ietf-openpgp
[Top] [All Lists]

RE: Adding GOST as a cipher?

2005-01-24 04:10:42

From: Ian G

Vlad "SATtva" Miller wrote:

This won't help much unless you also consider specifying GOST R 34.11-94
(based on GOST 28147-89 block cipher) for hash function and GOST R
34.19-2001
(based on elliptic curves) for digital signature. These are the
only permitted
algorithms for banking/government use in Russia.


Do they specify a public key encryption
algorithm?

Ok, here are results of my research on that matter. There in no
government-proposed public key encryption in Russia as there was no sex in the
USSR. :) For symmetric encryption and MACs GOSTs 28147-89 and R 34.11-94 are
being used, but as to the session key generation from public key certificates
(probably in DH key exchange), there is no such unclassified common specs, and
it's supposed that each implementation needs to be scrutinized in the
certification body (FSB currently, Russian Federal Security Service) on the
individual basis to be approved.





<Prev in Thread] Current Thread [Next in Thread>