CNSA
Commercial National Security Algorithm (CNSA) Suite
NIST SP 800-59
RFC 8603 Commercial National Security Algorithm (CNSA) Suite Certificate and Certificate Revocation List (CRL) Profile
商用国家安全保障アルゴリズム (CNSA) スイート証明書および証明書失効リスト (CRL) プロファイル
https://tex2e.github.io/rfc-translater/html/rfc8603.html
合衆国国家安全保障局(United States National Security Agency)の商用国家安全保障アルゴリズム(CNSA)一式
NSA Suite Bの後継らしい
ECDSA 楕円曲線は P-384 限定
RSA は 3072 または 4096 bit 限定 eは 2^16 < e < 2^256 を満たす奇数
SHA-384 を使用
RSASSA-PSS は rsaEncryption を指定した証明書で利用する?、MGF1 を使用すること salt 48オクテット
RFC 5280準拠
関連
RFC 5480 Elliptic Curve Cryptography Subject Public Key Information
RFC 5758 ECDSA
RFC 3279 Algorithms and Identifiers for the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
RFC 4055 Additional Algorithms and Identifiers for RSA Cryptography for use in the Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
CMC
RFC 5272
RFC 9212 Commercial National Security Algorithm (CNSA) Suite Cryptography for Secure Shell (SSH)
RFC 9206 Commercial National Security Algorithm (CNSA) Suite Cryptography for Internet Protocol Security (IPsec)
RFC 9151 Commercial National Security Algorithm (CNSA) Suite Profile for TLS and DTLS 1.2 and 1.3
RFC 8756 Commercial National Security Algorithm (CNSA) Suite Profile of Certificate Management over CMS (CMC)
RFC 8755 Using Commercial National Security Algorithm Suite Algorithms in Secure/Multipurpose Internet Mail Extensions (S/MIME)