60 likes | 216 Views
RSA Laboratories’ PKCS Series - a Tutorial. PKCS #10 Magnus Nyström, October, 1999. Certification Request Syntax Standard. Specifies a syntax for certification requests (I.e. requests for digital certificates) Widely used in public-key infrastructure (PKI) products, e.g. from VeriSign.
E N D
RSA Laboratories’ PKCS Series - a Tutorial PKCS #10 Magnus Nyström, October, 1999
Certification Request Syntax Standard • Specifies a syntax for certification requests (I.e. requests for digital certificates) • Widely used in public-key infrastructure (PKI) products, e.g. from VeriSign.
version subjectName subjectPublicKeyInfo attributes The CertificationRequestInfo type • Attributes may for example be requests for certain certificate extensions • subjectPublicKeyInfo is defined in X.509.
The CertificationRequest type • The signature is made with the corresponding private key (if it can be used for signatures) certificatationRequestInfo signatureAlgorithm signature
Wither PKCS #10? • Version 1.0 released in 1993, still the current version! • Has proved flexible enough to accommodate changes in X.509 certificates • IETF has defined another structure in RFC 2511 (CRMF) - the universe is now split • RSA Laboratories has no plans on new versions of PKCS #10 • Current version at • http://www.rsasecurity.com/rsalabs/pkcs