Internet Engineering Task Force (IETF)                         S. Turner
Request for Comments: 6161                                          IECA
Updates: 6033                                                 April 2011
Category: Standards Track
ISSN: 2070-1721
        
Internet Engineering Task Force (IETF)                         S. Turner
Request for Comments: 6161                                          IECA
Updates: 6033                                                 April 2011
Category: Standards Track
ISSN: 2070-1721

Elliptic Curve Algorithms for Cryptographic Message Syntax (CMS) Encrypted Key Package Content Type

加密消息语法（CMS）加密密钥包内容类型的椭圆曲线算法

Abstract

摘要

This document describes the conventions for using several Elliptic Curve cryptographic algorithms with the Cryptographic Message Syntax (CMS) encrypted key package content type. Specifically, it includes conventions necessary to implement Elliptic Curve Diffie-Hellman (ECDH) with EnvelopedData and Elliptic Curve Digital Signature Algorithm (ECDSA) with SignedData. This document extends RFC 6033.

本文档描述了使用加密消息语法（CMS）加密密钥包内容类型的几种椭圆曲线加密算法的约定。具体地说，它包括使用EnvelopedData实现椭圆曲线Diffie-Hellman（ECDH）和使用SignedData实现椭圆曲线数字签名算法（ECDSA）所需的约定。本文档扩展了RFC6033。

Status of This Memo

关于下段备忘

This is an Internet Standards Track document.

这是一份互联网标准跟踪文件。

This document is a product of the Internet Engineering Task Force (IETF). It represents the consensus of the IETF community. It has received public review and has been approved for publication by the Internet Engineering Steering Group (IESG). Further information on Internet Standards is available in Section 2 of RFC 5741.

本文件是互联网工程任务组（IETF）的产品。它代表了IETF社区的共识。它已经接受了公众审查，并已被互联网工程指导小组（IESG）批准出版。有关互联网标准的更多信息，请参见RFC 5741第2节。

Information about the current status of this document, any errata, and how to provide feedback on it may be obtained at http://www.rfc-editor.org/info/rfc6161.

有关本文件当前状态、任何勘误表以及如何提供反馈的信息，请访问http://www.rfc-editor.org/info/rfc6161.

Copyright Notice

版权公告

Copyright (c) 2011 IETF Trust and the persons identified as the document authors. All rights reserved.

版权所有（c）2011 IETF信托基金和确定为文件作者的人员。版权所有。

This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License.

本文件受BCP 78和IETF信托有关IETF文件的法律规定的约束(http://trustee.ietf.org/license-info)自本文件出版之日起生效。请仔细阅读这些文件，因为它们描述了您对本文件的权利和限制。从本文件中提取的代码组件必须包括信托法律条款第4.e节中所述的简化BSD许可证文本，并提供简化BSD许可证中所述的无担保。

1. Introduction
1. 介绍

This document describes the conventions for using Elliptic Curve cryptographic algorithms with the Cryptographic Message Syntax (CMS) encrypted key package content type [RFC6032]. Specifically, it includes conventions necessary to implement the following CMS content types: EnvelopedData [RFC5652] and SignedData [RFC5652]. This document amends [RFC6033]. Familiarity with [RFC6033] and [RFC5753] is assumed.

本文档描述了使用加密消息语法（CMS）加密密钥包内容类型[RFC6032]的椭圆曲线加密算法的约定。具体而言，它包括实现以下CMS内容类型所需的约定：EnvelopedData[RFC5652]和SignedData[RFC5652]。本文件修订了[RFC6033]。假设熟悉[RFC6033]和[RFC5753]。

This document does not define any new algorithms; instead, it refers to previously defined algorithms.

本文件未定义任何新算法；相反，它指的是以前定义的算法。

1.1 Terminology
1.1 术语

The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "NOT RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in [RFC2119].

本文件中的关键词“必须”、“不得”、“必需”、“应”、“不应”、“建议”、“不建议”、“可”和“可选”应按照[RFC2119]中的说明进行解释。

2. EnvelopedData
2. 包络数据

When key agreement is used, standard (as opposed to cofactor) ECDH [RFC6090][RFC5753] MAY be supported.

使用密钥协议时，可能支持标准（与辅因子相反）ECDH[RFC6090][RFC5753]。

3. SignedData
3. 签名数据

If an implementation encapsulates EncryptedKeyPackage with SignedData [RFC5652], then it MAY support the signature scheme ECDSA [RFC6090][RFC5753].

如果实现使用SignedData[RFC5652]封装EncryptedKeyPackage，那么它可能支持签名方案ECDSA[RFC6090][RFC5753]。

4. Public Key Sizes
4. 公钥大小

The easiest way to implement SignedData and EnvelopedData is with public key certificates [RFC5280][RFC5480]. If an implementation supports ECDSA or ECDH, then it MUST support keys on the P-256 curve.

实现SignedData和EnvelopedData的最简单方法是使用公钥证书[RFC5280][RFC5480]。如果实现支持ECDSA或ECDH，则它必须支持P-256曲线上的键。

5. Security Considerations
5. 安全考虑

The security considerations from [RFC5280], [RFC5480], [RFC5652], [RFC5753], [RFC6033], and [RFC6090] apply.

[RFC5280]、[RFC5480]、[RFC5652]、[RFC5753]、[RFC6033]和[RFC6090]中的安全注意事项适用。

6. Normative References
6. 规范性引用文件

[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997.

[RFC2119]Bradner，S.，“RFC中用于表示需求水平的关键词”，BCP 14，RFC 2119，1997年3月。

[RFC5280] Cooper, D., Santesson, S., Farrell, S., Boeyen, S., Housley, R., and W. Polk, "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", RFC 5280, May 2008.

[RFC5280]Cooper，D.，Santesson，S.，Farrell，S.，Boeyen，S.，Housley，R.，和W.Polk，“Internet X.509公钥基础设施证书和证书撤销列表（CRL）配置文件”，RFC 52802008年5月。

[RFC5480] Turner, S., Brown, D., Yiu, K., Housley, R., and T. Polk, "Elliptic Curve Cryptography Subject Public Key Information", RFC 5480, March 2009.

[RFC5480]Turner，S.，Brown，D.，Yiu，K.，Housley，R.，和T.Polk，“椭圆曲线加密主题公钥信息”，RFC 54802009年3月。

[RFC5652] Housley, R., "Cryptographic Message Syntax (CMS)", STD 70, RFC 5652, September 2009.

[RFC5652]Housley，R.，“加密消息语法（CMS）”，STD 70，RFC 56522009年9月。

[RFC5753] Turner, S. and D. Brown, "Use of Elliptic Curve Cryptography (ECC) Algorithms in Cryptographic Message Syntax (CMS)", RFC 5753, January 2010.

[RFC5753]Turner，S.和D.Brown，“加密消息语法（CMS）中椭圆曲线加密（ECC）算法的使用”，RFC 5753，2010年1月。

[RFC6032] Turner, S. and R. Housley, "Cryptographic Message Syntax (CMS) Encrypted Key Package Content Type", RFC 6032, December 2010.

[RFC6032]Turner，S.和R.Housley，“加密消息语法（CMS）加密密钥包内容类型”，RFC 60322010年12月。

[RFC6033] Turner, S., "Algorithms for Cryptographic Message Syntax (CMS) Encrypted Key Package Content Type", RFC 6033, December 2010.

[RFC6033]Turner，S.，“加密消息语法（CMS）加密密钥包内容类型的算法”，RFC 6033，2010年12月。

[RFC6090] McGrew, D., Igoe, K., and M. Salter, "Fundamental Elliptic Curve Cryptography Algorithms", RFC 6090, February 2011.

[RFC6090]McGrew，D.，Igoe，K.，和M.Salter，“基本椭圆曲线密码算法”，RFC 60902011年2月。

Author's Address

作者地址

Sean Turner IECA, Inc. 3057 Nutley Street, Suite 106 Fairfax, VA 22031 USA

Sean Turner IECA，Inc.美国弗吉尼亚州费尔法克斯市努特利街3057号106室，邮编22031 

   EMail: turners@ieca.com
        
   EMail: turners@ieca.com