Russian cryptographic algorithms (GOST) in Cryptographic Message Syntax and S/MIME Grigory Chudov CRYPTO-PRO, Russia draft-leontiev-cryptopro-cpcms-00.txt

Russian state standards GOST "Cryptographic Protection for Data Processing System“, 1989 GOST R "Information technology. Cryptographic data security. Signature and verification processes of [electronic] digital signature.“, GOST R "Information technology. Cryptographic Data Security. Produce and check procedures of Electronic Digital Signatures based on Asymmetric Cryptographic Algorithm.", GOST R "Information technology. Cryptographic Data Security. Hashing function.", Encryption Hashing Digital signature

Compatibility S-BOX not defined (except for test values) Elliptic Curve parameters not defined P, Q, A not defined (except for test values) S-BOX not defined Encryption Digest Digital signature Russian Federal Digital Signature Law, 10 Jan 2002 PKI ready Algorithm Parameters

Cryptographic Software Compatibility Agreement FGUE STC "Atlas" CRYPTO-PRO Factor-TC MD PREI Infotecs GmbH SPRCIS (SPbRCZI) Cryptocom R-Alpha Russian commercial cryptographic software vendors

Informational Internet Drafts Addition of GOST Ciphersuites to Transport Layer Security (TLS) Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificates and Certificate Revocation List (CRL), corresponding to the algorithms GOST R , GOST R , GOST R Cryptographic Message Syntax (CMS) algorithms for GOST , GOST R , GOST R , GOST R

CMS GOST Algorithms id-Gost OBJECT IDENTIFIER ::= -- Encryption { id-CryptoPro-algorithms gost (21) } id-GostR OBJECT IDENTIFIER ::= -- Digest { id-CryptoPro-algorithms gostr3411(9) } id-GostR OBJECT IDENTIFIER ::= -- Signature { id-CryptoPro-algorithms gostR (20) } id-GostR OBJECT IDENTIFIER ::= -- Signature { id-CryptoPro-algorithms gostR (19) }

CMS GOST Parameters Gost Parameters ::= SEQUENCE { encryptionParamSetOBJECT IDENTIFIER, -- S-Box, etc ivGost IV } GostR ParamSetParameters ::= SEQUENCE { hUZ Gost UZ, -- S-Box for digest OID h0 GostR Digest -- starting value } GostR PublicKeyParameters ::= SEQUENCE { publicKeyParamSetOBJECT IDENTIFIER, digestParamSetOBJECT IDENTIFIER, encryptionParamSetOBJECT IDENTIFIER OPTIONAL } GostR PublicKeyParameters ::= SEQUENCE { publicKeyParamSetOBJECT IDENTIFIER, digestParamSetOBJECT IDENTIFIER, encryptionParamSetOBJECT IDENTIFIER OPTIONAL }

GOST Key Transport GostR KeyTransportEncryptedKeyOctetString ::= SEQUENCE { sessionEncryptedKeyGost EncryptedKey, transportParameters[0] IMPLICIT GostR TransportParameters OPTIONAL } GostR TransportParameters ::= SEQUENCE { encryptionParamSetOBJECT IDENTIFIER, ephemeralPublicKey[0] IMPLICIT SubjectPublicKeyInfo OPTIONAL, ukmOCTET STRING } GostR KeyTransportEncryptedKeyOctetString ::= SEQUENCE { sessionEncryptedKeyGost EncryptedKey, transportParameters[0] IMPLICIT GostR TransportParameters OPTIONAL } GostR TransportParameters ::= SEQUENCE { encryptionParamSetOBJECT IDENTIFIER, ephemeralPublicKey[0] IMPLICIT SubjectPublicKeyInfo OPTIONAL, ukmOCTET STRING }

CMS Implementations Microsoft Windows CryptoPro CSP – Russian cryptography standards through Microsoft Cryptographic Service Provider Interface. CryptoPro TLS – adds GOST cipher suites to Microsoft Schannel SSP (Security Support Provider). Solaris (Sun, Intel), VSTa - released Linux, Free BSD, AIX - in progress CSP, TLS ISV products SAP R/3 SNC, SSF adapters Apache, Open SSL, mod_ssl, JCA CSP, TLS

S/MIME Implementations CryptoPro CSP Outlook Outlook Express The BAT! ( Moldova