CRYPTREC2001
公開鍵暗号技術評価現状報告

2002年1月28日
公開鍵暗号評価小委員会委員長
横浜国立大学大学院教授 松本勉
1Tasks• Specific Evaluation– Signature Algorithms for Electronic Signature Law– SSL ((1) RSA-related matters, (2) Protocol)• General Evaluation --- For e-Government use– Follow-up OR Deep Evaluation– Newly Submitted Systems– FY 2001 Screening– FY 2002 Deep Evaluation
2

Targets of Specific Evaluation (Electronic Signature Law)
Security Basis Integer
Factoring
Function(Elliptic Curve)
Lattice
Discrete Logarithm

SignatureESIGN
RSA
RSA-PSSDSAECDSAECDSA in SEC1OK-ECDSA

Confidentiality

EPOC-2
HIME(R)
RSA-OAEPECIES in SEC1

Key Agreement

MiscellaneousDH
ECDH in SEC1
OK-ECDH
PSEC-KEM

OthersNTRU

COCK
SystemCVCRTMKS
3Newly Submitted Targets
Security Basis Integer
Factoring
Function(Elliptic Curve)
Lattice
Discrete Logarithm

Signature

ESIGN
RSA
RSA-PSSDSAECDSAECDSA in SEC1
OK-ECDSA

Confidentiality

EPOC-2
HIME(R)
RSA-OAEPECIES in SEC1

Key Agreement

MiscellaneousDH
ECDH in SEC1
OK-ECDH
PSEC-KEM

OthersNTRU

COCKSystem

CVCRTMKS
4Targets of Follow-up OR Deep EvaluationSecurity Basis Integer
Factoring
Function(Elliptic Curve)
Discrete Logarithm

Signature

ESIGN
RSA
RSA-PSSDSAECDSAECDSA in SEC1
OK-ECDSA

Confidentiality

EPOC-2
HIME(R)
RSA-OAEPECIES in SEC1

Key Agreement

MiscellaneousDH
ECDH in SEC1
OK-ECDH
PSEC-KEM

Lattice Others

NTRU

COCK
SystemCVCRTMKS
5

Method and Points• Screening– Based on the submitted documents• Submission completeness examination• Implementability by third parties• Security or Performance≧FY2000• Specific OR Deep OR Follow-up Evaluation– Whole– Special• Decompose the targets into several sub-targets• Synthesize the evaluation results for the sub-targets• Security Basis: Factoring, Discrete Log, …
6

Human Resources• CRYPTREC Evaluation Committee–Public-Key Cryptography
Sub-Committee• Members• A Number ofAnonymous External Experts(World Class Cryptographers)
7

Public-Key Cryptography Sub-Committee
Seigo ARITA (NEC Corporation)
Jun KOGURE (Fujitsu Laboratories Ltd.)
Tsutomu MATSUMOTO (Yokohama National University)
Natsume MATSUZAKI (Matsushita Electric Industrial Co.,Ltd.)
Kazuo OHTA (The University of Electro-Communications)
Yasuyuki SAKAI (Mitsubishi Electric Corporation)
Atsushi SHIMBO (Toshiba Corporation)
Hiroki SHIZUYA (Tohoku University)
Seiichi SUSAKI (Hitachi, Ltd.)
Hajime WATANABE (National Institute of Advanced
Industrial Science and Technology)
8Number of External Reviewers
for Screening Evaluation
TargetHIME ( R )NTRU
OK-ECDH
OK-ECDSAPSEC-KEM

Overseas

Domestic

1Total33332333339

Number of External Reviewers
for Deep Evaluation of Primitives
TargetOverseas Domestic Total
Integer Factoring
1(Experimental)
IF Survey
1Special IF
31DLP
21
ECDLP
21143210

Number of External Reviewers
for Deep Evaluation of SchemesTarget
EPOC-2(conversion)
EPOC-2 (new)RSA-OAEP,
RSA-PSS, etc
ESIGN
DSA
ECDSA

Overseas DomesticTotal
1122123433312145411

Number of External Reviewers
for SSL Evaluation
TargetOverseas Domestic Total
How RSA is used
1Protocol
21212

Things to Do
•••
•
••

Examine the gathered knowledge
Synthesize the evaluation results for the subtargets
Settle ECIES issues
Summarize the evaluation for CRYPTRECREPORT 2001
Complete remaining evaluation
Establish the list of recommended schemes
13