RFC 3447 (rfc3447) - Page 2 of 72

Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2

RFC 3447        PKCS #1: RSA Cryptography Specifications   February 2003


      9.1      EMSA-PSS...............................................36
      9.2      EMSA-PKCS1-v1_5........................................41
   Appendix A. ASN.1 syntax...........................................44
      A.1      RSA key representation.................................44
      A.2      Scheme identification..................................46
   Appendix B. Supporting techniques..................................52
      B.1      Hash functions.........................................52
      B.2      Mask generation functions..............................54
   Appendix C. ASN.1 module...........................................56
   Appendix D. Intellectual Property Considerations...................63
   Appendix E. Revision history.......................................64
   Appendix F. References.............................................65
   Appendix G. About PKCS.............................................70
   Appendix H. Corrections Made During RFC Publication Process........70
   Security Considerations............................................70
   Acknowledgements...................................................71
   Authors' Addresses.................................................71
   Full Copyright Statement...........................................72

1. Introduction

   This document provides recommendations for the implementation of
   public-key cryptography based on the RSA algorithm [42], covering the
   following aspects:

    * Cryptographic primitives

    * Encryption schemes

    * Signature schemes with appendix

    * ASN.1 syntax for representing keys and for identifying the schemes

   The recommendations are intended for general application within
   computer and communications systems, and as such include a fair
   amount of flexibility.  It is expected that application standards
   based on these specifications may include additional constraints.
   The recommendations are intended to be compatible with the standard
   IEEE-1363-2000 [26] and draft standards currently being developed by
   the ANSI X9F1 [1] and IEEE P1363 [27] working groups.

   This document supersedes PKCS #1 version 2.0 [35][44] but includes
   compatible techniques.








Jonsson & Kaliski            Informational