跳到主要内容

附录 A. ASN.1 模块 (ASN.1 Module)

中文导读: 本节对应 RFC 9935 的 附录 A. ASN.1 模块 (ASN.1 Module) 部分, 对应文档标题为 RFC 9935 - Internet X.509 Public Key Infrastructure - Algorithm Identifiers for the Module-Lattice-Based Key-Encapsulation Mechanism (ML-KEM). 下方若包含英文 RFC 原文, 注册表名称, 字段名, 算法名, 对象标识符, 媒体类型, 邮箱地址, URL, 代码, ABNF, ASN.1, YANG, JSON, XML, 测试向量或参考文献条目, 均按规范原样保留, 因为这些内容需要与 RFC 文本, IANA 注册表, 实现代码或验证工具逐字一致. 中文段落用于说明本节的作用, 阅读重点和实现含义, 不改变任何协议语义或注册值.

本页包含机器可读或接近机器可读的规范材料. 对 ASN.1, YANG, JSON Schema, XML Schema, 伪代码, 注册模板, 常量表和算法标识符, 翻译时必须保留关键字, 类型名, OID, namespace, 枚举值, 字段名和语法结构. 实现者应把这些块视为生成代码, 配置模型, 验证输入或一致性测试的依据.

补充实现说明: 本页英文比例高, 是因为主要内容属于可复制的规范材料或实现材料. 在这类页面中, 语法关键字, 缩进, 字符串字面量, 枚举值, 路径, OID, namespace, JSON member, YANG leaf, ASN.1 type 和错误文本都可能被测试工具, 代码生成器或互操作实现直接消费. 因此, 译文只在代码块外说明结构和用途, 不在代码块内替换术语. 实现者应结合正文的语义说明检查默认值, 约束, 必选字段, 扩展点和安全影响, 并用原样保留的块进行验证.

本附录包含 ML-KEM 的 ASN.1 模块 [X680].请注意, 按照 [RFC5280], 证书使用可分辨编码规则 (Distinguished Encoding Rules); 参见 [X690].本模块从 [RFC5912] 和 [RFC9629] 导入对象.

<CODE BEGINS>
   X509-ML-KEM-2025
   { iso(1) identified-organization(3) dod(6)
     internet(1) security(5) mechanisms(5) pkix(7) id-mod(0)
     id-mod-x509-ml-kem-2025(121) }

   DEFINITIONS IMPLICIT TAGS ::= BEGIN

   EXPORTS ALL;

   IMPORTS

    PUBLIC-KEY
      FROM AlgorithmInformation-2009  -- [RFC 5912]
        { iso(1) identified-organization(3) dod(6) internet(1)
          security(5) mechanisms(5) pkix(7) id-mod(0)
          id-mod-algorithmInformation-02(58) }

    KEM-ALGORITHM
      FROM KEMAlgorithmInformation-2023  -- [RFC 9629]
        { iso(1) identified-organization(3) dod(6) internet(1)
          security(5) mechanisms(5) pkix(7) id-mod(0)
          id-mod-kemAlgorithmInformation-2023(109) };

   --
   -- ML-KEM Identifiers
   --

   nistAlgorithms OBJECT IDENTIFIER ::= { joint-iso-ccitt(2)
     country(16) us(840) organization(1) gov(101) csor(3)
     nistAlgorithm(4) }

   kems OBJECT IDENTIFIER ::= { nistAlgorithms 4 }

   id-alg-ml-kem-512 OBJECT IDENTIFIER ::= { kems 1 }

   id-alg-ml-kem-768 OBJECT IDENTIFIER ::= { kems 2 }

   id-alg-ml-kem-1024 OBJECT IDENTIFIER ::= { kems 3 }

   --
   -- Public Key Algorithms
   --

   PublicKeys PUBLIC-KEY ::= {
     -- This expands PublicKeys from [RFC 5912]
     pk-ml-kem-512 |
     pk-ml-kem-768 |
     pk-ml-kem-1024,
     ...
     }

   --
   -- ML-KEM Public Keys
   --

   pk-ml-kem-512 PUBLIC-KEY ::= {
     IDENTIFIER id-alg-ml-kem-512
     -- KEY no ASN.1 wrapping; 800 octets --
     PARAMS ARE absent
     CERT-KEY-USAGE { keyEncipherment }
     PRIVATE-KEY ML-KEM-512-PrivateKey
     }

   ML-KEM-512-PrivateKey ::= CHOICE {
     seed [0] OCTET STRING (SIZE (64)),
     expandedKey OCTET STRING (SIZE (1632)),
     both SEQUENCE {
         seed OCTET STRING (SIZE (64)),
         expandedKey OCTET STRING (SIZE (1632))
         }
     }

   pk-ml-kem-768 PUBLIC-KEY ::= {
     IDENTIFIER id-alg-ml-kem-768
     -- KEY no ASN.1 wrapping; 1184 octets --
     PARAMS ARE absent
     CERT-KEY-USAGE { keyEncipherment }
     PRIVATE-KEY ML-KEM-768-PrivateKey
     }

   ML-KEM-768-PrivateKey ::= CHOICE {
     seed [0] OCTET STRING (SIZE (64)),
     expandedKey OCTET STRING (SIZE (2400)),
     both SEQUENCE {
         seed OCTET STRING (SIZE (64)),
         expandedKey OCTET STRING (SIZE (2400))
         }
     }

   pk-ml-kem-1024 PUBLIC-KEY ::= {
     IDENTIFIER id-alg-ml-kem-1024
     -- KEY no ASN.1 wrapping; 1568 octets --
     PARAMS ARE absent
     CERT-KEY-USAGE { keyEncipherment }
     PRIVATE-KEY ML-KEM-1024-PrivateKey
     }

   ML-KEM-1024-PrivateKey ::= CHOICE {
     seed [0] OCTET STRING (SIZE (64)),
     expandedKey OCTET STRING (SIZE (3168)),
     both SEQUENCE {
         seed OCTET STRING (SIZE (64)),
         expandedKey OCTET STRING (SIZE (3168))
         }
     }

   ML-KEM-512-PublicKey ::= OCTET STRING (SIZE (800))

   ML-KEM-768-PublicKey ::= OCTET STRING (SIZE (1184))

   ML-KEM-1024-PublicKey ::= OCTET STRING (SIZE (1568))

   END
<CODE ENDS>
最后于 更新