Overview of CRYPTREC
Activities
January 28, 2002
Hideki Imai, Professor, University of Tokyo,
CRYPTREC Advisory Committee Chair,
CRYPTREC Evaluation Committee Chair

1Summary of CRYPTREC Activities• Activities intended to establish a cryptographictechnique evaluation system in Japan• Evaluation of cryptographic techniquesin terms of their applicability to e-government• Support of standardization activities
Fairness and transparency of activities(Descriptions of evaluation activities are madepublic on the Internet.)
2

Cryptographic techniques applicable toe-government
Application period of cryptographic techniques usage policy:
Approximately 10 years
Types of e-government systems
Systems relating to government services involving the private
sectorRegional public organizations are also considered.
International standards
Cooperation with ISO/IEC, NESSIE, AES, etc.
Interoperability and security
Cipher application categories and number of recommended
ciphers
Other issues to consider
Guidebook for system procurement, etc.
3Cryptographic techniques to beevaluated• Cryptographic techniques submitted in response
to FY2000 call
• Cryptographic techniques submitted in response
to FY2001 call
• Cryptographic techniques considered necessaryfor evaluation by Advisory Committee andEvaluation Committee

4Categories of ciphers to be evaluatedAsymmetric-key ciphers(combinations of cryptographic schemes andcryptographic primitives)
Confidentiality, authentication, signature,
key agreement
Symmetric-key ciphers
Stream ciphers64-bit block ciphers, 128-bit block ciphers
Hash functions
Pseudo-random number generators
5

Steps in evaluating cryptographictechniques
Screening evaluation
Evaluation to screen for full evaluation– First evaluation to determine whether there are trivial security
problems– First evaluation to determine whether it can be implemented
by a third-party

Full evaluation
Evaluation to determine usability for e-government– Consolidated evaluation using known attack methods– Strength evaluation of individual candidate ciphers (Attack)– Evaluation to determine whether there are problems related toparameter/key setting criteria– Software implementation evaluation
6

CRYPTREC System
CRYPTREC
Advisory Committee

CRYPTREC Evaluation
Committee(Ministry of Public
Management, Home Affairs,
Posts and Telecommunications
and Ministry of Economy,
Trade, and Industry )(Information-technology Promotion Agency,Japan (IPA), and Telecommunications
Advancement Organization of Japan (TAO))CRYPTREC
Requirements
Investigation WG

Symmetric-Key Cryptography
Subcommittee
Public-Key Cryptography
Subcommittee

7

CRYPTREC Advisory Committee(focused on examination of political issues)Committee Chair Hideki ImaiCRYPTREC Requirements Investigation WG Chair:
Ryoichi Sasaki– Preparation of usage policy draft for e-government recommended ciphers– Arrangement of cryptographic technique requirements– Study of how cipher evaluations should be in the future

Administrative offices:
Ministry of Public Management, Home Affairs, Posts andTelecommunications, and Ministry of Economy, Trade,and Industry

8CRYPTREC Advisory CommitteeMembersCommittee Chair: Hideki Imai
University of Tokyo
Adviser: Shigeo Tsujii
Chuo University
Jun Ikimune
Japan Information Technology Service Industry Association
Naoyuki Iwashita
Institute for Monetary and Economic Studies, Bank of Japan
Hiroshi Okazaki
Communications Industry Association of Japan
Eiji Okamoto
Toho University
Tatsuaki Okamoto
Nippon Telegraph and Telephone Corporation
Yoshifumi Kato
Telecom Services AssociationToshinobu Kaneko
Science University of Tokyo
Akio Kokubu
New Media Development AssociationKoichi Sakurai
Kyushu UniversityRyoichi Sasaki
Tokyo Denki University
Kazuo Takaragi
Japan Electronics and Information Technology Industries AssociationKenji Naemura
Keio University
Mitsuru Matsui
Mitsubishi Electric Corporation
Tsutomu Matsumoto Yokohama National University, Graduate School9CRYPTREC Evaluation Committee(focus on technology evaluations)
Hideki Imai, CRYPTREC Evaluation Committee Chair
Tsutomu Matsumoto, Public-Key Cryptography Subcommittee Chair
Toshinobu Kaneko, Symmetric-Key Cryptography Subcommittee Chair– Study of evaluation methods for individual cryptographic technique
categories– Evaluation of cryptographic techniques submitted in response to callAdministrative offices:

Information-technology Promotion Agency, Japan,and Telecommunications Advancement
Organization of Japan
10

CRYPTREC Evaluation CommitteeMembersCommittee Chair Hideki Imai
Adviser
Shigeo Tsujii
Member Eiji Okamoto
Member Tatsuaki Okamoto
MemberMemberMemberUniversity of Tokyo
Chuo University
Toho University
Nippon Telegraph and Telephone
Corporation
Toshinobu Kaneko
Science University of Tokyo
Mitsuru Matsui
Mitsubishi Electric Corporation
Tsutomu Matsumoto Yokohama National University,
Graduate School11E-government recommended ciphers

Ciphers targeted for evaluation(submitted ciphers and other ciphers requiring evaluation)E-government
cipher candidates
E-government
recommendedciphers
Ciphers used basedon Electronic
Signature Law

Results at end ofcurrent FY

Create list during
next FY

12

Schedule for studying e-government recommended ciphers
FY01 results

Study of cipher
requirements forthe e-government(categories)
Cryptographicevaluations（egovernmentcipher candidates)
Evaluation ofcurrently used
ciphers

October 2002

Creation of list
with matches
between egovernment cipher
requirements and egovernment cipher
candidates(categories:
electronic signature,sending, storing,etc.)

March 2003

Presentation of list ofe-government
recommended ciphers,
application toprocurement,
agreement among
ministries andagencies

Agreement on usage policy
Adjustment ofrelationships

13

Toward e-government in 2003
FY2000Establishment of CRYPTREC Evaluation Committee
Call for e-government cryptographic techniques
Evaluation of e-government cryptographic techniques (screeningevaluation and full evaluation)

FY2001
Establishment of CRYPTREC Advisory Committee
Study on what cipher evaluations should be
Arrangement of cryptographic technique requirements for egovernment

CRYPTREC Evaluation CommitteeSecond call for e-government cryptographic techniques
Evaluation of e-government cryptographic techniques (screeningevaluation and follow-up evaluation)
14

Toward e-government in 2003 (cont’d)
Activity plans for FY2002
Selection of e-government recommended ciphers
Arrangement of requirement study categories andcryptographic technique evaluation categories

Guidebook for e-government system procurement
CRYPTREC Advisory Committee
Finalization of cryptographic technique requirements

CRYPTREC Evaluation Committee
Evaluation of e-government cryptographic techniques(full evaluation and follow-up evaluation)
No plans for a new call for candidates in FY2002
15

Publication schedule of this fiscal
year’s reports
April 16, 2002 CRYPTREC 2001-2001
CRYPTREC Advisory Committee Report
CRYPTREC Evaluation Committee Report
CRYPTREC Report 2001
(FY2001 evaluation reportand cryptographic techniques specifications)
Cryptographic techniques application
guidelines
16

Future challenges
Information required for e-government systemprocurement
Publish as JIS-TR
Guidebook for cryptographic techniques procurement
Cipher implementation protocols and module evaluations
Permanent evaluations by neutral, public institution
International collaboration
Cooperation with AES, ISO/IEC, NESSIE, etc.

17Comments Welcome
We welcome your comments on the cryptographic
techniques being evaluated.
Email address
cryptrec-comment@ipa.go.jp
For further information, visit the CRYPTREC
homepage:
IPA :http://www.ipa.go.jp/security/enc/CRYPTREC/index-e.html
TAO :http://www.shiba.tao.go.jp/kenkyu/CRYPTREC/index-e.html
18