PKIX Working Group                         R. Housley (RSA Laboratories)Internet Draft                                            W. Polk (NIST)draft-ietf-pkix-new-pkalgs-asn1-01.txt                        April 2002Expires in six months                        Update for Section 3 in                   draft-ietf-pkix-ipki-pkalgs-05.txtStatus of this Memo   This document is an Internet-Draft and is in full conformance with   all provisions of Section 10 of RFC2026.  Internet-Drafts are working   documents of the Internet Engineering Task Force (IETF), its areas,   and its working groups.  Note that other groups may also distribute   working documents as Internet-Drafts.   Internet-Drafts are draft documents valid for a maximum of six months   and may be updated, replaced, or obsoleted by other documents at any   time.  It is inappropriate to use Internet- Drafts as reference   material or to cite them other than as "work in progress."     The list of current Internet-Drafts can be accessed at     http://www.ietf.org/1id-abstracts.html     The list of Internet-Draft Shadow Directories can be accessed at     http://www.ietf.org/shadow.html   Copyright (C) The Internet Society (2002).  All Rights Reserved.Abstract   As all members of the PKIX Working Group know, draft-ietf-pkix-ipki-   pkalgs-05.txt is with the RFC Editor.  However, an error in the ASN.1   modules was discovered.  The authors are working with the RFC Editor   to ensure that the corrected ASN.1 modules are included in the final   text, and we are publishing this Internet-Draft to distribute the   corrected ASN.1 module as quickly as possible.   This Internet-Draft contains only the updated ASN.1 module.Housley & Polk                                                  [Page 1]INTERNET DRAFT                                                April 20023  ASN.1 Module   PKIX1Algorithms88 { iso(1) identified-organization(3) dod(6)   internet(1) security(5) mechanisms(5) pkix(7) id-mod(0)   id-mod-pkix1-algorithms(17) }   DEFINITIONS EXPLICIT TAGS ::= BEGIN   -- EXPORTS All;   -- IMPORTS NONE;   --   --   One-way Hash Functions   --   md2  OBJECT IDENTIFIER ::= {     iso(1) member-body(2) us(840) rsadsi(113549)     digestAlgorithm(2) 2 }   md5  OBJECT IDENTIFIER ::= {     iso(1) member-body(2) us(840) rsadsi(113549)     digestAlgorithm(2) 5 }   id-sha1  OBJECT IDENTIFIER ::= {     iso(1) identified-organization(3) oiw(14) secsig(3)     algorithms(2) 26 }   --   --   DSA Keys and Signatures   --   -- OID for DSA public key   id-dsa OBJECT IDENTIFIER ::= {        iso(1) member-body(2) us(840) x9-57(10040) x9algorithm(4) 1 }   -- encoding for DSA public key   DSAPublicKey ::= INTEGER  -- public key, y   Dss-Parms  ::=  SEQUENCE  {      p             INTEGER,      q             INTEGER,      g             INTEGER  }Housley & Polk                                                  [Page 2]INTERNET DRAFT                                                April 2002   -- OID for DSA signature generated with SHA-1 hash   id-dsa-with-sha1 OBJECT IDENTIFIER ::=  {        iso(1) member-body(2) us(840) x9-57 (10040) x9algorithm(4) 3 }   -- encoding for DSA signature generated with SHA-1 hash   Dss-Sig-Value  ::=  SEQUENCE  {      r       INTEGER,      s       INTEGER  }   --   --   RSA Keys and Signatures   --   -- arc for RSA public key and RSA signature OIDs   pkcs-1 OBJECT IDENTIFIER ::= {         iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 1 }   -- OID for RSA public keys   rsaEncryption OBJECT IDENTIFIER ::=  { pkcs-1 1 }   -- OID for RSA signature generated with MD2 hash   md2WithRSAEncryption OBJECT IDENTIFIER  ::=  { pkcs-1 2 }   -- OID for RSA signature generated with MD5 hash   md5WithRSAEncryption OBJECT IDENTIFIER  ::=  { pkcs-1 4 }   -- OID for RSA signature generated with SHA-1 hash   sha1WithRSAEncryption OBJECT IDENTIFIER  ::=  { pkcs-1 5 }   -- encoding for RSA public key   RSAPublicKey ::= SEQUENCE {      modulus            INTEGER,    -- n      publicExponent     INTEGER  }  -- eHousley & Polk                                                  [Page 3]INTERNET DRAFT                                                April 2002   --   --   Diffie-Hellman Keys   --   dhpublicnumber OBJECT IDENTIFIER ::= {        iso(1) member-body(2) us(840) ansi-x942(10046)        number-type(2) 1 }   -- encoding for DSA public key   DHPublicKey ::= INTEGER  -- public key, y = g^x mod p   DomainParameters ::= SEQUENCE {      p       INTEGER,           -- odd prime, p=jq +1      g       INTEGER,           -- generator, g      q       INTEGER,           -- factor of p-1      j       INTEGER OPTIONAL,  -- subgroup factor, j>= 2      validationParms  ValidationParms OPTIONAL }   ValidationParms ::= SEQUENCE {      seed             BIT STRING,      pgenCounter      INTEGER }   --   --   KEA Keys   --   id-keyExchangeAlgorithm  OBJECT IDENTIFIER  ::=        { 2 16 840 1 101 2 1 1 22 }   KEA-Parms-Id ::= OCTET STRING   --   --   Elliptic Curve Keys, Signatures, and Curves   --   ansi-X9-62 OBJECT IDENTIFIER ::= {        iso(1) member-body(2) us(840) 10045 }   FieldID ::= SEQUENCE {                    -- Finite field      fieldType   OBJECT IDENTIFIER,      parameters  ANY DEFINED BY fieldType }   -- Arc for ECDSA signature OIDS   id-ecSigType OBJECT IDENTIFIER ::= { ansi-X9-62 signatures(4) }Housley & Polk                                                  [Page 4]INTERNET DRAFT                                                April 2002   -- OID for ECDSA signatures with SHA-1   ecdsa-with-SHA1 OBJECT IDENTIFIER ::= { id-ecSigType 1 }   -- OID for an elliptic curve signature   -- format for the value of an ECDSA signature value   ECDSA-Sig-Value ::= SEQUENCE {      r     INTEGER,      s     INTEGER }   -- recognized field type OIDs are defined in the following arc   id-fieldType OBJECT IDENTIFIER ::= { ansi-X9-62 fieldType(1) }   -- where fieldType is prime-field, the parameters are of type Prime-p   prime-field OBJECT IDENTIFIER ::= { id-fieldType 1 }   Prime-p ::= INTEGER -- Finite field F(p), where p is an odd prime   -- where fieldType is characteristic-two-field, the parameters are   -- of type Characteristic-two   characteristic-two-field OBJECT IDENTIFIER ::= { id-fieldType 2 }   Characteristic-two ::= SEQUENCE {      m           INTEGER,                   -- Field size 2^m      basis       OBJECT IDENTIFIER,      parameters  ANY DEFINED BY basis }   -- recognized basis type OIDs are defined in the following arc   id-characteristic-two-basis OBJECT IDENTIFIER ::= {        characteristic-two-field basisType(3) }   -- gnbasis is identified by OID gnBasis and indicates   -- parameters are NULL   gnBasis OBJECT IDENTIFIER ::= { id-characteristic-two-basis 1 }   -- parameters for this basis are NULL   -- trinomial basis is identified by OID tpBasis and indicates   -- parameters of type Pentanomial   tpBasis OBJECT IDENTIFIER ::= { id-characteristic-two-basis 2 }Housley & Polk                                                  [Page 5]INTERNET DRAFT                                                April 2002   -- Trinomial basis representation of F2^m   -- Integer k for reduction polynomial xm + xk + 1   Trinomial ::= INTEGER   -- for pentanomial basis is identified by OID ppBasis and indicates   -- parameters of type Pentanomial   ppBasis OBJECT IDENTIFIER ::= { id-characteristic-two-basis 3 }   -- Pentanomial basis representation of F2^m   -- reduction polynomial integers k1, k2, k3   -- f(x) = x**m + x**k3 + x**k2 + x**k1 + 1   Pentanomial ::= SEQUENCE {      k1  INTEGER,      k2  INTEGER,      k3  INTEGER }   -- The object identifiers gnBasis, tpBasis and ppBasis name   -- three kinds of basis for characteristic-two finite fields   FieldElement ::= OCTET STRING             -- Finite field element   ECPoint  ::= OCTET STRING                 -- Elliptic curve point   -- Elliptic Curve parameters may be specified explicitly,   -- specified implicitly through a "named curve", or   -- inherited from the CA   EcpkParameters ::= CHOICE {      ecParameters  ECParameters,      namedCurve    OBJECT IDENTIFIER,      implicitlyCA  NULL }   ECParameters  ::= SEQUENCE {         -- Elliptic curve parameters      version   ECPVer,      fieldID   FieldID,      curve     Curve,      base      ECPoint,                -- Base point G      order     INTEGER,                -- Order n of the base point      cofactor  INTEGER  OPTIONAL }     -- The integer h = #E(Fq)/n   ECPVer ::= INTEGER {ecpVer1(1)}Housley & Polk                                                  [Page 6]INTERNET DRAFT                                                April 2002   Curve  ::= SEQUENCE {      a     FieldElement,            -- Elliptic curve coefficient a      b     FieldElement,            -- Elliptic curve coefficient b      seed  BIT STRING  OPTIONAL }   id-publicKeyType OBJECT IDENTIFIER  ::= { ansi-X9-62 keyType(2) }   id-ecPublicKey OBJECT IDENTIFIER ::= { id-publicKeyType 1 }   -- Named Elliptic Curves in ANSI X9.62.   ellipticCurve OBJECT IDENTIFIER ::= { ansi-X9-62 curves(3) }   c-TwoCurve OBJECT IDENTIFIER ::= {        ellipticCurve characteristicTwo(0) }   c2pnb163v1  OBJECT IDENTIFIER  ::=  { c-TwoCurve  1 }   c2pnb163v2  OBJECT IDENTIFIER  ::=  { c-TwoCurve  2 }   c2pnb163v3  OBJECT IDENTIFIER  ::=  { c-TwoCurve  3 }   c2pnb176w1  OBJECT IDENTIFIER  ::=  { c-TwoCurve  4 }   c2tnb191v1  OBJECT IDENTIFIER  ::=  { c-TwoCurve  5 }   c2tnb191v2  OBJECT IDENTIFIER  ::=  { c-TwoCurve  6 }   c2tnb191v3  OBJECT IDENTIFIER  ::=  { c-TwoCurve  7 }   c2onb191v4  OBJECT IDENTIFIER  ::=  { c-TwoCurve  8 }   c2onb191v5  OBJECT IDENTIFIER  ::=  { c-TwoCurve  9 }   c2pnb208w1  OBJECT IDENTIFIER  ::=  { c-TwoCurve 10 }   c2tnb239v1  OBJECT IDENTIFIER  ::=  { c-TwoCurve 11 }   c2tnb239v2  OBJECT IDENTIFIER  ::=  { c-TwoCurve 12 }   c2tnb239v3  OBJECT IDENTIFIER  ::=  { c-TwoCurve 13 }   c2onb239v4  OBJECT IDENTIFIER  ::=  { c-TwoCurve 14 }   c2onb239v5  OBJECT IDENTIFIER  ::=  { c-TwoCurve 15 }   c2pnb272w1  OBJECT IDENTIFIER  ::=  { c-TwoCurve 16 }   c2pnb304w1  OBJECT IDENTIFIER  ::=  { c-TwoCurve 17 }   c2tnb359v1  OBJECT IDENTIFIER  ::=  { c-TwoCurve 18 }   c2pnb368w1  OBJECT IDENTIFIER  ::=  { c-TwoCurve 19 }   c2tnb431r1  OBJECT IDENTIFIER  ::=  { c-TwoCurve 20 }   primeCurve OBJECT IDENTIFIER ::= { ellipticCurve prime(1) }   prime192v1  OBJECT IDENTIFIER  ::=  { primeCurve  1 }   prime192v2  OBJECT IDENTIFIER  ::=  { primeCurve  2 }   prime192v3  OBJECT IDENTIFIER  ::=  { primeCurve  3 }   prime239v1  OBJECT IDENTIFIER  ::=  { primeCurve  4 }   prime239v2  OBJECT IDENTIFIER  ::=  { primeCurve  5 }   prime239v3  OBJECT IDENTIFIER  ::=  { primeCurve  6 }   prime256v1  OBJECT IDENTIFIER  ::=  { primeCurve  7 }   ENDHousley & Polk                                                  [Page 7]INTERNET DRAFT                                                April 2002   Author Addresses:   Russell Housley   RSA Laboratories   918 Spring Knoll Drive   Herndon, VA 20170   USA   rhousley@rsasecurity.com   Tim Polk   NIST   Building 820, Room 426   Gaithersburg, MD 20899   USA   wpolk@nist.govFull Copyright Statement   Copyright (C) The Internet Society (2002). All Rights Reserved.   This document and translations of it may be copied and furnished to   others, and derivative works that comment on or otherwise explain it   or assist in its implementation may be prepared, copied, published   and distributed, in whole or in part, without restriction of any   kind, provided that the above copyright notice and this paragraph are   included on all such copies and derivative works.  In addition, the   ASN.1 modules presented in Appendix A may be used in whole or in part   without inclusion of the copyright notice.  However, this document   itself may not be modified in any way, such as by removing the   copyright notice or references to the Internet Society or other   Internet organizations, except as needed for the purpose of   developing Internet standards in which case the procedures for   copyrights defined in the Internet Standards process shall be   followed, or as required to translate it into languages other than   English.   The limited permissions granted above are perpetual and will not be   revoked by the Internet Society or its successors or assigns. This   document and the information contained herein is provided on an "AS   IS" basis and THE INTERNET SOCIETY AND THE INTERNET ENGINEERING TASK   FORCE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT   LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN WILL   NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY   OR FITNESS FOR A PARTICULAR PURPOSE.Housley & Polk                                                  [Page 8]