Dec 5-6, 2005 ITL-1-200X Security 

Secu

Reco

Kevin Wilson BSIGreg Cannon CroJeff Stapleton InnoAnne Wang CogMike McCabe NIS
Dec 5-6, 2005 ITL-1-200X Security 

Why Secu

 Protect Documen Connect Persona

Biometric Data

 Security at the Do

Level

 Personal Respon
Dec 5-6, 2005 ITL-1-200X Security 

Word

 Hash or Digest Digital Signature

 Public/Private Key 

 Certificates Certificate Author Time Stamp Auth
Dec 5-6, 2005 ITL-1-200X Security 

What is a H

Digest

 Digested data

 Small but reprodu Fixed size for a g

 Small changes in 

large changes in o

 Hard to make the 

from different data

 One way
Public/Priva

Cryptogra

Private Key
Digital Sig

Private Key

HASH
Digital Sig

Publi

HASH
Dec 5-6, 2005 ITL-1-200X Security 

Digital Sign

 Confidence that th

data has not chan

 Non-repudiation
Public/Priva

Cryptogra

Private Key

?

?
Certificate

Authority

Ce

Identity
Time Stamp A

HASH H
Dec 5-6, 2005 ITL-1-200X Security 

The Security 

 New Record

 Compatibility with 

versions

 Optional

 At the Document 

 Zero to Many

 As document trav
Dec 5-6, 2005 ITL-1-200X Security 

Security R

 Set of Hashes

 Linked to record b

Type

 Signature over the 

Hashes

 Algorithms as per 

 NIST SP 800-57 NIST SP 800-73
Dec 5-6, 2005 ITL-1-200X Security 

The Security 

 Uses Cryptograph

Syntax (CMS)

 Also used in

 Secure email (S SSL/TLS (https: PIV Card

 PKCS#7 since 19 ASN.1 BER enco
Hash of Each 

#######################################################

Signature
Dec 5-6, 2005 ITL-1-200X Security 

Using Sec

with P

 Booking/Enrollme

 State or Local or  Upstream confide

 Upstream Agents

 Downstream conf
Dec 5-6, 2005 ITL-1-200X Security 

Using Sec

without 

 Booking Officer

 Self-Signed certif

 Password or oth

protected

 Upstream Agents

 Self-signed certifi

received/sent
Dec 5-6, 2005 ITL-1-200X Security 

Implemen

 CMS Signature 

 Microsoft CryptoApi OpenSSL Java RSA, Certicom PIV Card

 Certificate Authority

 Microsoft Server CA OpenSSL CA
Dec 5-6, 2005 ITL-1-200X Security 

PIV Enrollment and 

Infrastructure

Identity
Dec 5-6, 2005 ITL-1-200X Security 

Summa

 Strengthen Secur

Embedding SecuDocument

 Straight forward to 
Dec 5-6, 2005 ITL-1-200X Security 

Security Com

 Greg Cannon 

 Crossmatch Techno

 Michael McCabe

 NIST

 Jeff Stapleton

 Innove

 Anne Wang

 Cogent Systems

 Kevin Wilson

 BSI2000
Dec 5-6, 2005 ITL-1-200X Security 

Questio

&

Discuss
Dec 5-6, 2005 ITL-1-200X Security 

New Rec

 17.001:4 character length<g 17.002:IDC character<gs> Optional unsigned attributes 17.050:Signing OID<gs> 17.051:Signature or Timesta 17.052:Digest OID<gs> Optional signed attributes 17.096:size of 17.050 throug 17.097:character count of ID 17.098:IDC<us>hash<rs>ID

s>

 17.099:CMS<gs>

Summary of Table

and 3 From SP 800

Cryptographic

Strength

Symmetric

Algorithm

Hash

Algorithm

ECC

Algorith

56-bits DES - - 80-bits 3DES-2K SHA-1 (160) 160-b

112-bits 3DES-3K SHA-2 (224) 224-b128-bits AES-128 SHA-2 (256) 256-b192-bits AES-192 SHA-2 (384) 384-b256-bits AES-256 SHA-2 (512) 512-b
ECC SignedData Example

Field Value 

OID1 OID cms-ct-signed-data { 1 . 2 . 840 . 113549 . 1 

} 

Version

2 Version number (1) 

OID3 OID fips-sha1 { 1 . 3 . 14 . 3 . 2 . 26 } OID

4 OID cms-ct-data { 1 . 2 . 840 . 113549 . 1 . 7 . 1} 

Detached Data5 File content is not encapsulated in the SignedD

object

Version

6 Version number (1) 

OID

7 OID pkix-at-common-name { 2 . 5 . 4 . 3 } 

Subject Name8 Issuer common name “Subject” Serial Number

9 Serial number hex “78 8C 29 19 99 25 FA 0B” 

OID10 OID fips-sha1 { 1 . 2 . 14 . 3 . 2 . 26 } OID11 OID ecdsa-with-sha1 { 1 . 2 . 840 . 10045 . 4 . 1 } Signature12 ECDSA 328-bit digital signature from 163-bit EC

public key 
References

 RFC3852 Cryptographic Message Syntax 

supersedes RFC3369, RFC2630, PKCS#

 NIST SP 800-57 Recommendation for Ke Management (8/2005) ISO/IEC 8824:2001 (All parts) | ITU-T Rec

X.680-series (2000), Information TechnoloSyntax Notation One (ASN.1)

 [8825] ISO/IEC 8825-1:2001 | ITU-T 

Recommendation X.690 (2000), Informati- ASN.1 Encoding Rules: Specification of Rules (BER), Canonical Encoding Rules (Distinguished Encoding Rules (DER)
References

continued

 ANSI X9.95-2005 Trusted Time 

Management and Security
CMS Structure