CRYPTREC2001
Report on Present State of
Asymmetric-Key Cryptographic
Technique Evaluations
January 28, 2002
Tsutomu Matsumoto,
Yokohama National University, Graduate School
Chairman, Public-Key Cryptography
Subcommittee
1

Tasks• Specific evaluation– Signature algorithms for Electronic Signature Law– SSL ((1) RSA-related matters, (2) Protocol)• General evaluation --- for e-government use– Follow-up OR deep evaluation– Newly submitted systems– FY 2001 screening– FY 2002 deep evaluation
2

Targets of specific evaluation (Electronic Signature Law)
Security basis
Function

Integerfactoring(Elliptic curve)
Discrete logarithm

Signature

ESIGN
RSA
RSA-PSSDSAECDSAECDSA in SEC1
OK-ECDSA

Confidentiality

EPOC-2
HIME(R)
RSA-OAEPECIES in SEC1

Key agreement

MiscellaneousDH
ECDH in SEC1
OK-ECDH
PSEC-KEM

Lattice

OthersNTRU

COCK
System

CVCRT
MKS
3

Newly submitted targets
Security basis
Function

Integerfactoring(Elliptic curve)
Discrete logarithm

Signature

ESIGN
RSA
RSA-PSSDSAECDSAECDSA in SEC1
OK-ECDSA

Confidentiality

EPOC-2
HIME(R)
RSA-OAEPECIES in SEC1

Key agreement

Miscellaneous

DHECDH in SEC1
OK-ECDH
PSEC-KEM

LatticeOthers

NTRU

COCKSystem

CVCRTMKS
4Targets of follow-up OR deep evaluation
Security basis
Function

Integerfactoring(Elliptic curve)
Discrete logarithm

Signature

ESIGN
RSA
RSA-PSSDSAECDSAECDSA in SEC1
OK-ECDSA

Confidentiality

EPOC-2
HIME(R)
RSA-OAEPECIES in SEC1

Key agreement

MiscellaneousDH
ECDH in SEC1
OK-ECDH
PSEC-KEM

Lattice Others

NTRU

COCK
SystemCVCRTMKS
5

Method and points• Screening– Based on the submitted documents• Submission completeness examination• Implementability by third parties• Security or Performance ≥ FY2000• Specific OR deep OR follow-up evaluation– Whole– Special• Decompose the targets into several sub-targets• Synthesize the evaluation results for the sub-targets• Security basis: factoring, discrete log, …
6

Human resources• CRYPTREC Evaluation Committee–Public-Key Cryptography
Subcommittee• Members• A Number ofanonymous external experts(world class cryptographers)
7

Public-Key Cryptography Subcommittee
Seigo Arita (NEC Corporation)
Jun Kogure (Fujitsu Laboratories Ltd.)
Tsutomu Matsumoto (Yokohama National University)Natsume Matsuzaki (Matsushita Electric Industrial Co.,Ltd.)
Kazuo Ohta (The University of Electro-Communications)
Yasuyuki Sakai (Mitsubishi Electric Corporation)
Atsushi Shimbo (Toshiba Corporation)
Hiroki Shizuya (Tohoku University)
Seiichi Susaki (Hitachi, Ltd.)
Hajime Watanabe (National Institute of Advanced
Industrial Science and Technology)
8Number of external reviewers
for screening evaluation
TargetHIME ( R )NTRU
OK-ECDH
OK-ECDSAPSEC-KEM

Overseas

Domestic

1Total33332333339Number of external reviewers
for deep evaluation of primitives
TargetInteger factoring(Experimental)
IF survey
Special IFDLP
ECDLPOverseas Domestic

322Total
11111143210

Number of external reviewers
for deep evaluation of schemes
Target
EPOC-2(conversion)
EPOC-2 (new)RSA-OAEP,
RSA-PSS, etc
ESIGN
DSA
ECDSA

Overseas DomesticTotal
1122123433312145411

Number of external reviewers
for SSL evaluation
TargetOverseas Domestic Total
How RSA is used
1Protocol
21212

Things to do••••••

Examine the gathered knowledge
Synthesize the evaluation results for the subtargets
Settle ECIES issues
Summarize the evaluation for CRYPTRECREPORT 2001
Complete remaining evaluation
Establish the list of recommended schemes
13