Signing - Revision history

Tom: /* Solutions */

2023-03-08T19:50:52Z

‎Solutions

2022-07-30T21:05:10Z

‎Solutions

2022-07-30T21:02:19Z

‎Solutions

2022-07-30T21:01:28Z

‎Solutions

2022-07-30T21:00:47Z

‎Solutions

2022-07-30T20:59:01Z

‎Solutions

2022-07-30T20:56:59Z

‎Solutions

2022-07-30T18:38:44Z

‎References

2022-07-30T18:38:18Z

‎Solutions

2022-07-30T18:33:53Z

‎Solutions

@@ Line 5: / Line 5: @@
 * RSA signing with 3072 bit keys is good enough for TOP SECRET on 2015-08-19, but might not be included in post-quantum cryptography suites.
 * See the wiki page [[Quantum Computing Threat]] for current status on post-quantum [[Cryptography]].
-* Curves Supported by OpenSSL can be discovered by keying (there will typically be many more that shown here)
+* Curves Supported by [[OpenSSL]] can be discovered by keying (there will typically be many more that shown here)
   openssl ecparam -list_curves

@@ Line 3: / Line 3: @@
 ==Solutions==
-* RSA signing with 3072 bit keys is good enough for TOP SECRET om 2015-08-19, but might not be included in post-quantum cryptography suites.
+* RSA signing with 3072 bit keys is good enough for TOP SECRET on 2015-08-19, but might not be included in post-quantum cryptography suites.
 * See the wiki page [[Quantum Computing Threat]] for current status on post-quantum [[Cryptography]].
 * Curves Supported by OpenSSL can be discovered by keying (there will typically be many more that shown here)

@@ Line 12: / Line 12: @@
 | IETF name || NIST name|| W3C name || SSL||  Description
 |-
-| secp256k1|| || || default  || Koblitz curve 256 bit SEC
+| secp256k1|| || EcdsaSecp256k1Signature2019|| default  || Koblitz curve 256 bit SEC
 |-
-| secp256r1||P-256 ||EcdsaSecp256k1Signature2019||default  || random curve 256 bit SEC [https://www.nsa.gov/ia/programs/suiteb_cryptography/ SUITE B]
+| secp256r1||P-256 || EcdsaSecp256r1Signature2019||default  || random curve 256 bit SEC [https://www.nsa.gov/ia/programs/suiteb_cryptography/ SUITE B]
 |-
-| secp384r1|| P-384|| EcdsaSecp256r1Signature2019 ||default ||random curve 386 bit SEC [https://www.nsa.gov/ia/programs/suiteb_cryptography/ SUITE B] -OK for TOP SECRET
+| secp384r1|| P-384||  ||default ||random curve 386 bit SEC [https://www.nsa.gov/ia/programs/suiteb_cryptography/ SUITE B] -OK for TOP SECRET
 |-
 | secp521r1|| P-521||  || default ||random curve 521 bit SEC - not worth the extra work

@@ Line 20: / Line 20: @@
 | secp521r1|| P-521||  || default ||random curve 521 bit SEC - not worth the extra work
 |-
-| || || ||Ed25519Signature2018
+| ||  ||Ed25519Signature2018 ||
 |-
 | sect283r1||  || ||  ||Weierstrass curve 283-bit

@@ Line 16: / Line 16: @@
 | secp256r1||P-256 ||EcdsaSecp256k1Signature2019||default  || random curve 256 bit SEC [https://www.nsa.gov/ia/programs/suiteb_cryptography/ SUITE B]
 |-
-| secp384r1|| P-384|| EcdsaSecp256r1Signature2019 ||default ||  ||random curve 386 bit SEC [https://www.nsa.gov/ia/programs/suiteb_cryptography/ SUITE B] -OK for TOP SECRET
+| secp384r1|| P-384|| EcdsaSecp256r1Signature2019 ||default ||random curve 386 bit SEC [https://www.nsa.gov/ia/programs/suiteb_cryptography/ SUITE B] -OK for TOP SECRET
 |-
 | secp521r1|| P-521||  || default ||random curve 521 bit SEC - not worth the extra work
 |-
-| sect283r1||  || ||  ||Weierstrass curve 283-bit ||
+| || || ||Ed25519Signature2018
 |-
 | brainpoolP256r1||  || || default ||

@@ Line 10: / Line 10: @@
 {|border="1" padding="2" width="799px"
-| IETF name || NIST name|| SSL||  Description
+| IETF name || NIST name|| W3C name || SSL||  Description
 |-
-| secp256k1|| || default || Koblitz curve 256 bit SEC
+| secp256k1|| || default || || Koblitz curve 256 bit SEC
 |-
-| secp256r1||P-256 ||default  || random curve 256 bit SEC [https://www.nsa.gov/ia/programs/suiteb_cryptography/ SUITE B]
+| secp256r1||P-256 ||EcdsaSecp256k1Signature2019||default  || random curve 256 bit SEC [https://www.nsa.gov/ia/programs/suiteb_cryptography/ SUITE B]
 |-
-| secp384r1|| P-384|| default || random curve 386 bit SEC [https://www.nsa.gov/ia/programs/suiteb_cryptography/ SUITE B] -OK for TOP SECRET
+| secp384r1|| P-384|| default ||  ||random curve 386 bit SEC [https://www.nsa.gov/ia/programs/suiteb_cryptography/ SUITE B] -OK for TOP SECRET
 |-
-| secp521r1|| P-521|| default || random curve 521 bit SEC - not worth the extra work
+| secp521r1|| P-521|| default || || random curve 521 bit SEC - not worth the extra work
 |-
-| sect283r1||  ||  ||Weierstrass curve 283-bit
+| sect283r1||  || ||  ||Weierstrass curve 283-bit ||
 |-
-| brainpoolP256r1|| || default
+| brainpoolP256r1||  || || default ||
 |-
-| brainpoolP384r1|| || default
+| brainpoolP384r1||  |||| default ||
 |-
-| brainpoolP521r1|| || default
+| brainpoolP521r1||  |||| default ||
 |-
-| brainpoolP256t1||  || ||
+| brainpoolP256t1||  || ||  ||
 |}

← Older revision		Revision as of 18:38, 30 July 2022
Line 36:		Line 36:
	* On 2022-08-19 the NSA [https://apps.nsa.gov/iaarchive/programs/iad-initiatives/cnsa-suite.cfm Commercial National Security Algorithm Suite] replaced SUITE B		* On 2022-08-19 the NSA [https://apps.nsa.gov/iaarchive/programs/iad-initiatives/cnsa-suite.cfm Commercial National Security Algorithm Suite] replaced SUITE B

		+	[[Category: Glossary]]
	[[Category: Cryptography]]		[[Category: Cryptography]]