25 citations found. Retrieving documents...
American National Standards Institute (ANSI) X9.F1 subcommittee. ANSI X9.63 Public key cryptography for the Financial Services Industry: Elliptic curve key agreement and key transport schemes, July 5 1998. Working draft version 2.0.

 Home/Search   Document Not in Database   Summary   Related Articles   Check  

This paper is cited in the following contexts:
Algorithms for Multi-Exponentiation - Möller (2001)   (Correct)

.... thousand bits long) We require that the e i be non negative (otherwise, invert g i ) Example groups include (Z nZ) # for some integer n (e.g. for verification of ElGamal [9] or DSA [15] signatures) groups of rational points on elliptic curves over finite fields (e.g. for verification of ECDSA [1] signatures) or class groups of imaginary quadratic orders (e.g. for verification of RDSA [2] 6] signatures) We have k = 2 for DSA and ECDSA verification and k = 3 for ElGamal and RDSA verification. Larger values of k appear in protocols of Brands [4] In the present paper, we allow k = 1 as ....

American National Standards Institute (ANSI). Public key cryptography for the financial services industry: The elliptic curve digital signature algorithm (ECDSA). ANSI X9.62, 1998.


Flaws in Applying Proof Methodologies to Signature.. - Stern, Pointcheval.. (2002)   (15 citations)  (Correct)

....proof does not provide security against existential forgeries under adaptive chosen message attacks. It only applies to a more restricted class, which may be termed single occurrence chosen message attacks. The two other examples are related to the elliptic curve digital signature algorithm ECDSA [1]. In [7] Brown uses the so called generic group model to prove the security of the generic DSA, a natural analog of DSA and ECDSA in this setting. This result is viewed as supporting the security of the actual ECDSA: in the generic model, ECDSA prevents existential forgeries under adaptive ....

....provided a zero knowledge identi cation scheme [26] together with the corresponding signature scheme. In 1994, a digital signature standard DSA [20] was proposed, whose avor was a mixture of ElGamal and Schnorr. The standard was later adapted to the elliptic curve setting under the name ECDSA [1, 20]. Following [6, 7] we propose the description of a generic DSA (see Figure 1) which operates in any cyclic group G of prime order q, thanks to a reduction function. This reduction function f applies to any element of the group G, into Z q . In the DSA, f takes as input an integer modulo p and ....

[Article contains additional citation context not shown here]

American National Standards Institute. Public Key Cryptography for the Financial Services Industry: The Elliptic Curve Digital Signature Algorithm. ANSI X9.621998, January 1999.


A Session-Based Architecture for Internet Mobility - Snoeren (2003)   (8 citations)  (Correct)

....at any other time or in conjunction with any other flags. 90 6.1 Defined Curve Name values and their corresponding mechanisms. The table shows the corresponding elliptic curve parameters from the ANSI X9.62 standard [3]. This list may grow to reflect further published elliptic curves with key lengths less than 200 bits. 107 7.1 The changes required to add session continuations to two popular Internet server applications. The ....

....bits 0x0a ECDH Annex J.5.1, example 1 192 bits 0x0b ECDH Annex J.5.1, example 2 192 bits 0x0c ECDH Annex J.5.1, example 3 192 bits Table 6.1: Defined Curve Name values and their corresponding mechanisms. The table shows the corresponding elliptic curve parameters from the ANSI X9.62 standard [3]. This list may grow to reflect further published elliptic curves with key lengths less than 200 bits. the curve, underlying finite field F and its representation, the generating point P and its order n) as specified in [3] Table 6.1 shows the list of currently defined method name values. Use ....

[Article contains additional citation context not shown here]

American National Standards Institute. Public key cryptography for the financial service industry: The elliptic curve digital signature algorithm. ANSI X9.62 - 1998, January 1999.


Authenticated Three Party Key Agreement Protocols from Pairings - Al-Riyami, Paterson (2002)   (3 citations)  (Correct)

....TAK 3 or TAK 4 because of the way in which the long term components are combined with short term key components in KABC . One way to defeat key compromise attacks on MTI like protocols in general is for each entity to use his long term secret key as an ECDSA signature key to sign short term keys [1]. These signatures should be broadcast in the protocol along with the short term keys and certi cates. This prevents an attacker from cutting and pasting certi cates onto values P for identities other than the one whose long term key has been compromised. However, this clearly increases the ....

American National Standards Institute | ANSI X9.62. Public Key Cryptography for the Financial Services Industry: the Elliptic Curve Digital Signature Algorithm (ECDSA), 1999.


Active Certificates: A Framework for Delegation - Borisov, Brewer (2002)   (1 citation)  (Correct)

....system not only duplicates many of the features of conventional PKIs, it also has interesting new properties, such as ease of interoperation, extensibility, and the potential for a more secure TCB. Interoperation is an important requirement of PKIs: companies frequently use cross certification [2] to connect their corporate infrastructures. However, both systems must be able to understand each other s certificate format, namespaces, etc. The use of active certificates provides an easier way to connect two hierarchies; all that is necessary is an active certificate chaining trust from a ....

American National Standards Institute. Public key cryptography for the financial service industry: Certificate management. ANSI X9.57-


Freenet: A Distributed Anonymous Information Storage.. - Clarke, Sandberg.. (2000)   (396 citations)  (Correct)

....the network is simply a matter of rst discovering the address of one or more existing nodes through out of band means, then starting to send messages. 3.1 Keys and searching Files in Freenet are identied by binary le keys obtained by applying a hash function. Currently we use the 160 bit SHA 1[4] function as our hash. Three dioeerent types of le keys are used, which vary in purpose and in the specics of how they are constructed. The simplest type of le key is the keyword signed key (KSK) which is derived from a short descriptive text string chosen by the user when storing a le in the ....

American National Standards Institute, American National Standard X9.30.21997: Public Key Cryptography for the Financial Services Industry - Part 2: The Secure Hash Algorithm (SHA-1) (1997).


Lessons learned on implementing ECDSA on a Java smart card - Elo (2000)   (Correct)

....signature algorithm would have an important architectural benefit. Namely, in the elliptic curve based public key algorithms the creation of the key is cheap compared to, for example, RSA based cryptosystems. The creation of the key takes roughly the same time as one encryption operation [12] [13]. In SPKI based certification systems, the ability to locally create keys on the fly is very appealing as spare keys can be used to achieve anonymity. By creating and holding several temporary private keys, users identities can be protected while still maintaining the ability to give credentials ....

American National Standards Institute (X9 Committee), American Bankers Association, Working Draft, AMERICAN NATIONAL STANDARD X9.62.1998, Public Key Cryptography For The Financial Services Industry: The Elliptic Curve Digital Signature Algorithm (ECDSA), September 20, 1998.


Decentralized Authorization With ECDSA On A Java Smart Card - Elo, Nikander (2000)   (1 citation)  (Correct)

....to find empirically validated comparisons between these architectures, we have been unable to find any published work of such nature. It would be important to empirically compare these two quite different implementation options, as they are both equally included in at least two EC standards [13] [14]. 18 Appendix: ECDSA algorithms ECDSA is the EC analogue of the more widely used DSA [12] 13] Key generation Signing a message 1 Select an elliptic curve E(F p ) so that the number of points in it is divisible by a large prime n. 2 Select a point P 2 E(F p ) of order n. 3 Select a ....

American National Standards Institute (X9 Committee), American Bankers Association, Working Draft, AMERICAN NATIONAL STANDARD X9.62.1998 Public Key Cryptography for The Financial Services Industry: The Elliptic Curve Digital Signature Algorithm (ECDSA). September 20, 1998.


Test Suite Development Using a Structured Framework - Hastings (1999)   (Correct)

....(SHA 1) is the one way hash function required by all MISPC components. The details of SHA 1 can be found in [28] The three public key cryptographic algorithms specified in the MISPC are RSA [34] Digital Signature Standard (DSS) 29] and (3) Elliptic Curve Digital Signature Algorithm (ECDSA) [2]. For interoperability 3 and verification purposes, one or more of 3 MISPC components that use the same cryptographic algorithm(s) should be able to interact with each other in a 24 the three public key cryptographic algorithms must be implemented by MISPC components to generate the required ....

.... SEQUENCE version [0] VersionDEFAULT v1, serialNumber CertificateSerialNumber, signature AlgorithmIdentifier issuer Name, validity Validity, subject Name, subjectPublicKeyInfo SubjectPublicKeyInfo, issuerUniqueIdentifier [1] IMPLICIT UniqueIdentifier OPTIONAL, subjectUniqueIdentifier [2] IMPLICIT UniqueIdentifier OPTIONAL, extensions [3] Extensions Optional Figure 2.3 ASN.1 Specification of an MISPC Certificate. MISPC Data Structures: Certificates, Certificate Revocation List, And PKI Messages The certificates, CRLs, and PKI messages will be reviewed to complete this ....

[Article contains additional citation context not shown here]

American National Standard X9.62-199x. Public Key Cryptography for the Financial Services Industry: The Elliptic Curve Digital Signature Algorithm, June 1996. Working Draft.


DHAES: An Encryption Scheme Based on the Diffie-Hellman.. - Abdalla, Bellare, Rogaway (1998)   (7 citations)  (Correct)

....are given in doing asymptotic analyses of reductions. 2. 6 Related Work The current work has grown out of interest from within the IEEE P1363 committee, which has been drafting a bit level standard to cover a variety of cryptographic aims [23] A version of DHAES is suggested in the draft standard [1]. The scheme described here was rst proposed in an earlier version of this work [6] The current document provides the technical support for the DHAES proposal. We view DHAES as the natural adaptation of the ElGamal scheme to withstand active attacks and apply to arbitrary length messages. The ....

American National Standards Institute (ANSI) X9.F1 subcommittee, ANSI X9.63 Public key cryptography for the Financial Services Industry: Elliptic curve key agreement and key transport schemes, Working draft version 2.0, July 5, 1998.


Earlier versions of of this work appear in [9] and [1].. - Dhies An Encryption   (Correct)

No context found.

American National Standards Institute (ANSI) X9.F1 subcommittee. ANSI X9.63 Public key cryptography for the Financial Services Industry: Elliptic curve key agreement and key transport schemes, July 5 1998. Working draft version 2.0.


A Subject-Delegated Decryption Scheme with - Tightly Limited Authority (2006)   (Correct)

No context found.

American National Standards Institute (ANSI) X9.F1 sub-committee. ANSI X9.63 Public Key Cryptography for the Financial Services Industry: Elliptic Curve Key Agreement and Transport Schemes, working draft version 2.0. 1998.


Design and Analysis of Secure Encryption Schemes - Abdalla (2001)   (Correct)

No context found.

American National Standards Institute (ANSI) X9.F1 subcommittee. ANSI X9.63 Public key cryptography for the Financial Services Industry: Elliptic curve key agreement and key transport schemes, July 5, 1998. Working draft version 2.0.


DHAES: An Encryption Scheme Based on the Diffie-Hellman.. - Abdalla, Bellare, Rogaway (1999)   (7 citations)  (Correct)

No context found.

American National Standards Institute (ANSI) X9.F1 subcommittee, ANSI X9.63 Public key cryptography for the Financial Services Industry: Elliptic curve key agreement and key transport schemes, Working draft version 2.0, July 5, 1998.


Improved Techniques for Fast Exponentiation - Möller (2002)   (Correct)

No context found.

American National Standards Institute (ANSI). Public key cryptography for the financial services industry: The elliptic curve digital signature algorithm (ECDSA). ANSI X9.62, 1998.


Algorithms for Multi-Exponentiation - Möller (2001)   (Correct)

No context found.

American National Standards Institute (ANSI). Public key cryptography for the financial services industry: The elliptic curve digital signature algorithm (ECDSA). ANSI X9.62, 1998.


Active Certificates: A Framework for Delegation - Borisov (2002)   (1 citation)  (Correct)

No context found.

American National Standards Institute. Public key cryptography for the financial service industry: Certificate management. ANSI X9.57-1997, 1997.


Tripartite Authenticated Key Agreement Protocols from Pairings - Al-Riyami, Paterson   (Correct)

No context found.

American National Standards Institute -- ANSI X9.63. Public key cryptography for the financial services industry: Key agreement and key transport using elliptic curve cryptography, 2001.


Freenet: A Distributed Anonymous Information Storage.. - Clarke, Sandberg.. (2000)   (396 citations)  (Correct)

No context found.

American National Standards Institute, American National Standard X9.30.21997: Public Key Cryptography for the Financial Services Industry - Part 2: The Secure Hash Algorithm (SHA-1) (1997).


Security Requirements For Cryptographic Modules - Category Computer Security   (Correct)

No context found.

American Bankers Association, Public Key Cryptography for the Financial Services Industry: The Elliptic Curve Digital Signature Algorithm, American National Standard X9.62-1998, Washington, D.C., 1998.


Security Requirements For Cryptographic Modules - Daley, Shavers, Kammer (1999)   (Correct)

No context found.

American Bankers Association, Public Key Cryptography for the Financial Services Industry: Elliptic Curve Key Agreement and Transport Protocols, Working Draft American National Standard X9.63, October 5, 1997.


Security Requirements For Cryptographic Modules - Daley, Shavers, Kammer (1999)   (Correct)

No context found.

American Bankers Association, Public Key Cryptography for the Financial Services Industry: The Elliptic Curve Digital Signature Algorithm, American National Standard X9.62-1998, Washington, D.C., 1998.


Security Requirements For Cryptographic Modules - Daley, Shavers, Kammer (1999)   (Correct)

No context found.

American Bankers Association, Public Key Cryptography for the Financial Services Industry: Agreement of Symmetric Keys Using Diffie-Hellman and MQV Algorithms, Working Draft American National Standard X9.42-1998, May 21, 1998.


MISPC Minimum Interoperability Specification for PKI.. - Burr, Dodson, Nazario, .. (1997)   (1 citation)  (Correct)

No context found.

Draft American National Standard X9.55-1995, Public Key Cryptography for the Financial Services Industry: Extensions to Public Key Certificates and Certificate Revocation Lists, Nov. 11, 1995

Online articles have much greater impact   More about CiteSeer.IST   Add search form to your site   Submit documents   Feedback  

CiteSeer.IST - Copyright Penn State and NEC