Additional Cryptographic Profiles with SHA-2

1
Additional Cryptographic Profiles with SHA-2

• Tim Polk

2
Background

• Conservative projections suggested signatures
  generated using SHA-1 could be trusted on
  cryptographic strength through 2010
• Current PKIX documents support signatures
  generated using SHA-2 family with RSA (RFC 4055),
  but not ECDSA or DSA
• The Wang attacks have imbued a new sense of
  urgency
• SHA-1 may not be quite as strong as believed
• Results of NIST Hash Workshop indicate SHA-2
  family (SHA-256/SHA-512) is the best available
  solution

3
New document(s) requested

• RFC 4055 provides standard profile for RSA and
  SHA-2 algorithms
• Parallel drafts for ECDSA and DSA have been
  requested

4
Proposed Way Forward

• Develop two drafts since ECDSA is stable, DSA is
  waiting for a reference specification from NIST
• NIST has volunteered an editor for both drafts
• Quynh Dang qdang_at_nist.gov
• Additional co-editors welcomed