GOST R 34 10-2012 Information technology Cryptographic data security Signature and verification processes of [electronic] digital signature《信息技术 密码数据安全 (电子)数字签名的签名和验证过程》.pdf

1、 34.102012 27 2002 . 184- , 1.02004 . 1 ( )2 26 -3 - 7 2012 . 215-4 34.102001 - , - . () . - , , 2013 , - - II 34.1020121 12 13 , 13.1 .13.2 34 .35 .45.1 45.2 55.3 .66 66.1 76.2 .9 () .11.1 1 .11.1.1 .11.1.2 ( I) .12.1.3 ( II) 12.2 2 .13.2.1 .13.2.2 ( I) .14.2.3 ( II) 15 16 34.102012III - (), , . -

2、- . , - 34.112012. 2382-2 1, / 9796 23, / 14888 47 / 10118 811.IV 34.102012 Information technology. Cryptographic data security.Generation and verification processes of electronic digital signature 201301011 () ( - ), (-), . - . , - .2 : 34.112012 . . - - , 1 , , . (), - () . , , - , , .3 , 3.1 :3.1

3、.13.1.21 34.102012 (appendix): , - ./ 14888-1:2008, 4 (signature key): , - ./ 14888-1:2008, 43.1.33.1.43.1.53.1.63.1.73.1.83.1.93.1.10 (witness): , - () .3.1.113.1.123.1.132 34.102012 (verification key): , ./ 14888-1:2008, 4 (domain parameter): , - , ./ 14888-1:2008, 4 (verification process): , , ,

4、./ 14888-1:2008, 4 (signature process): , - , , ./ 14888-1:2008, 4 (message): ./ 14888-1:2008, 4- (hash-code): , -./ 14888-1:2008, 4 (signed message): , , ./ 14888-1:2008, 4 (pseudo-random number sequence): - , (), . 2382-2:1976, 1 (random number sequence): , () . 2382-2:1976, 1 (random number): , -

5、, . 2382-2:1976, 13.1.141 1) , ; - 2) , (-) , ; 3), - , .2 - - , - -, -, .3.1.151 , , , - .2 - - , - , .3.2 :Vl l ;V* ;Z ;p ,p3;Fp , p 0, 1, , p 1;b(mod p) , b p;M , Mc206V*;(hh12| ) () ;a, b ;m ;q ;O ;P q;d ;Q ;c122 .4 () (. / 14888-1 4) - :- ( );3 34.102012 (signature); : , - ./ 14888-1:2008, 4- (

6、collision-resistant hash-function): , :1) , ;2) , ;3) - , ./ 14888-1:2008, 4- ;- . ( ) . -, . (. 6):- (. 6.1);- (. 6.2). , -. , :- ;- , ;- . 1. , , , , , / . - , -, -. - , - -. - 34.112012. , , - 5.2. - . . () - - , . , 512 1024 , , 6.1. , -, 6.2.5 , . , - .5.1 , Fp( p 3 -), (x, y), x, yc206Fp, y2c1

7、86 x3+ ax + b (mod p), (1) a, bc206Fp4a3+27b2 p.4 34.102012 1 J(), J() c186 17284427332aabc43(mod p).(2) (x, y), x, y Fp, (1), E; x - . Q(x, y) Q. , -. , - +. Q1(x1,y1)Q2(x2,y2) E - . Q1 Q2, x1c185 x2, - Q3(x3,y3), xxxpyxxy p32123131c186c45c45c186c45c45c236c237c238c108c108(mod ),( ) (mod ),(3) c108c186c45c45yyxx2121(mod p)