Gost28147-89-ParamSetSyntax Gost28147-89-ParamSetSyntax { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) gost28147-89-ParamSetSyntax(6) 1 } DEFINITIONS EXPLICIT TAGS ::= BEGIN -- EXPORTS All -- -- The types and values defined in this module are exported for -- use in the other ASN.1 modules contained within the Russian -- Cryptography "GOST" & "GOST R" Specifications, and for the use -- of other applicationswhichthat will use them to access Russian -- Cryptography services. Other applications may use them for -- their own purposes, but this will not constrain extensions and -- modifications needed to maintain or improve the Russian -- Cryptography service. IMPORTS id-CryptoPro-algorithms, id-CryptoPro-encrypts, gost28147-89-EncryptionSyntax, ALGORITHM-IDENTIFIER, cryptographic-Gost-Useful-Definitions FROM Cryptographic-Gost-Useful-Definitions { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) cryptographic-Gost-Useful-Definitions(0) 1 } Gost28147-89-UZ, Gost28147-89-ParamSet, Popov, et al. Informational [Page 19] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 id-Gost28147-89-TestParamSet, id-Gost28147-89-CryptoPro-A-ParamSet, id-Gost28147-89-CryptoPro-B-ParamSet, id-Gost28147-89-CryptoPro-C-ParamSet, id-Gost28147-89-CryptoPro-D-ParamSet FROM Gost28147-89-EncryptionSyntax gost28147-89-EncryptionSyntax AlgorithmIdentifier FROM PKIX1Explicit88 {iso(1) identified-organization(3)Popov,Kurepkin,Leontiev Informational [Page 19] Internet-Draft Crypto-Pro cryptographic algorithms September 2005dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-mod(0) id-pkix1-explicit-88(1)} ; -- GOST 28147-89 cryptographic parameter sets: -- OIDs for parameter sets are imported from -- Gost28147-89-EncryptionSyntax Gost28147-89-ParamSetParameters ::= SEQUENCE { eUZ Gost28147-89-UZ, mode INTEGER { gost28147-89-CNT(0), gost28147-89-CFB(1), cryptoPro-CBC(2) }, shiftBits INTEGER { gost28147-89-block(64) }, keyMeshing AlgorithmIdentifier } Gost28147-89-ParamSetAlgorithms ALGORITHM-IDENTIFIER ::= { { Gost28147-89-ParamSetParameters IDENTIFIED BY id-Gost28147-89-TestParamSet } | { Gost28147-89-ParamSetParameters IDENTIFIED BY id-Gost28147-89-CryptoPro-A-ParamSet } | { Gost28147-89-ParamSetParameters IDENTIFIED BY id-Gost28147-89-CryptoPro-B-ParamSet } | { Gost28147-89-ParamSetParameters IDENTIFIED BY id-Gost28147-89-CryptoPro-C-ParamSet } | { Gost28147-89-ParamSetParameters IDENTIFIED BY id-Gost28147-89-CryptoPro-D-ParamSet } } id-Gost28147-89-CryptoPro-KeyMeshing OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms keyMeshing(14) cryptoPro(1) } id-Gost28147-89-None-KeyMeshing OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms keyMeshing(14) none(0) } Gost28147-89-KeyMeshingAlgorithms ALGORITHM-IDENTIFIER ::= { { NULL IDENTIFIED BY id-Gost28147-89-CryptoPro-KeyMeshing } | { NULL IDENTIFIED BY id-Gost28147-89-None-KeyMeshing } } END -- Gost28147-89-ParamSetSyntax10.4Popov, et al. Informational [Page 20] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 10.4. GostR3411-94-DigestSyntax GostR3411-94-DigestSyntax { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) gostR3411-94-DigestSyntax(1) 1 } DEFINITIONS ::= BEGIN -- EXPORTS All -- -- The types and values defined in this module are exported forPopov,Kurepkin,Leontiev Informational [Page 20] Internet-Draft Crypto-Pro cryptographic algorithms September 2005-- use in the other ASN.1 modules contained within the Russian -- Cryptography "GOST" & "GOST R" Specifications, and for the use -- of other applicationswhichthat will use them to access Russian -- Cryptography services. Other applications may use them for -- their own purposes, but this will not constrain extensions and -- modifications needed to maintain or improve the Russian -- Cryptography service. IMPORTS id-CryptoPro-algorithms, id-CryptoPro-hashes, ALGORITHM-IDENTIFIER, cryptographic-Gost-Useful-Definitions FROM Cryptographic-Gost-Useful-Definitions { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) cryptographic-Gost-Useful-Definitions(0) 1 } ; -- GOST R 34.11-94 OID id-GostR3411-94 OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms gostR3411-94(9) } -- GOST R 34.11-94 cryptographic parameter set OIDs id-GostR3411-94-TestParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-hashes test(0) } id-GostR3411-94-CryptoProParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-hashes cryptopro(1) } -- GOST R 34.11-94 data types GostR3411-94-Digest ::= OCTET STRING (SIZE (32)) -- GOST R 34.11-94 digest algorithm & parameters GostR3411-94-DigestParameters ::= OBJECT IDENTIFIER ( id-GostR3411-94-TestParamSet | -- Only for testing purposes id-GostR3411-94-CryptoProParamSet ) GostR3411-94-DigestAlgorithms ALGORITHM-IDENTIFIER ::= { { NULL IDENTIFIED BY id-GostR3411-94 } | -- Assume id-GostR3411-94-CryptoProParamSet { GostR3411-94-DigestParameters IDENTIFIED BY id-GostR3411-94 } } Popov, et al. Informational [Page 21] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 END -- GostR3411-94-DigestSyntax10.510.5. GostR3411-94-ParamSetSyntax GostR3411-94-ParamSetSyntax { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) gostR3411-94-ParamSetSyntax(7) 1 } DEFINITIONS ::= BEGINPopov,Kurepkin,Leontiev Informational [Page 21] Internet-Draft Crypto-Pro cryptographic algorithms September 2005-- EXPORTS All -- -- The types and values defined in this module are exported for -- use in the other ASN.1 modules contained within the Russian -- Cryptography "GOST" & "GOST R" Specifications, and for the use -- of other applicationswhichthat will use them to access Russian -- Cryptography services. Other applications may use them for -- their own purposes, but this will not constrain extensions and -- modifications needed to maintain or improve the Russian -- Cryptography service. IMPORTS gost28147-89-EncryptionSyntax, gostR3411-94-DigestSyntax, ALGORITHM-IDENTIFIER FROM Cryptographic-Gost-Useful-Definitions { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) cryptographic-Gost-Useful-Definitions(0) 1 } Gost28147-89-UZ FROM Gost28147-89-EncryptionSyntax gost28147-89-EncryptionSyntax id-GostR3411-94-TestParamSet, id-GostR3411-94-CryptoProParamSet, GostR3411-94-Digest FROM GostR3411-94-DigestSyntax gostR3411-94-DigestSyntax ; -- GOST R 34.11-94 cryptographic parameter sets: -- OIDs for parameter sets are imported from -- GostR3411-94-DigestSyntax GostR3411-94-ParamSetParameters ::= SEQUENCE { hUZ Gost28147-89-UZ, -- S-Box for digest h0 GostR3411-94-Digest -- initial digest value } GostR3411-94-ParamSetAlgorithms ALGORITHM-IDENTIFIER ::= { { GostR3411-94-ParamSetParameters IDENTIFIED BY id-GostR3411-94-TestParamSet } | { GostR3411-94-ParamSetParameters IDENTIFIED BY Popov, et al. Informational [Page 22] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 id-GostR3411-94-CryptoProParamSet } } END -- GostR3411-94-ParamSetSyntax10.610.6. GostR3410-94-PKISyntax GostR3410-94-PKISyntax { iso(1) member-body(2) ru(643) rans(2) cryptopro(2)Popov,Kurepkin,Leontiev Informational [Page 22] Internet-Draft Crypto-Pro cryptographic algorithms September 2005other(1) modules(1) gostR3410-94-PKISyntax(2) 1 } DEFINITIONS ::= BEGIN -- EXPORTS All -- -- The types and values defined in this module are exported for -- use in the other ASN.1 modules contained within the Russian -- Cryptography "GOST" & "GOST R" Specifications, and for the use -- of other applicationswhichthat will use them to access Russian -- Cryptography services. Other applications may use them for -- their own purposes, but this will not constrain extensions and -- modifications needed to maintain or improve the Russian -- Cryptography service. IMPORTS id-CryptoPro-algorithms, id-CryptoPro-signs, id-CryptoPro-exchanges, gost28147-89-EncryptionSyntax, gostR3411-94-DigestSyntax, ALGORITHM-IDENTIFIER, cryptographic-Gost-Useful-Definitions FROM Cryptographic-Gost-Useful-Definitions { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) cryptographic-Gost-Useful-Definitions(0) 1 } Gost28147-89-ParamSet FROM Gost28147-89-EncryptionSyntax gost28147-89-EncryptionSyntax id-GostR3411-94-TestParamSet, id-GostR3411-94-CryptoProParamSet FROM GostR3411-94-DigestSyntax gostR3411-94-DigestSyntax ; -- GOST R 34.10-94 OIDs id-GostR3410-94 OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms gostR3410-94(20) } id-GostR3410-94DH OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms gostR3410-94DH(99) } id-GostR3411-94-with-GostR3410-94 OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms gostR3411-94-with-gostR3410-94(4) } -- GOST R 34.10-94 public key parameter set OIDs id-GostR3410-94-TestParamSet OBJECT IDENTIFIER ::= Popov, et al. Informational [Page 23] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 { id-CryptoPro-signs test(0) } id-GostR3410-94-CryptoPro-A-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-signs cryptopro-A(2) } id-GostR3410-94-CryptoPro-B-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-signs cryptopro-B(3) } id-GostR3410-94-CryptoPro-C-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-signs cryptopro-C(4) } id-GostR3410-94-CryptoPro-D-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-signs cryptopro-D(5) }Popov,Kurepkin,Leontiev Informational [Page 23] Internet-Draft Crypto-Pro cryptographic algorithms September 2005id-GostR3410-94-CryptoPro-XchA-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-exchanges cryptopro-XchA(1) } id-GostR3410-94-CryptoPro-XchB-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-exchanges cryptopro-XchB(2) } id-GostR3410-94-CryptoPro-XchC-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-exchanges cryptopro-XchC(3) } -- GOST R 34.10-94 data types GostR3410-94-CertificateSignature ::= BIT STRING ( SIZE(256..512) ) GostR3410-94-PublicKey ::= OCTET STRING ( SIZE( 64 | -- Only for testing purposes 128 ) ) GostR3410-94-PublicKeyParameters ::= SEQUENCE { publicKeyParamSet OBJECT IDENTIFIER ( id-GostR3410-94-TestParamSet | -- Only for testing purposes id-GostR3410-94-CryptoPro-A-ParamSet | id-GostR3410-94-CryptoPro-B-ParamSet | id-GostR3410-94-CryptoPro-C-ParamSet | id-GostR3410-94-CryptoPro-D-ParamSet | id-GostR3410-94-CryptoPro-XchA-ParamSet | id-GostR3410-94-CryptoPro-XchB-ParamSet | id-GostR3410-94-CryptoPro-XchC-ParamSet ), digestParamSet OBJECT IDENTIFIER ( id-GostR3411-94-TestParamSet | -- Only for testing purposes id-GostR3411-94-CryptoProParamSet ), encryptionParamSet Gost28147-89-ParamSet OPTIONAL } GostR3410-94-PublicKeyAlgorithms ALGORITHM-IDENTIFIER ::= { { GostR3410-94-PublicKeyParameters IDENTIFIED BY id-GostR3410-94 } Popov, et al. Informational [Page 24] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 } END -- GostR3410-94-PKISyntax10.710.7. GostR3410-94-ParamSetSyntax GostR3410-94-ParamSetSyntax { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) gostR3410-94-ParamSetSyntax(8) 1 } DEFINITIONS ::=Popov,Kurepkin,Leontiev Informational [Page 24] Internet-Draft Crypto-Pro cryptographic algorithms September 2005BEGIN -- EXPORTS All -- -- The types and values defined in this module are exported for -- use in the other ASN.1 modules contained within the Russian -- Cryptography "GOST" & "GOST R" Specifications, and for the use -- of other applicationswhichthat will use them to access Russian -- Cryptography services. Other applications may use them for -- their own purposes, but this will not constrain extensions and -- modifications needed to maintain or improve the Russian -- Cryptography service. IMPORTS id-CryptoPro-algorithms, id-CryptoPro-signs, id-CryptoPro-exchanges, gostR3410-94-PKISyntax, ALGORITHM-IDENTIFIER, cryptographic-Gost-Useful-Definitions FROM Cryptographic-Gost-Useful-Definitions { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) cryptographic-Gost-Useful-Definitions(0) 1 } id-GostR3410-94, id-GostR3410-94-TestParamSet, id-GostR3410-94-CryptoPro-A-ParamSet, id-GostR3410-94-CryptoPro-B-ParamSet, id-GostR3410-94-CryptoPro-C-ParamSet, id-GostR3410-94-CryptoPro-D-ParamSet, id-GostR3410-94-CryptoPro-XchA-ParamSet, id-GostR3410-94-CryptoPro-XchB-ParamSet, id-GostR3410-94-CryptoPro-XchC-ParamSet FROM GostR3410-94-PKISyntax gostR3410-94-PKISyntax AlgorithmIdentifier FROM PKIX1Explicit88 {iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-mod(0) id-pkix1-explicit-88(1)} ; -- GOST R 34.10-94 public key parameter sets: -- OIDs for parameter sets are imported from -- GostR3410-94-PKISyntax GostR3410-94-ParamSetParameters-t ::= INTEGER (512 | 1024) -- 512 - only for testing purposes Popov, et al. Informational [Page 25] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 GostR3410-94-ParamSetParameters ::= SEQUENCE { t GostR3410-94-ParamSetParameters-t, p INTEGER, -- 2^1020 < p < 2^1024 or 2^509 < p < 2^512 q INTEGER, -- 2^254 < q < 2^256 a INTEGER, -- 1 < a < p-1 < 2^1024-1 validationAlgorithm AlgorithmIdentifier OPTIONAL -- {{ GostR3410-94-ValidationAlgorithms }}Popov,Kurepkin,Leontiev Informational [Page 25] Internet-Draft Crypto-Pro cryptographic algorithms September 2005} GostR3410-94-ParamSetAlgorithm ALGORITHM-IDENTIFIER ::= { { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-TestParamSet } | { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-CryptoPro-A-ParamSet } | { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-CryptoPro-B-ParamSet } | { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-CryptoPro-C-ParamSet } | { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-CryptoPro-D-ParamSet } | { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-CryptoPro-XchA-ParamSet } | { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-CryptoPro-XchB-ParamSet } | { GostR3410-94-ParamSetParameters IDENTIFIED BY id-GostR3410-94-CryptoPro-XchC-ParamSet } } -- GOST R 34.10-94 validation/constructor id-GostR3410-94-a OBJECT IDENTIFIER ::= { id-GostR3410-94 a(1) } id-GostR3410-94-aBis OBJECT IDENTIFIER ::= { id-GostR3410-94 aBis(2) } id-GostR3410-94-b OBJECT IDENTIFIER ::= { id-GostR3410-94 b(3) } id-GostR3410-94-bBis OBJECT IDENTIFIER ::= { id-GostR3410-94 bBis(4) } GostR3410-94-ValidationParameters-c ::= INTEGER (0 .. 65535) GostR3410-94-ValidationParameters ::= SEQUENCE { x0 GostR3410-94-ValidationParameters-c, c GostR3410-94-ValidationParameters-c, d INTEGER OPTIONAL -- 1 < d < p-1 < 2^1024-1 } GostR3410-94-ValidationBisParameters-c ::= INTEGER (0 .. 4294967295) Popov, et al. Informational [Page 26] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 GostR3410-94-ValidationBisParameters ::= SEQUENCE { x0 GostR3410-94-ValidationBisParameters-c, c GostR3410-94-ValidationBisParameters-c, d INTEGER OPTIONAL -- 1 < d < p-1 < 2^1024-1 } GostR3410-94-ValidationAlgorithms ALGORITHM-IDENTIFIER ::= { { GostR3410-94-ValidationParameters IDENTIFIED BYPopov,Kurepkin,Leontiev Informational [Page 26] Internet-Draft Crypto-Pro cryptographic algorithms September 2005id-GostR3410-94-a } | { GostR3410-94-ValidationBisParameters IDENTIFIED BY id-GostR3410-94-aBis } | { GostR3410-94-ValidationParameters IDENTIFIED BY id-GostR3410-94-b } | { GostR3410-94-ValidationBisParameters IDENTIFIED BY id-GostR3410-94-bBis } } END -- GostR3410-94-ParamSetSyntax10.810.8. GostR3410-2001-PKISyntax GostR3410-2001-PKISyntax { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) gostR3410-2001-PKISyntax(9) 1 } DEFINITIONS ::= BEGIN -- EXPORTS All -- -- The types and values defined in this module are exported for -- use in the other ASN.1 modules contained within the Russian -- Cryptography "GOST" & "GOST R" Specifications, and for the use -- of other applicationswhichthat will use them to access Russian -- Cryptography services. Other applications may use them for -- their own purposes, but this will not constrain extensions and -- modifications needed to maintain or improve the Russian -- Cryptography service. IMPORTS id-CryptoPro-algorithms, id-CryptoPro-ecc-signs, id-CryptoPro-ecc-exchanges, gost28147-89-EncryptionSyntax, gostR3411-94-DigestSyntax, ALGORITHM-IDENTIFIER, cryptographic-Gost-Useful-Definitions FROM Cryptographic-Gost-Useful-Definitions { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) cryptographic-Gost-Useful-Definitions(0) 1 } Gost28147-89-ParamSet FROM Gost28147-89-EncryptionSyntax gost28147-89-EncryptionSyntax Popov, et al. Informational [Page 27] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 id-GostR3411-94-TestParamSet, id-GostR3411-94-CryptoProParamSet FROM GostR3411-94-DigestSyntax gostR3411-94-DigestSyntax ; -- GOST R 34.10-2001 OIDs id-GostR3410-2001 OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms gostR3410-2001(19) } id-GostR3410-2001DH OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms gostR3410-2001DH(98) }Popov,Kurepkin,Leontiev Informational [Page 27] Internet-Draft Crypto-Pro cryptographic algorithms September 2005id-GostR3411-94-with-GostR3410-2001 OBJECT IDENTIFIER ::= { id-CryptoPro-algorithms gostR3411-94-with-gostR3410-2001(3) } -- GOST R 34.10-2001 public key parameter set OIDs id-GostR3410-2001-TestParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-ecc-signs test(0) } id-GostR3410-2001-CryptoPro-A-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-ecc-signs cryptopro-A(1) } id-GostR3410-2001-CryptoPro-B-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-ecc-signs cryptopro-B(2) } id-GostR3410-2001-CryptoPro-C-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-ecc-signs cryptopro-C(3) } id-GostR3410-2001-CryptoPro-XchA-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-ecc-exchanges cryptopro-XchA(0) } id-GostR3410-2001-CryptoPro-XchB-ParamSet OBJECT IDENTIFIER ::= { id-CryptoPro-ecc-exchanges cryptopro-XchB(1) } -- GOST R 34.10-2001 Data Types GostR3410-2001-CertificateSignature ::= BIT STRING ( SIZE(256..512) ) GostR3410-2001-PublicKey ::= OCTET STRING ( SIZE(64) ) GostR3410-2001-PublicKeyParameters ::= SEQUENCE { publicKeyParamSet OBJECT IDENTIFIER ( id-GostR3410-2001-TestParamSet | -- Only for testing purposes id-GostR3410-2001-CryptoPro-A-ParamSet | id-GostR3410-2001-CryptoPro-B-ParamSet | id-GostR3410-2001-CryptoPro-C-ParamSet | id-GostR3410-2001-CryptoPro-XchA-ParamSet | id-GostR3410-2001-CryptoPro-XchB-ParamSet ), digestParamSet OBJECT IDENTIFIER ( id-GostR3411-94-TestParamSet | -- Only for testing purposes Popov, et al. Informational [Page 28] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 id-GostR3411-94-CryptoProParamSet ), encryptionParamSet Gost28147-89-ParamSet OPTIONAL } GostR3410-2001-PublicKeyAlgorithms ALGORITHM-IDENTIFIER ::= { { GostR3410-2001-PublicKeyParameters IDENTIFIED BY id-GostR3410-2001 } } END -- GostR3410-2001-PKISyntaxPopov,Kurepkin,Leontiev Informational [Page 28] Internet-Draft Crypto-Pro cryptographic algorithms September 2005 10.910.9. GostR3410-2001-ParamSetSyntax GostR3410-2001-ParamSetSyntax { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) gostR3410-2001-ParamSetSyntax(12) 1 } DEFINITIONS ::= BEGIN -- EXPORTS All -- -- The types and values defined in this module are exported for -- use in the other ASN.1 modules contained within the Russian -- Cryptography "GOST" & "GOST R" Specifications, and for the use -- of other applicationswhichthat will use them to access Russian -- Cryptography services. Other applications may use them for -- their own purposes, but this will not constrain extensions and -- modifications needed to maintain or improve the Russian -- Cryptography service. IMPORTS gostR3410-2001-PKISyntax, ALGORITHM-IDENTIFIER, cryptographic-Gost-Useful-Definitions FROM Cryptographic-Gost-Useful-Definitions { iso(1) member-body(2) ru(643) rans(2) cryptopro(2) other(1) modules(1) cryptographic-Gost-Useful-Definitions(0) 1 } id-GostR3410-2001, id-GostR3410-2001-TestParamSet, id-GostR3410-2001-CryptoPro-A-ParamSet, id-GostR3410-2001-CryptoPro-B-ParamSet, id-GostR3410-2001-CryptoPro-C-ParamSet, id-GostR3410-2001-CryptoPro-XchA-ParamSet, id-GostR3410-2001-CryptoPro-XchB-ParamSet FROM GostR3410-2001-PKISyntax gostR3410-2001-PKISyntax ; GostR3410-2001-ParamSetParameters ::= SEQUENCE { a INTEGER, -- 0 < a < p < 2^256 b INTEGER, -- 0 < b < p < 2^256 p INTEGER, -- 2^254 < p < 2^256 q INTEGER, -- 2^254 < q < 2^256 Popov, et al. Informational [Page 29] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 x INTEGER, -- 0 < x < p < 2^256 y INTEGER -- 0 < y < p < 2^256 } -- GOST R 34.10-2001 public key parameter set: -- OIDs for parameter sets are imported from -- GostR3410-2001-PKISyntax GostR3410-2001-ParamSetAlgorithm ALGORITHM-IDENTIFIER ::= { { GostR3410-2001-ParamSetParameters IDENTIFIED BY id-GostR3410-2001-TestParamSet } | { GostR3410-2001-ParamSetParameters IDENTIFIED BYPopov,Kurepkin,Leontiev Informational [Page 29] Internet-Draft Crypto-Pro cryptographic algorithms September 2005id-GostR3410-2001-CryptoPro-A-ParamSet } | { GostR3410-2001-ParamSetParameters IDENTIFIED BY id-GostR3410-2001-CryptoPro-B-ParamSet } | { GostR3410-2001-ParamSetParameters IDENTIFIED BY id-GostR3410-2001-CryptoPro-C-ParamSet } | { GostR3410-2001-ParamSetParameters IDENTIFIED BY id-GostR3410-2001-CryptoPro-XchA-ParamSet } | { GostR3410-2001-ParamSetParameters IDENTIFIED BY id-GostR3410-2001-CryptoPro-XchB-ParamSet } } END -- GostR3410-2001-ParamSetSyntax1111. Appendix Parameters Parameters here are given as SEQUENCE OF AlgorithmIdentifier in ASN.1 DER encoding [X.660], stored in the same format as the examples in[RFC 4134], and[RFC4134], can be extracted using the same program. If you want to extract without the program, copy all the lines between the "|>" and "|<" markers, remove any page breaks, and remove the "|" in the first column of each line. The result is a valid Base64 blob that can be processed by any Base64 decoder.11.111.1. Encryptionalgorithm parametersAlgorithm Parameters For each AlgorithmIdentifier in thissequencesequence, the parameters field contains Gost28147-89-ParamSetParameters. 0 30 480: SEQUENCE { 4 30 94: SEQUENCE { 6 06 7: OBJECT IDENTIFIER : id-Gost28147-89-TestParamSet 15 30 83: SEQUENCE { 17 04 64: OCTET STRING : 4C DE 38 9C 29 89 EF B6 FF EB 56 C5 5E C2 9B 02 : 98 75 61 3B 11 3F 89 60 03 97 0C 79 8A A1 D5 5D : E2 10 AD 43 37 5D B3 8E B4 2C 77 E7 CD 46 CA FA : D6 6A 20 1F 70 F4 1E A4 AB 03 F2 21 65 B8 44 D8 Popov, et al. Informational [Page 30] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 83 02 1: INTEGER 0 86 02 1: INTEGER 64 89 30 9: SEQUENCE { 91 06 7: OBJECT IDENTIFIER : id-Gost28147-89-None-KeyMeshing : } : } : } 100 30 94: SEQUENCE { 102 06 7: OBJECT IDENTIFIERPopov,Kurepkin,Leontiev Informational [Page 30] Internet-Draft Crypto-Pro cryptographic algorithms September 2005: id-Gost28147-89-CryptoPro-A-ParamSet 111 30 83: SEQUENCE { 113 04 64: OCTET STRING -- K1 K2 K3 K4 K5 K6 K7 K8 -- 9 3 E E B 3 1 B -- 6 7 4 7 5 A D A -- 3 E 6 A 1 D 2 F -- 2 9 2 C 9 C 9 5 -- 8 8 B D 8 1 7 0 -- B A 3 1 D 2 A C -- 1 F D 3 F 0 6 E -- 7 0 8 9 0 B 0 8 -- A 5 C 0 E 7 8 6 -- 4 2 F 2 4 5 C 2 -- E 6 5 B 2 9 4 3 -- F C A 4 3 4 5 9 -- C B 0 F C 8 F 1 -- 0 4 7 8 7 F 3 7 -- D D 1 5 A E B D -- 5 1 9 6 6 6 E 4 : 93 EE B3 1B 67 47 5A DA 3E 6A 1D 2F 29 2C 9C 95 : 88 BD 81 70 BA 31 D2 AC 1F D3 F0 6E 70 89 0B 08 : A5 C0 E7 86 42 F2 45 C2 E6 5B 29 43 FC A4 34 59 : CB 0F C8 F1 04 78 7F 37 DD 15 AE BD 51 96 66 E4 179 02 1: INTEGER 1 182 02 1: INTEGER 64 185 30 9: SEQUENCE { 187 06 7: OBJECT IDENTIFIER : id-Gost28147-89-CryptoPro-KeyMeshing : } : } : } 196 30 94: SEQUENCE { 198 06 7: OBJECT IDENTIFIER : id-Gost28147-89-CryptoPro-B-ParamSet 207 30 83: SEQUENCE { Popov, et al. Informational [Page 31] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 209 04 64: OCTET STRING : 80 E7 28 50 41 C5 73 24 B2 00 C2 AB 1A AD F6 BE : 34 9B 94 98 5D 26 5D 13 05 D1 AE C7 9C B2 BB 31 : 29 73 1C 7A E7 5A 41 42 A3 8C 07 D9 CF FF DF 06 : DB 34 6A 6F 68 6E 80 FD 76 19 E9 85 FE 48 35 EC 275 02 1: INTEGER 1 278 02 1: INTEGER 64 281 30 9: SEQUENCE { 283 06 7: OBJECT IDENTIFIER : id-Gost28147-89-CryptoPro-KeyMeshingPopov,Kurepkin,Leontiev Informational [Page 31] Internet-Draft Crypto-Pro cryptographic algorithms September 2005: } : } : } 292 30 94: SEQUENCE { 294 06 7: OBJECT IDENTIFIER : id-Gost28147-89-CryptoPro-C-ParamSet 303 30 83: SEQUENCE { 305 04 64: OCTET STRING : 10 83 8C A7 B1 26 D9 94 C7 50 BB 60 2D 01 01 85 : 9B 45 48 DA D4 9D 5E E2 05 FA 12 2F F2 A8 24 0E : 48 3B 97 FC 5E 72 33 36 8F C9 C6 51 EC D7 E5 BB : A9 6E 6A 4D 7A EF F0 19 66 1C AF C3 33 B4 7D 78 371 02 1: INTEGER 1 374 02 1: INTEGER 64 377 30 9: SEQUENCE { 379 06 7: OBJECT IDENTIFIER : id-Gost28147-89-CryptoPro-KeyMeshing : } : } : } 388 30 94: SEQUENCE { 390 06 7: OBJECT IDENTIFIER : id-Gost28147-89-CryptoPro-D-ParamSet 399 30 83: SEQUENCE { 401 04 64: OCTET STRING : FB 11 08 31 C6 C5 C0 0A 23 BE 8F 66 A4 0C 93 F8 : 6C FA D2 1F 4F E7 25 EB 5E 60 AE 90 02 5D BB 24 : 77 A6 71 DC 9D D2 3A 83 E8 4B 64 C5 D0 84 57 49 : 15 99 4C B7 BA 33 E9 AD 89 7F FD 52 31 28 16 7E 467 02 1: INTEGER 1 470 02 1: INTEGER 64 473 30 9: SEQUENCE { 475 06 7: OBJECT IDENTIFIER : id-Gost28147-89-CryptoPro-KeyMeshing : } : } : } : } Popov, et al. Informational [Page 32] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 |>Gost28147-89-ParamSetParameters.bin |MIIB4DBeBgcqhQMCAh8AMFMEQEzeOJwpie+2/+tWxV7CmwKYdWE7ET+JYAOXDHmK |odVd4hCtQzdds460LHfnzUbK+tZqIB9w9B6kqwPyIWW4RNgCAQACAUAwCQYHKoUD |AgIOADBeBgcqhQMCAh8BMFMEQJPusxtnR1raPmodLyksnJWIvYFwujHSrB/T8G5w |iQsIpcDnhkLyRcLmWylD/KQ0WcsPyPEEeH833RWuvVGWZuQCAQECAUAwCQYHKoUD |AgIOATBeBgcqhQMCAh8CMFMEQIDnKFBBxXMksgDCqxqt9r40m5SYXSZdEwXRrsec |srsxKXMceudaQUKjjAfZz//fBts0am9oboD9dhnphf5INewCAQECAUAwCQYHKoUD |AgIOATBeBgcqhQMCAh8DMFMEQBCDjKexJtmUx1C7YC0BAYWbRUja1J1e4gX6Ei/y |qCQOSDuX/F5yMzaPycZR7Nflu6luak167/AZZhyvwzO0fXgCAQECAUAwCQYHKoUDPopov,Kurepkin,Leontiev Informational [Page 32] Internet-Draft Crypto-Pro cryptographic algorithms September 2005|AgIOATBeBgcqhQMCAh8EMFMEQPsRCDHGxcAKI76PZqQMk/hs+tIfT+cl615grpAC |Xbskd6Zx3J3SOoPoS2TF0IRXSRWZTLe6M+mtiX/9UjEoFn4CAQECAUAwCQYHKoUD |AgIOAQ== |<Gost28147-89-ParamSetParameters.bin11.211.2. Digestalgorithm parametersAlgorithm Parameters For each AlgorithmIdentifier in thissequencesequence, the parameters field contains GostR3411-94-ParamSetParameters. 0 30 226: SEQUENCE { 3 30 111: SEQUENCE { 5 06 7: OBJECT IDENTIFIER : id-GostR3411-94-TestParamSet 14 30 100: SEQUENCE { 16 04 64: OCTET STRING -- pi1 pi2 pi3 pi4 pi5 pi6 pi7 pi8 -- 4 E 5 7 6 4 D 1 -- A B 8 D C B B F -- 9 4 1 A 7 A 4 D -- 2 C D 1 1 0 1 0 -- D 6 A 0 5 7 3 5 -- 8 D 3 8 F 2 F 7 -- 0 F 4 9 D 1 5 A -- E A 2 F 8 D 9 4 -- 6 2 E E 4 3 0 9 -- B 3 F 4 A 6 A 2 -- 1 8 C 6 9 8 E 3 -- C 1 7 C E 5 7 E -- 7 0 6 B 0 9 6 6 -- F 7 0 2 3 C 8 B -- 5 5 9 5 B F 2 8 -- 3 9 B 3 2 E C C : 4E 57 64 D1 AB 8D CB BF 94 1A 7A 4D 2C D1 10 10 : D6 A0 57 35 8D 38 F2 F7 0F 49 D1 5A EA 2F 8D 94 : 62 EE 43 09 B3 F4 A6 A2 18 C6 98 E3 C1 7C E5 7E : 70 6B 09 66 F7 02 3C 8B 55 95 BF 28 39 B3 2E CC Popov, et al. Informational [Page 33] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 82 04 32: OCTET STRING : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 : } : } 116 30 111: SEQUENCE { 118 06 7: OBJECT IDENTIFIER : id-GostR3411-94-CryptoProParamSet 127 30 100: SEQUENCE {Popov,Kurepkin,Leontiev Informational [Page 33] Internet-Draft Crypto-Pro cryptographic algorithms September 2005129 04 64: OCTET STRING : A5 74 77 D1 4F FA 66 E3 54 C7 42 4A 60 EC B4 19 : 82 90 9D 75 1D 4F C9 0B 3B 12 2F 54 79 08 A0 AF : D1 3E 1A 38 C7 B1 81 C6 E6 56 05 87 03 25 EB FE : 9C 6D F8 6D 2E AB DE 20 BA 89 3C 92 F8 D3 53 BC 195 04 32: OCTET STRING : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 : } : } : } |>GostR3411-94-ParamSetParameters.bin |MIHiMG8GByqFAwICHgAwZARATldk0auNy7+UGnpNLNEQENagVzWNOPL3D0nRWuov |jZRi7kMJs/SmohjGmOPBfOV+cGsJZvcCPItVlb8oObMuzAQgAAAAAAAAAAAAAAAA |AAAAAAAAAAAAAAAAAAAAAAAAAAAwbwYHKoUDAgIeATBkBECldHfRT/pm41THQkpg |7LQZgpCddR1PyQs7Ei9UeQigr9E+GjjHsYHG5lYFhwMl6/6cbfhtLqveILqJPJL4 |01O8BCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA== |<GostR3411-94-ParamSetParameters.bin11.311.3. GOST R 34.10-94public key algorithm parametersPublic Key Algorithm Parameters For each AlgorithmIdentifier in thissequencesequence, the parameters field contains GostR3410-94-ParamSetParameters. 0 30 2882: SEQUENCE { 4 30 209: SEQUENCE { 7 06 7: OBJECT IDENTIFIER : id-GostR3410-94-TestParamSet 16 30 197: SEQUENCE { 19 02 2: INTEGER 512 23 02 65: INTEGER : 00 EE 81 72 AE 89 96 60 8F B6 93 59 B8 9E B8 2A : 69 85 45 10 E2 97 7A 4D 63 BC 97 32 2C E5 DC 33 : 86 EA 0A 12 B3 43 E9 19 0F 23 17 75 39 84 58 39 : 78 6B B0 C3 45 D1 65 97 6E F2 19 5E C9 B1 C3 79 : E3 90 02 33: INTEGER : 00 98 91 5E 7E C8 26 5E DF CD A3 1E 88 F2 48 09 Popov, et al. Informational [Page 34] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 : DD B0 64 BD C7 28 5D D5 0D 72 89 F0 AC 6F 49 DD : 2D 125 02 65: INTEGER : 00 9E 96 03 15 00 C8 77 4A 86 95 82 D4 AF DE 21 : 27 AF AD 25 38 B4 B6 27 0A 6F 7C 88 37 B5 0D 50 : F2 06 75 59 84 A4 9E 50 93 04 D6 48 BE 2A B5 AA : B1 8E BE 2C D4 6A C3 D8 49 5B 14 2A A6 CE 23 E2 : 1C 192 30 22: SEQUENCE {Popov,Kurepkin,Leontiev Informational [Page 34] Internet-Draft Crypto-Pro cryptographic algorithms September 2005194 06 7: OBJECT IDENTIFIER id-GostR3410-94-a 203 30 11: SEQUENCE { 205 02 2: INTEGER 24265 209 02 2: INTEGER 29505 213 02 1: INTEGER 2 : } : } : } : } 216 30 342: SEQUENCE { 220 06 7: OBJECT IDENTIFIER : id-GostR3410-94-CryptoPro-A-ParamSet 229 30 329: SEQUENCE { 233 02 2: INTEGER 1024 237 02 129: INTEGER : 00 B4 E2 5E FB 01 8E 3C 8B 87 50 5E 2A 67 55 3C : 5E DC 56 C2 91 4B 7E 4F 89 D2 3F 03 F0 33 77 E7 : 0A 29 03 48 9D D6 0E 78 41 8D 3D 85 1E DB 53 17 : C4 87 1E 40 B0 42 28 C3 B7 90 29 63 C4 B7 D8 5D : 52 B9 AA 88 F2 AF DB EB 28 DA 88 69 D6 DF 84 6A : 1D 98 92 4E 92 55 61 BD 69 30 0B 9D DD 05 D2 47 : B5 92 2D 96 7C BB 02 67 18 81 C5 7D 10 E5 EF 72 : D3 E6 DA D4 22 3D C8 2A A1 F7 D0 29 46 51 A4 80 : DF 369 02 33: INTEGER : 00 97 24 32 A4 37 17 8B 30 BD 96 19 5B 77 37 89 : AB 2F FF 15 59 4B 17 6D D1 75 B6 32 56 EE 5A F2 : CF 404 02 129: INTEGER : 00 8F D3 67 31 23 76 54 BB E4 1F 5F 1F 84 53 E7 : 1C A4 14 FF C2 2C 25 D9 15 30 9E 5D 2E 62 A2 A2 : 6C 71 11 F3 FC 79 56 8D AF A0 28 04 2F E1 A5 2A : 04 89 80 5C 0D E9 A1 A4 69 C8 44 C7 CA BB EE 62 : 5C 30 78 88 8C 1D 85 EE A8 83 F1 AD 5B C4 E6 77 : 6E 8E 1A 07 50 91 2D F6 4F 79 95 64 99 F1 E1 82 : 47 5B 0B 60 E2 63 2A DC D8 CF 94 E9 C5 4F D1 F3 : B1 09 D8 1F 00 BF 2A B8 CB 86 2A DF 7D 40 B9 36 : 9A 536 30 24: SEQUENCE { Popov, et al. Informational [Page 35] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 538 06 7: OBJECT IDENTIFIER id-GostR3410-94-bBis 547 30 13: SEQUENCE { 549 02 4: INTEGER 1376285941 555 02 5: INTEGER : 00 EE 39 AD B3 : } : } : } : }Popov,Kurepkin,Leontiev Informational [Page 35] Internet-Draft Crypto-Pro cryptographic algorithms September 2005562 30 427: SEQUENCE { 566 06 7: OBJECT IDENTIFIER : id-GostR3410-94-CryptoPro-B-ParamSet 575 30 414: SEQUENCE { 579 02 2: INTEGER 1024 583 02 129: INTEGER : 00 C6 97 1F C5 75 24 B3 0C 90 18 C5 E6 21 DE 15 : 49 97 36 85 4F 56 A6 F8 AE E6 5A 7A 40 46 32 B1 : BC F0 34 9F FC AF CB 0A 10 31 77 97 1F C1 61 2A : DC DB 8C 8C C9 38 C7 02 25 C8 FD 12 AF F0 1B 1D : 06 4E 0A D6 FD E6 AB 91 59 16 6C B9 F2 FC 17 1D : 92 F0 CC 7B 6A 6B 2C D7 FA 34 2A CB E2 C9 31 5A : 42 D5 76 B1 EC CE 77 A9 63 15 7F 3D 0B D9 6A 8E : B0 B0 F3 50 2A D2 38 10 1B 05 11 63 34 F1 E5 B7 : AB 715 02 33: INTEGER : 00 B0 9D 63 4C 10 89 9C D7 D4 C3 A7 65 74 03 E0 : 58 10 B0 7C 61 A6 88 BA B2 C3 7F 47 5E 30 8B 06 : 07 750 02 128: INTEGER : 3D 26 B4 67 D9 4A 3F FC 9D 71 BF 8D B8 93 40 84 : 13 72 64 F3 C2 E9 EB 16 DC A2 14 B8 BC 7C 87 24 : 85 33 67 44 93 4F D2 EF 59 43 F9 ED 0B 74 5B 90 : AA 3E C8 D7 0C DC 91 68 24 78 B6 64 A2 E1 F8 FB : 56 CE F2 97 2F EE 7E DB 08 4A F7 46 41 9B 85 4F : AD 02 CC 3E 36 46 FF 2E 1A 18 DD 4B EB 3C 44 F7 : F2 74 55 88 02 96 49 67 45 46 CC 91 87 C2 07 FB : 8F 2C EC E8 E2 29 3F 68 39 5C 47 04 AF 04 BA B5 881 30 110: SEQUENCE { 883 06 7: OBJECT IDENTIFIER id-GostR3410-94-bBis 892 30 99: SEQUENCE { 894 02 4: INTEGER 1536654555 900 02 4: INTEGER 1855361757 906 02 85: INTEGER : 00 BC 3C BB DB 7E 6F 84 82 86 E1 9A D9 A2 7A 8E : 29 7E 5B 71 C5 3D D9 74 CD F6 0F 93 73 56 DF 69 : CB C9 7A 30 0C CC 71 68 5C 55 30 46 14 7F 11 56 : 8C 4F DD F3 63 D9 D8 86 43 83 45 A6 2C 3B 75 96 : 3D 65 46 AD FA BF 31 B3 12 90 D1 2C AE 65 EC B8 Popov, et al. Informational [Page 36] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 : 30 9E F6 67 82 : } : } : } : } 993 30 351: SEQUENCE { 997 06 7: OBJECT IDENTIFIER : id-GostR3410-94-CryptoPro-C-ParamSet 1006 30 338: SEQUENCE {Popov,Kurepkin,Leontiev Informational [Page 36] Internet-Draft Crypto-Pro cryptographic algorithms September 20051010 02 2: INTEGER 1024 1014 02 129: INTEGER : 00 9D 88 E6 D7 FE 33 13 BD 2E 74 5C 7C DD 2A B9 : EE 4A F3 C8 89 9E 84 7D E7 4A 33 78 3E A6 8B C3 : 05 88 BA 1F 73 8C 6A AF 8A B3 50 53 1F 18 54 C3 : 83 7C C3 C8 60 FF D7 E2 E1 06 C3 F6 3B 3D 8A 4C : 03 4C E7 39 42 A6 C3 D5 85 B5 99 CF 69 5E D7 A3 : C4 A9 3B 2B 94 7B 71 57 BB 1A 1C 04 3A B4 1E C8 : 56 6C 61 45 E9 38 A6 11 90 6D E0 D3 2E 56 24 94 : 56 9D 7E 99 9A 0D DA 5C 87 9B DD 91 FE 12 4D F1 : E9 1146 02 33: INTEGER : 00 FA DD 19 7A BD 19 A1 B4 65 3E EC F7 EC A4 D6 : A2 2B 1F 7F 89 3B 64 1F 90 16 41 FB B5 55 35 4F : AF 1181 02 128: INTEGER : 74 47 ED 71 56 31 05 99 07 0B 12 60 99 47 A5 C8 : C8 A8 62 5C F1 CF 25 2B 40 7B 33 1F 93 D6 39 DD : D1 BA 39 26 56 DE CA 99 2D D0 35 35 43 29 A1 E9 : 5A 6E 32 D6 F4 78 82 D9 60 B8 F1 0A CA FF 79 6D : 13 CD 96 11 F8 53 DA B6 D2 62 34 83 E4 67 88 70 : 84 93 93 7A 1A 29 44 25 98 AE C2 E0 74 20 22 56 : 34 40 FE 9C 18 74 0E CE 67 65 AC 05 FA F0 24 A6 : 4B 02 6E 7E 40 88 40 81 9E 96 2E 7E 5F 40 1A E3 1312 30 34: SEQUENCE { 1314 06 7: OBJECT IDENTIFIER id-GostR3410-94-bBis 1323 30 23: SEQUENCE { 1325 02 4: INTEGER 1132758852 1331 02 5: INTEGER : 00 B5 0A 82 6D 1338 02 8: INTEGER : 7F 57 5E 81 94 BC 5B DF : } : } : } : } 1348 30 371: SEQUENCE { 1352 06 7: OBJECT IDENTIFIER : id-GostR3410-94-CryptoPro-D-ParamSet Popov, et al. Informational [Page 37] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 1361 30 358: SEQUENCE { 1365 02 2: INTEGER 1024 1369 02 129: INTEGER : 00 80 F1 02 D3 2B 0F D1 67 D0 69 C2 7A 30 7A DA : D2 C4 66 09 19 04 DB AA 55 D5 B8 CC 70 26 F2 F7 : A1 91 9B 89 0C B6 52 C4 0E 05 4E 1E 93 06 73 5B : 43 D7 B2 79 ED DF 91 02 00 1C D9 E1 A8 31 FE 8A : 16 3E ED 89 AB 07 CF 2A BE 82 42 AC 9D ED DD BF : 98 D6 2C DD D1 EA 4F 5F 15 D3 A4 2A 66 77 BD D2Popov,Kurepkin,Leontiev Informational [Page 37] Internet-Draft Crypto-Pro cryptographic algorithms September 2005: 93 B2 42 60 C0 F2 7C 0F 1D 15 94 86 14 D5 67 B6 : 6F A9 02 BA A1 1A 69 AE 3B CE AD BB 83 E3 99 C9 : B5 1501 02 33: INTEGER : 00 F0 F5 44 C4 18 AA C2 34 F6 83 F0 33 51 1B 65 : C2 16 51 A6 07 8B DA 2D 69 BB 9F 73 28 67 50 21 : 49 1536 02 128: INTEGER : 6B CC 0B 4F AD B3 88 9C 1E 06 AD D2 3C C0 9B 8A : B6 EC DE DF 73 F0 46 32 59 5E E4 25 00 05 D6 AF : 5F 5A DE 44 CB 1E 26 E6 26 3C 67 23 47 CF A2 6F : 9E 93 93 68 1E 6B 75 97 33 78 4C DE 5D BD 9A 14 : A3 93 69 DF D9 9F A8 5C C0 D1 02 41 C4 01 03 43 : F3 4A 91 39 3A 70 6C F1 26 77 CB FA 1F 57 8D 6B : 6C FB E8 A1 24 2C FC C9 4B 3B 65 3A 47 6E 14 5E : 38 62 C1 8C C3 FE D8 25 7C FE F7 4C DB 20 5B F1 1667 30 54: SEQUENCE { 1669 06 7: OBJECT IDENTIFIER id-GostR3410-94-bBis 1678 30 43: SEQUENCE { 1680 02 4: INTEGER 333089693 1686 02 5: INTEGER : 00 A0 E9 DE 4B 1693 02 28: INTEGER : 41 AB 97 85 7F 42 61 43 55 D3 2D B0 B1 06 9F 10 : 9A 4D A2 83 67 6C 7C 53 A6 81 85 B4 : } : } : } : } 1723 30 396: SEQUENCE { 1727 06 7: OBJECT IDENTIFIER : id-GostR3410-94-CryptoPro-XchA-ParamSet 1736 30 383: SEQUENCE { 1740 02 2: INTEGER 1024 1744 02 129: INTEGER : 00 CA 3B 3F 2E EE 9F D4 63 17 D4 95 95 A9 E7 51 : 8E 6C 63 D8 F4 EB 4D 22 D1 0D 28 AF 0B 88 39 F0 : 79 F8 28 9E 60 3B 03 53 07 84 B9 BB 5A 1E 76 85 : 9E 48 50 C6 70 C7 B7 1C 0D F8 4C A3 E0 D6 C1 77 Popov, et al. Informational [Page 38] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 : FE 9F 78 A9 D8 43 32 30 A8 83 CD 82 A2 B2 B5 C7 : A3 30 69 80 27 85 70 CD B7 9B F0 10 74 A6 9C 96 : 23 34 88 24 B0 C5 37 91 D5 3C 6A 78 CA B6 9E 1C : FB 28 36 86 11 A3 97 F5 0F 54 1E 16 DB 34 8D BE : 5F 1876 02 33: INTEGER : 00 CA E4 D8 5F 80 C1 47 70 4B 0C A4 8E 85 FB 00 : A9 05 7A A4 AC C4 46 68 E1 7F 19 96 D7 15 26 90 : D9Popov,Kurepkin,Leontiev Informational [Page 38] Internet-Draft Crypto-Pro cryptographic algorithms September 20051911 02 129: INTEGER : 00 BE 27 D6 52 F2 F1 E3 39 DA 73 42 11 B8 5B 06 : AE 4D E2 36 AA 8F BE EB 3F 1A DC C5 2C D4 38 53 : 77 7E 83 4A 6A 51 81 38 67 8A 8A DB D3 A5 5C 70 : A7 EA B1 BA 7A 07 19 54 86 77 AA F4 E6 09 FF B4 : 7F 6B 9D 7E 45 B0 D0 6D 83 D7 AD C5 33 10 AB D8 : 57 83 E7 31 7F 7E C7 32 68 B6 A9 C0 8D 26 0B 85 : D8 48 56 96 CA 39 C1 7B 17 F0 44 D1 E0 50 48 90 : 36 AB D3 81 C5 E6 BF 82 BA 35 2A 1A FF 13 66 01 : AF 2043 30 78: SEQUENCE { 2045 06 7: OBJECT IDENTIFIER id-GostR3410-94-bBis 2054 30 67: SEQUENCE { 2056 02 5: INTEGER : 00 D0 5E 9F 14 2063 02 4: INTEGER 1177570399 2069 02 52: INTEGER : 35 AB 87 53 99 CD A3 3C 14 6C A6 29 66 0E 5A 5E : 5C 07 71 4C A3 26 DB 03 2D D6 75 19 95 CD B9 0A : 61 2B 92 28 93 2D 83 02 70 4E C2 4A 5D EF 77 39 : C5 81 3D 83 : } : } : } : } 2123 30 375: SEQUENCE { 2127 06 7: OBJECT IDENTIFIER : id-GostR3410-94-CryptoPro-XchB-ParamSet 2136 30 362: SEQUENCE { 2140 02 2: INTEGER 1024 2144 02 129: INTEGER : 00 92 86 DB DA 91 EC CF C3 06 0A A5 59 83 18 E2 : A6 39 F5 BA 90 A4 CA 65 61 57 B2 67 3F B1 91 CD : 05 89 EE 05 F4 CE F1 BD 13 50 84 08 27 14 58 C3 : 08 51 CE 7A 4E F5 34 74 2B FB 11 F4 74 3C 8F 78 : 7B 11 19 3B A3 04 C0 E6 BC A2 57 01 BF 88 AF 1C : B9 B8 FD 47 11 D8 9F 88 E3 2B 37 D9 53 16 54 1B : F1 E5 DB B4 98 9B 3D F1 36 59 B8 8C 0F 97 A3 C1 : 08 7B 9F 2D 53 17 D5 57 DC D4 AF C6 D0 A7 54 E2 Popov, et al. Informational [Page 39] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 : 79 2276 02 33: INTEGER : 00 C9 66 E9 B3 B8 B7 CD D8 2F F0 F8 3A F8 70 36 : C3 8F 42 23 8E C5 0A 87 6C D3 90 E4 3D 67 B6 01 : 3F 2311 02 128: INTEGER : 7E 9C 30 96 67 6F 51 E3 B2 F9 88 4C F0 AC 21 56 : 77 94 96 F4 10 E0 49 CE D7 E5 3D 8B 7B 5B 36 6B : 1A 60 08 E5 19 66 05 A5 5E 89 C3 19 0D AB F8 0BPopov,Kurepkin,Leontiev Informational [Page 39] Internet-Draft Crypto-Pro cryptographic algorithms September 2005: 9F 11 63 C9 79 FC D1 83 28 DA E5 E9 04 88 11 B3 : 70 10 7B B7 71 5F 82 09 1B B9 DE 0E 33 EE 2F ED : 62 55 47 4F 87 69 FC E5 EA FA EE F1 CB 5A 32 E0 : D5 C6 C2 F0 FC 0B 34 47 07 29 47 F5 B4 C3 87 66 : 69 93 A3 33 FC 06 56 8E 53 4A D5 6D 23 38 D7 29 2442 30 58: SEQUENCE { 2444 06 7: OBJECT IDENTIFIER id-GostR3410-94-bBis 2453 30 47: SEQUENCE { 2455 02 4: INTEGER 2046851076 2461 02 5: INTEGER : 00 D3 1A 4F F7 2468 02 32: INTEGER : 7E C1 23 D1 61 47 77 62 83 8C 2B EA 9D BD F3 30 : 74 AF 6D 41 D1 08 A0 66 A1 E7 A0 7A B3 04 8D E2 : } : } : } : } 2502 30 380: SEQUENCE { 2506 06 7: OBJECT IDENTIFIER : id-GostR3410-94-CryptoPro-XchC-ParamSet 2515 30 367: SEQUENCE { 2519 02 2: INTEGER 1024 2523 02 129: INTEGER : 00 B1 94 03 6A CE 14 13 9D 36 D6 42 95 AE 6C 50 : FC 4B 7D 65 D8 B3 40 71 13 66 CA 93 F3 83 65 39 : 08 EE 63 7B E4 28 05 1D 86 61 26 70 AD 7B 40 2C : 09 B8 20 FA 77 D9 DA 29 C8 11 1A 84 96 DA 6C 26 : 1A 53 ED 25 2E 4D 8A 69 A2 03 76 E6 AD DB 3B DC : D3 31 74 9A 49 1A 18 4B 8F DA 6D 84 C3 1C F0 5F : 91 19 B5 ED 35 24 6E A4 56 2D 85 92 8B A1 13 6A : 8D 0E 5A 7E 5C 76 4B A8 90 20 29 A1 33 6C 63 1A : 1D 2655 02 33: INTEGER : 00 96 12 04 77 DF 0F 38 96 62 8E 6F 4A 88 D8 3C : 93 20 4C 21 0F F2 62 BC CB 7D AE 45 03 55 12 52 : 59 2690 02 128: INTEGER : 3F 18 17 05 2B AA 75 98 FE 3E 4F 4F C5 C5 F6 16 Popov, et al. Informational [Page 40] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 : E1 22 CF F9 EB D8 9E F8 1D C7 CE 8B F5 6C C6 4B : 43 58 6C 80 F1 C4 F5 6D D5 71 8F DD 76 30 0B E3 : 36 78 42 59 CA 25 AA DE 5A 48 3F 64 C0 2A 20 CF : 4A 10 F9 C1 89 C4 33 DE FE 31 D2 63 E6 C9 76 46 : 60 A7 31 EC CA EC B7 4C 82 79 30 37 31 E8 CF 69 : 20 5B C7 3E 5A 70 BD F9 3E 5B B6 81 DA B4 EE B9 : C7 33 CA AB 2F 67 3C 47 5E 0E CA 92 1D 29 78 2E 2821 30 63: SEQUENCE { 2823 06 7: OBJECT IDENTIFIER id-GostR3410-94-bBisPopov,Kurepkin,Leontiev Informational [Page 40] Internet-Draft Crypto-Pro cryptographic algorithms September 20052832 30 52: SEQUENCE { 2834 02 4: INTEGER 371898640 2840 02 5: INTEGER : 00 93 F8 28 D3 2847 02 37: INTEGER : 00 CA 82 CC E7 8A 73 8B C4 6F 10 3D 53 B9 BF 80 : 97 45 EC 84 5E 4F 6D A4 62 60 6C 51 F6 0E CF 30 : 2E 31 20 4B 81 : } : } : } : } : } |>GostR3410-94-ParamSetParameters.bin |MIILQjCB0QYHKoUDAgIgADCBxQICAgACQQDugXKuiZZgj7aTWbieuCpphUUQ4pd6 |TWO8lzIs5dwzhuoKErND6RkPIxd1OYRYOXhrsMNF0WWXbvIZXsmxw3njAiEAmJFe |fsgmXt/Nox6I8kgJ3bBkvccoXdUNconwrG9J3S0CQQCelgMVAMh3SoaVgtSv3iEn |r60lOLS2JwpvfIg3tQ1Q8gZ1WYSknlCTBNZIviq1qrGOvizUasPYSVsUKqbOI+Ic |MBYGByqFAwICFAEwCwICXskCAnNBAgECMIIBVgYHKoUDAgIgAjCCAUkCAgQAAoGB |ALTiXvsBjjyLh1BeKmdVPF7cVsKRS35PidI/A/Azd+cKKQNIndYOeEGNPYUe21MX |xIceQLBCKMO3kCljxLfYXVK5qojyr9vrKNqIadbfhGodmJJOklVhvWkwC53dBdJH |tZItlny7AmcYgcV9EOXvctPm2tQiPcgqoffQKUZRpIDfAiEAlyQypDcXizC9lhlb |dzeJqy//FVlLF23RdbYyVu5a8s8CgYEAj9NnMSN2VLvkH18fhFPnHKQU/8IsJdkV |MJ5dLmKiomxxEfP8eVaNr6AoBC/hpSoEiYBcDemhpGnIRMfKu+5iXDB4iIwdhe6o |g/GtW8Tmd26OGgdQkS32T3mVZJnx4YJHWwtg4mMq3NjPlOnFT9HzsQnYHwC/KrjL |hirffUC5NpowGAYHKoUDAgIUBDANAgRSCHT1AgUA7jmtszCCAasGByqFAwICIAMw |ggGeAgIEAAKBgQDGlx/FdSSzDJAYxeYh3hVJlzaFT1am+K7mWnpARjKxvPA0n/yv |ywoQMXeXH8FhKtzbjIzJOMcCJcj9Eq/wGx0GTgrW/earkVkWbLny/BcdkvDMe2pr |LNf6NCrL4skxWkLVdrHsznepYxV/PQvZao6wsPNQKtI4EBsFEWM08eW3qwIhALCd |Y0wQiZzX1MOnZXQD4FgQsHxhpoi6ssN/R14wiwYHAoGAPSa0Z9lKP/ydcb+NuJNA |hBNyZPPC6esW3KIUuLx8hySFM2dEk0/S71lD+e0LdFuQqj7I1wzckWgkeLZkouH4 |+1bO8pcv7n7bCEr3RkGbhU+tAsw+Nkb/LhoY3UvrPET38nRViAKWSWdFRsyRh8IH |+48s7OjiKT9oOVxHBK8EurUwbgYHKoUDAgIUBDBjAgRbl3zbAgRulpLdAlUAvDy7 |235vhIKG4ZrZonqOKX5bccU92XTN9g+Tc1bfacvJejAMzHFoXFUwRhR/EVaMT93z |Y9nYhkODRaYsO3WWPWVGrfq/MbMSkNEsrmXsuDCe9meCMIIBXwYHKoUDAgIgBDCC |AVICAgQAAoGBAJ2I5tf+MxO9LnRcfN0que5K88iJnoR950ozeD6mi8MFiLofc4xq |r4qzUFMfGFTDg3zDyGD/1+LhBsP2Oz2KTANM5zlCpsPVhbWZz2le16PEqTsrlHtx |V7saHAQ6tB7IVmxhRek4phGQbeDTLlYklFadfpmaDdpch5vdkf4STfHpAiEA+t0Z Popov, et al. Informational [Page 41] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 |er0ZobRlPuz37KTWoisff4k7ZB+QFkH7tVU1T68CgYB0R+1xVjEFmQcLEmCZR6XI |yKhiXPHPJStAezMfk9Y53dG6OSZW3sqZLdA1NUMpoelabjLW9HiC2WC48QrK/3lt |E82WEfhT2rbSYjSD5GeIcISTk3oaKUQlmK7C4HQgIlY0QP6cGHQOzmdlrAX68CSm |SwJufkCIQIGeli5+X0Aa4zAiBgcqhQMCAhQEMBcCBEOEh0QCBQC1CoJtAgh/V16B |lLxb3zCCAXMGByqFAwICIAUwggFmAgIEAAKBgQCA8QLTKw/RZ9BpwnowetrSxGYJ |GQTbqlXVuMxwJvL3oZGbiQy2UsQOBU4ekwZzW0PXsnnt35ECABzZ4agx/ooWPu2J |qwfPKr6CQqyd7d2/mNYs3dHqT18V06QqZne90pOyQmDA8nwPHRWUhhTVZ7ZvqQK6 |oRpprjvOrbuD45nJtQIhAPD1RMQYqsI09oPwM1EbZcIWUaYHi9otabufcyhnUCFJ |AoGAa8wLT62ziJweBq3SPMCbirbs3t9z8EYyWV7kJQAF1q9fWt5Eyx4m5iY8ZyNHPopov,Kurepkin,Leontiev Informational [Page 41] Internet-Draft Crypto-Pro cryptographic algorithms September 2005|z6JvnpOTaB5rdZczeEzeXb2aFKOTad/Zn6hcwNECQcQBA0PzSpE5OnBs8SZ3y/of |V41rbPvooSQs/MlLO2U6R24UXjhiwYzD/tglfP73TNsgW/EwNgYHKoUDAgIUBDAr |AgQT2oudAgUAoOneSwIcQauXhX9CYUNV0y2wsQafEJpNooNnbHxTpoGFtDCCAYwG |ByqFAwICIQEwggF/AgIEAAKBgQDKOz8u7p/UYxfUlZWp51GObGPY9OtNItENKK8L |iDnwefgonmA7A1MHhLm7Wh52hZ5IUMZwx7ccDfhMo+DWwXf+n3ip2EMyMKiDzYKi |srXHozBpgCeFcM23m/AQdKacliM0iCSwxTeR1TxqeMq2nhz7KDaGEaOX9Q9UHhbb |NI2+XwIhAMrk2F+AwUdwSwykjoX7AKkFeqSsxEZo4X8ZltcVJpDZAoGBAL4n1lLy |8eM52nNCEbhbBq5N4jaqj77rPxrcxSzUOFN3foNKalGBOGeKitvTpVxwp+qxunoH |GVSGd6r05gn/tH9rnX5FsNBtg9etxTMQq9hXg+cxf37HMmi2qcCNJguF2EhWlso5 |wXsX8ETR4FBIkDar04HF5r+CujUqGv8TZgGvME4GByqFAwICFAQwQwIFANBenxQC |BEYwTF8CNDWrh1OZzaM8FGymKWYOWl5cB3FMoybbAy3WdRmVzbkKYSuSKJMtgwJw |TsJKXe93OcWBPYMwggF3BgcqhQMCAiECMIIBagICBAACgYEAkobb2pHsz8MGCqVZ |gxjipjn1upCkymVhV7JnP7GRzQWJ7gX0zvG9E1CECCcUWMMIUc56TvU0dCv7EfR0 |PI94exEZO6MEwOa8olcBv4ivHLm4/UcR2J+I4ys32VMWVBvx5du0mJs98TZZuIwP |l6PBCHufLVMX1Vfc1K/G0KdU4nkCIQDJZumzuLfN2C/w+Dr4cDbDj0IjjsUKh2zT |kOQ9Z7YBPwKBgH6cMJZnb1HjsvmITPCsIVZ3lJb0EOBJztflPYt7WzZrGmAI5Rlm |BaVeicMZDav4C58RY8l5/NGDKNrl6QSIEbNwEHu3cV+CCRu53g4z7i/tYlVHT4dp |/OXq+u7xy1oy4NXGwvD8CzRHBylH9bTDh2Zpk6Mz/AZWjlNK1W0jONcpMDoGByqF |AwICFAQwLwIEegB4BAIFANMaT/cCIH7BI9FhR3dig4wr6p298zB0r21B0QigZqHn |oHqzBI3iMIIBfAYHKoUDAgIhAzCCAW8CAgQAAoGBALGUA2rOFBOdNtZCla5sUPxL |fWXYs0BxE2bKk/ODZTkI7mN75CgFHYZhJnCte0AsCbgg+nfZ2inIERqEltpsJhpT |7SUuTYppogN25q3bO9zTMXSaSRoYS4/abYTDHPBfkRm17TUkbqRWLYWSi6ETao0O |Wn5cdkuokCApoTNsYxodAiEAlhIEd98POJZijm9KiNg8kyBMIQ/yYrzLfa5FA1US |UlkCgYA/GBcFK6p1mP4+T0/FxfYW4SLP+evYnvgdx86L9WzGS0NYbIDxxPVt1XGP |3XYwC+M2eEJZyiWq3lpIP2TAKiDPShD5wYnEM97+MdJj5sl2RmCnMezK7LdMgnkw |NzHoz2kgW8c+WnC9+T5btoHatO65xzPKqy9nPEdeDsqSHSl4LjA/BgcqhQMCAhQE |MDQCBBYquRACBQCT+CjTAiUAyoLM54pzi8RvED1Tub+Al0XshF5PbaRiYGxR9g7P |MC4xIEuB |<GostR3410-94-ParamSetParameters.bin11.411.4. GOST R 34.10-2001public key algorithm parametersPublic Key Algorithm Parameters For each AlgorithmIdentifier in thissequencesequence, the parameters field contains GostR3410-2001-ParamSetParameters. 0 30 998: SEQUENCE { 4 30 156: SEQUENCE { 7 06 7: OBJECT IDENTIFIER : id-GostR3410-2001-TestParamSet Popov, et al. Informational [Page 42] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 16 30 144: SEQUENCE { 19 02 1: INTEGER 7 22 02 32: INTEGER : 5F BF F4 98 AA 93 8C E7 39 B8 E0 22 FB AF EF 40 : 56 3F 6E 6A 34 72 FC 2A 51 4C 0C E9 DA E2 3B 7E 56 02 33: INTEGER : 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 : 31Popov,Kurepkin,Leontiev Informational [Page 42] Internet-Draft Crypto-Pro cryptographic algorithms September 200591 02 33: INTEGER : 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 : 01 50 FE 8A 18 92 97 61 54 C5 9C FC 19 3A CC F5 : B3 126 02 1: INTEGER 2 129 02 32: INTEGER :00 E3 77 43 4A08 E2 A8 A0 E6 51 47CE B9 B6 4B 64 C4 FF 74 A5 C4D4 BD 63 16 03 0E 16 D1 9C :21 5F EE 77 CF CC 30 5285 C9 7F 0A 9C A2 67 12 2B 96 AB BC EA 7E 8F C8 : } : } 163 30 159: SEQUENCE { 166 06 7: OBJECT IDENTIFIER : id-GostR3410-2001-CryptoPro-A-ParamSet 175 30 147: SEQUENCE { 178 02 33: INTEGER : 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF : FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FD : 94 213 02 2: INTEGER 166 217 02 33: INTEGER : 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF : FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FD : 97 252 02 33: INTEGER : 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF : FF 6C 61 10 70 99 5A D1 00 45 84 1B 09 B7 61 B8 : 93 287 02 1: INTEGER 1 290 02 33: INTEGER : 00 8D 91 E4 71 E0 98 9C DA 27 DF 50 5A 45 3F 2B : 76 35 29 4F 2D DF 23 E3 B1 22 AC C9 9C 9E 9F 1E : 14 : } : } 325 30 188: SEQUENCE { 328 06 7: OBJECT IDENTIFIER : id-GostR3410-2001-CryptoPro-B-ParamSet 337 30 176: SEQUENCE { 340 02 33: INTEGER Popov, et al. Informational [Page 43] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 : 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0C : 96 375 02 32: INTEGER : 3E 1A F4 19 A2 69 A5 F8 66 A7 D3 C2 5C 3D F8 0A : E9 79 25 93 73 FF 2B 18 2F 49 D4 CE 7E 1B BC 8B 409 02 33: INTEGER : 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 : 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0CPopov,Kurepkin,Leontiev Informational [Page 43] Internet-Draft Crypto-Pro cryptographic algorithms September 2005: 99 444 02 33: INTEGER : 00 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 : 01 5F 70 0C FF F1 A6 24 E5 E4 97 16 1B CC 8A 19 : 8F 479 02 1: INTEGER 1 482 02 32: INTEGER : 3F A8 12 43 59 F9 66 80 B8 3D 1C 3E B2 C0 70 E5 : C5 45 C9 85 8D 03 EC FB 74 4B F8 D7 17 71 7E FC : } : } 516 30 159: SEQUENCE { 519 06 7: OBJECT IDENTIFIER : id-GostR3410-2001-CryptoPro-C-ParamSet 528 30 147: SEQUENCE { 531 02 33: INTEGER : 00 9B 9F 60 5F 5A 85 81 07 AB 1E C8 5E 6B 41 C8 : AA CF 84 6E 86 78 90 51 D3 79 98 F7 B9 02 2D 75 : 98 566 02 3: INTEGER 32858 571 02 33: INTEGER : 00 9B 9F 60 5F 5A 85 81 07 AB 1E C8 5E 6B 41 C8 : AA CF 84 6E 86 78 90 51 D3 79 98 F7 B9 02 2D 75 : 9B 606 02 33: INTEGER : 00 9B 9F 60 5F 5A 85 81 07 AB 1E C8 5E 6B 41 C8 : AA 58 2C A3 51 1E DD FB 74 F0 2F 3A 65 98 98 0B : B9 641 02 1: INTEGER 0 644 02 32: INTEGER : 41 EC E5 57 43 71 1A 8C 3C BF 37 83 CD 08 C0 EE : 4D 4D C4 40 D4 64 1A 8F 36 6E 55 0D FD B3 BB 67 : } : } 678 30 159: SEQUENCE { 681 06 7: OBJECT IDENTIFIER : id-GostR3410-2001-CryptoPro-XchA-ParamSet 690 30 147: SEQUENCE { 693 02 33: INTEGER Popov, et al. Informational [Page 44] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 : 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF : FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FD : 94 728 02 2: INTEGER 166 732 02 33: INTEGER : 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF : FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF FD : 97 767 02 33: INTEGERPopov,Kurepkin,Leontiev Informational [Page 44] Internet-Draft Crypto-Pro cryptographic algorithms September 2005: 00 FF FF FF FF FF FF FF FF FF FF FF FF FF FF FF : FF 6C 61 10 70 99 5A D1 00 45 84 1B 09 B7 61 B8 : 93 802 02 1: INTEGER 1 805 02 33: INTEGER : 00 8D 91 E4 71 E0 98 9C DA 27 DF 50 5A 45 3F 2B : 76 35 29 4F 2D DF 23 E3 B1 22 AC C9 9C 9E 9F 1E : 14 : } : } 840 30 159: SEQUENCE { 843 06 7: OBJECT IDENTIFIER : id-GostR3410-2001-CryptoPro-XchB-ParamSet 852 30 147: SEQUENCE { 855 02 33: INTEGER : 00 9B 9F 60 5F 5A 85 81 07 AB 1E C8 5E 6B 41 C8 : AA CF 84 6E 86 78 90 51 D3 79 98 F7 B9 02 2D 75 : 98 890 02 3: INTEGER 32858 895 02 33: INTEGER : 00 9B 9F 60 5F 5A 85 81 07 AB 1E C8 5E 6B 41 C8 : AA CF 84 6E 86 78 90 51 D3 79 98 F7 B9 02 2D 75 : 9B 930 02 33: INTEGER : 00 9B 9F 60 5F 5A 85 81 07 AB 1E C8 5E 6B 41 C8 : AA 58 2C A3 51 1E DD FB 74 F0 2F 3A 65 98 98 0B : B9 965 02 1: INTEGER 0 968 02 32: INTEGER : 41 EC E5 57 43 71 1A 8C 3C BF 37 83 CD 08 C0 EE : 4D 4D C4 40 D4 64 1A 8F 36 6E 55 0D FD B3 BB 67 : } : } : } |>GostR3410-2001-ParamSetParameters.bin |MIID5jCBnAYHKoUDAgIjADCBkAIBBwIgX7/0mKqTjOc5uOAi+6/vQFY/bmo0cvwq |UUwM6driO34CIQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEMQIhAIAA|AAAAAAAAAAAAAAAAAAFQ/ooYkpdhVMWc/Bk6zPWzAgECAiAA43dDSkfOubZLZMT/ |dKXEIV/ud8/MMFIrlqu86n6PyDCBnwYHKoUDAgIjATCBkwIhAP//////////////|AAAAAAAAAAAAAAAAAAFQ/ooYkpdhVMWc/Bk6zPWzAgECAiAI4qig5lFH1L1jFgMO Popov, et al. Informational [Page 45] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 |FtGchcl/CpyiZxIrlqu86n6PyDCBnwYHKoUDAgIjATCBkwIhAP////////////// |//////////////////////////2UAgIApgIhAP////////////////////////// |//////////////2XAiEA/////////////////////2xhEHCZWtEARYQbCbdhuJMC |AQECIQCNkeRx4Jic2iffUFpFPyt2NSlPLd8j47EirMmcnp8eFDCBvAYHKoUDAgIj |AjCBsAIhAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAyWAiA+GvQZomml |+Gan08JcPfgK6Xklk3P/KxgvSdTOfhu8iwIhAIAAAAAAAAAAAAAAAAAAAAAAAAAA |AAAAAAAAAAAAAAyZAiEAgAAAAAAAAAAAAAAAAAAAAV9wDP/xpiTl5JcWG8yKGY8C |AQECID+oEkNZ+WaAuD0cPrLAcOXFRcmFjQPs+3RL+NcXcX78MIGfBgcqhQMCAiMD |MIGTAiEAm59gX1qFgQerHshea0HIqs+EboZ4kFHTeZj3uQItdZgCAwCAWgIhAJufPopov,Kurepkin,Leontiev Informational [Page 45] Internet-Draft Crypto-Pro cryptographic algorithms September 2005|YF9ahYEHqx7IXmtByKrPhG6GeJBR03mY97kCLXWbAiEAm59gX1qFgQerHshea0HI |qlgso1Ee3ft08C86ZZiYC7kCAQACIEHs5VdDcRqMPL83g80IwO5NTcRA1GQajzZu |VQ39s7tnMIGfBgcqhQMCAiQAMIGTAiEA//////////////////////////////// |/////////ZQCAgCmAiEA/////////////////////////////////////////ZcC |IQD/////////////////////bGEQcJla0QBFhBsJt2G4kwIBAQIhAI2R5HHgmJza |J99QWkU/K3Y1KU8t3yPjsSKsyZyenx4UMIGfBgcqhQMCAiQBMIGTAiEAm59gX1qF |gQerHshea0HIqs+EboZ4kFHTeZj3uQItdZgCAwCAWgIhAJufYF9ahYEHqx7IXmtB |yKrPhG6GeJBR03mY97kCLXWbAiEAm59gX1qFgQerHshea0HIqlgso1Ee3ft08C86 |ZZiYC7kCAQACIEHs5VdDcRqMPL83g80IwO5NTcRA1GQajzZuVQ39s7tn |<GostR3410-2001-ParamSetParameters.bin1212. Acknowledgements This document was created in accordance with "Russian Cryptographic Software Compatibility Agreement", signed by FGUE STC "Atlas", CRYPTO-PRO, Factor-TS, MD PREI, Infotecs GmbH, SPRCIS (SPbRCZI), Cryptocom, R-Alpha. The aim of this agreement is to achieve mutual compatibility of the products and solutions. The authors wish to thank the following: Microsoft Corporation Russia for providing information about company products and solutions, and also for technical consulting in PKI. RSA Security Russia and Demos Co Ltd for active collaboration and critical help in creation of this document. Peter Gutmann for his helpful "dumpasn1" program. Russ Hously (Vigil Security, LLC, housley@vigilsec.com) and Vasilij Sakharov (DEMOS Co Ltd, svp@dol.ru) for encouraging the authors to create this document. Derek Atkins (IHTFP Consulting, derek@ihtfp.com) and his wife, Heather Anne Harrison, for making the document readable. Grigorij Chudov for navigating the IETF process for this document. Popov, et al. Informational [Page 46] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 This document is based on a contribution of CRYPTO-PRO Company. Any substantial use of the text from this document must acknowledge CRYPTO-PRO. CRYPTO-PRO requests that all material mentioning or referencing this document identify this as "CRYPTO-PRO CPALGS". 13. References 13.1. Normativereferences:References [GOST28147] "Cryptographic Protection for Data Processing System", GOST 28147-89, Gosudarstvennyi Standard of USSR,Gov- ernmentGovernment Committee of the USSR for Standards, 1989. (InRussian);Russian) [GOSTR341094] "Information technology. Cryptographic Data Security. Produce and check procedures of Electronic DigitalSig- naturesSignatures based on Asymmetric Cryptographic Algorithm.", GOST R 34.10-94, Gosudarstvennyi Standard of Russian Federation, Government Committee of the Russia for Standards, 1994. (InRussian);Russian) [GOSTR341001] "Information technology. Cryptographic data security. Signature and verification processes of [electronic] digital signature.", GOST R 34.10-2001, Gosudarstvennyi Standard of Russian Federation, Government Committee of the Russia for Standards, 2001. (InRussian);Russian) [GOSTR341194] "Information technology. Cryptographic Data Security. Hashing function.", GOST R 34.11-94, Gosudarstvennyi Standard of Russian Federation, Government Committee of the Russia for Standards, 1994. (InRussian); [RFC 2119]Russian) [RFC2119] Bradner, S., "KeyWordswords forUseuse in RFCs toIndi- cateRequirementIndicate Requirement Levels", BCP 14, RFC 2119, March 1997. [HMAC]H.Krawczyk,M.H., Bellare, M., and R. Canetti, "HMAC:Keyed-Hash- ingKeyed-Hashing for Message Authentication", RFC 2104, February 1997.Popov,Kurepkin,Leontiev Informational [Page 46] Internet-Draft Crypto-Pro cryptographic algorithms September 200513.2. Informativereferences:References [Schneier95] B. Schneier, Applied cryptography, second edition, John Wiley & Sons, Inc.,1995;1995. [RFDSL] "Russian Federal Digital Signature Law", 10 Jan 2002N1-FZN 1-FZ [RFLLIC] "Russian Federal Law on Licensing of Selected Activity Categories", 08 Aug 2001 N 128-FZ Popov, et al. Informational [Page 47] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 [CRYPTOLIC] "Russian FederalGovermentGovernment Regulation on Licensing of Selected Activity Categories in Cryptography Area", 23 Sep 2002 N 691 [X.660] ITU-T Recommendation X.660 Information Technology - ASN.1 encoding rules: Specification ofBasic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distin- guished Encoding Rules (DER), 1997. [RFC 4134] P. Hoffman, Ed., "Examples of S/MIME Messages", July 2005, RFC 4134. [TLS] The TLS Protocol Version 1.0. T. Dierks, C. Allen. January 1999, RFC 2246. 13 Acknowledgments This document was created in accordance with "Russian Cryptographic Software Compatibility Agreement", signed by FGUE STC "Atlas", CRYPTO-PRO, Factor-TS, MD PREI, Infotecs GmbH, SPRCIS (SPbRCZI), Cryptocom, R-Alpha. The aim of this agreement is to achieve mutual compatibility of the products and solutions. The authors wish to thank: Microsoft Corporation Russia for providing information about company products and solutions, and also for technical consulting in PKI. RSA Security Russia and Demos Co Ltd for active collaboration and critical help in creation of this document. Peter Gutmann for his helpful "dumpasn1" program. Russ Hously (Vigil Security, LLC, housley@vigilsec.com) and Popov,Kurepkin,Leontiev Informational [Page 47] Internet-Draft Crypto-Pro cryptographic algorithms September 2005 Vasilij Sakharov (DEMOS Co Ltd, svp@dol.ru) for initiative, creating this document. Derek Atkins (IHTFP Consulting, derek@ihtfp.com) and his wife, Heather Anne Harrison for making the document readable. Grigorij Chudov for navigating the IETF process for this document. This document is based on a contribution of CRYPTO-PRO Company. Any substantial use of the text from this document must acknowledge CRYPTO-PRO. CRYPTO-PRO requests that all material mentioning or referencing this document identify this as "CRYPTO-PRO CPALGS". Author'sBasic Encoding Rules (BER), Canonical Encoding Rules (CER) and Distinguished Encoding Rules (DER), 1997. [RFC4134] Hoffman, P., "Examples of S/MIME Messages", RFC 4134, July 2005. [TLS] Dierks, T. and C. Allen, "The TLS Protocol Version 1.0", RFC 2246, January 1999. Authors' Addresses Vladimir Popov CRYPTO-PRO 38, Obraztsova, Moscow, 127018, Russian Federation EMail: vpopov@cryptopro.ru Igor Kurepkin CRYPTO-PRO 38, Obraztsova, Moscow, 127018, Russian Federation EMail: kure@cryptopro.ru Serguei Leontiev CRYPTO-PRO 38, Obraztsova, Moscow, 127018, Russian Federation EMail: lse@cryptopro.ru Grigorij Chudov CRYPTO-PRO 38, Obraztsova, Moscow, 127018, Russian Federation EMail: chudov@cryptopro.ru Popov, et al. Informational [Page 48] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 Alexandr Afanasiev Factor-TS office 711, 14, Presnenskij val, Moscow, 123557, Russian Federation EMail: afa1@factor-ts.ru Nikolaj Nikishin Infotecs GmbH p/b 35, 80-5, Leningradskij prospekt,Popov,Kurepkin,Leontiev Informational [Page 48] Internet-Draft Crypto-Pro cryptographic algorithms September 2005Moscow, 125315, Russian Federation EMail: nikishin@infotecs.ru Boleslav Izotov FGUE STC "Atlas" 38, Obraztsova, Moscow, 127018, Russian Federation EMail: izotov@nii.voskhod.ru Elena Minaeva MD PREI build 3, 6A, Vtoroj Troitskij per., Moscow, Russian Federation EMail: evminaeva@mail.ru Serguei Murugov R-Alpha 4/1, Raspletina, Moscow, 123060, Russian Federation EMail: msm@top-cross.ru Igor Ovcharenko MD PREI Office 600, 14, B.Novodmitrovskaya, Moscow, Russian Federation EMail: igori@mo.msk.ru Popov, et al. Informational [Page 49] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 Igor Ustinov Cryptocom office 239, 51, Leninskij prospekt, Moscow, 119991, Russian Federation EMail: igus@cryptocom.ru Anatolij Erkin SPRCIS (SPbRCZI) 1, Obrucheva, St.Petersburg, 195220, Russian Federation EMail: erkin@nevsky.netDisclaimer of ValidityPopov, et al. Informational [Page 50] RFC 4357 Crypto-Pro Cryptographic Algorithms January 2006 Full Copyright Statement Copyright (C) The Internet Society (2006). This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the authors retain all their rights. This document and the information contained herein are provided on an "AS IS" basis and THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK FORCE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE.Full Copyright Statement Copyright (C)Intellectual Property TheInternet Society (2005). ThisIETF takes no position regarding the validity or scope of any Intellectual Property Rights or other rights that might be claimed to pertain to the implementation or use of the technology described in this documentis subjector the extent to which any license under such rights might or might not be available; nor does it represent that it has made any independent effort to identify any such rights. Information on therights, licenses and restrictions containedprocedures with respect to rights in RFC documents can be found in BCP78,78 andexcept as set forth therein,BCP 79. Copies of IPR disclosures made to theauthors retain all their rights. Popov,Kurepkin,Leontiev Informational [Page 49] Internet-Draft Crypto-Pro cryptographic algorithms September 2005 AcknowledgmentIETF Secretariat and any assurances of licenses to be made available, or the result of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementers or users of this specification can be obtained from the IETF on-line IPR repository at http://www.ietf.org/ipr. The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary rights that may cover technology that may be required to implement this standard. Please address the information to the IETF at ietf-ipr@ietf.org. Acknowledgement Funding for the RFC Editor function iscurrentlyprovided by theInternet Society. Popov,Kurepkin,LeontievIETF Administrative Support Activity (IASA). Popov, et al. Informational [Page50]51] ----