Skip to main content

Appendix C. ASN.1 Module (ASN.1模块)

本附录包含本文档的完整ASN.1模块. 该模块使用了1988年和1993年ASN.1语法的组合,包括1993年附加中引入的信息对象类特性.

PKCS-1 {
    iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-1(1)
    modules(0) pkcs-1(1)
}

DEFINITIONS EXPLICIT TAGS ::= BEGIN

-- 导出所有符号
EXPORTS ALL;

-- 导入
IMPORTS

    AlgorithmIdentifier, ALGORITHM-IDENTIFIER
        FROM AlgorithmInformation
        { joint-iso-itu-t(2) etsi(0) specification(0) mhss(1)
          pkcs(7) revision(0) module(7) id-mod-algorithmInformation(0) } ;

-- 基本对象标识符
pkcs-1  OBJECT IDENTIFIER ::= {
    iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) 1
}

-- RSA密钥类型
rsaEncryption OBJECT IDENTIFIER ::= { pkcs-1 1 }

RSAPublicKey ::= SEQUENCE {
    modulus           INTEGER,  -- n
    publicExponent    INTEGER   -- e
}

RSAPrivateKey ::= SEQUENCE {
    version           Version,
    modulus           INTEGER,  -- n
    publicExponent    INTEGER,  -- e
    privateExponent   INTEGER,  -- d
    prime1            INTEGER,  -- p
    prime2            INTEGER,  -- q
    exponent1         INTEGER,  -- d mod (p-1)
    exponent2         INTEGER,  -- d mod (q-1)
    coefficient       INTEGER,  -- (inverse of q) mod p
    otherPrimeInfos   OtherPrimeInfos OPTIONAL
}

Version ::= INTEGER { two-prime(0), multi(1) }

OtherPrimeInfos ::= SEQUENCE SIZE(1..MAX) OF OtherPrimeInfo

OtherPrimeInfo ::= SEQUENCE {
    prime             INTEGER,  -- r_i
    exponent          INTEGER,  -- d_i
    coefficient       INTEGER   -- t_i
}

-- 加密方案对象标识符
id-RSAES-OAEP    OBJECT IDENTIFIER ::= { pkcs-1 7 }
id-RSAES-PKCS1-v1_5 OBJECT IDENTIFIER ::= { pkcs-1 1 }

-- 签名方案对象标识符
id-RSASSA-PSS    OBJECT IDENTIFIER ::= { pkcs-1 10 }

sha256WithRSAEncryption    OBJECT IDENTIFIER ::= { pkcs-1 11 }
sha384WithRSAEncryption    OBJECT IDENTIFIER ::= { pkcs-1 12 }
sha512WithRSAEncryption    OBJECT IDENTIFIER ::= { pkcs-1 13 }

-- RSAES-OAEP参数
RSAES-OAEP-params ::= SEQUENCE {
    hashFunc          [0] AlgorithmIdentifier DEFAULT sha1,
    maskGenFunc       [1] AlgorithmIdentifier DEFAULT mgf1SHA1,
    pSourceFunc       [2] AlgorithmIdentifier DEFAULT pSpecifiedEmpty
}

-- RSASSA-PSS参数
RSASSA-PSS-params ::= SEQUENCE {
    hashAlgorithm      [0] AlgorithmIdentifier DEFAULT sha1,
    maskGenAlgorithm   [1] AlgorithmIdentifier DEFAULT mgf1SHA1,
    saltLength         [2] INTEGER DEFAULT 20,
    trailerField       [3] INTEGER DEFAULT 1
}

-- 掩码生成函数
id-mgf1  OBJECT IDENTIFIER ::= { pkcs-1 8 }

-- 哈希函数对象标识符
id-sha256 OBJECT IDENTIFIER ::= {
    joint-iso-itu-t(2) country(16) us(840) organization(1)
    gov(101) csor(3) nistalgorithm(4) hashalgs(2) 1
}

id-sha384 OBJECT IDENTIFIER ::= {
    joint-iso-itu-t(2) country(16) us(840) organization(1)
    gov(101) csor(3) nistalgorithm(4) hashalgs(2) 2
}

id-sha512 OBJECT IDENTIFIER ::= {
    joint-iso-itu-t(2) country(16) us(840) organization(1)
    gov(101) csor(3) nistalgorithm(4) hashalgs(2) 3
}

-- DigestInfo用于RSASSA-PKCS1-v1_5
DigestInfo ::= SEQUENCE {
    digestAlgorithm  AlgorithmIdentifier,
    digest           OCTET STRING
}

END

该ASN.1模块定义了本文档中所有方案和密钥类型所需的数据类型和对象标识符.

Last updated on