RSA Laboratories PKCS Series a Tutorial

1
RSA Laboratories PKCS Series - a Tutorial

• PKCS 10
• Magnus Nyström,
• October, 1999

2
Certification Request Syntax Standard

• Specifies a syntax for certification requests
  (I.e. requests for digital certificates)
• Widely used in public-key infrastructure (PKI)
  products, e.g. from VeriSign.

3
The CertificationRequestInfo type

• Attributes may for example be requests for
  certain certificate extensions
• subjectPublicKeyInfo is defined in X.509.

4
The CertificationRequest type
certificatationRequestInfo
signatureAlgorithm
signature

• The signature is made with the corresponding
  private key (if it can be used for signatures)

5
Wither PKCS 10?

• Version 1.0 released in 1993, still the current
  version!
• Has proved flexible enough to accommodate changes
  in X.509 certificates
• IETF has defined another structure in RFC 2511
  (CRMF) - the universe is now split
• RSA Laboratories has no plans on new versions of
  PKCS 10
• Current version at
• http//www.rsasecurity.com/rsalabs/pkcs