Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

建议添加id-sm2PublicKey的oid #682

Closed
GoldSaintEagle opened this issue Jan 17, 2019 · 3 comments
Closed

建议添加id-sm2PublicKey的oid #682

GoldSaintEagle opened this issue Jan 17, 2019 · 3 comments

Comments

@GoldSaintEagle
Copy link

GoldSaintEagle commented Jan 17, 2019

Is your feature request related to a problem? Please describe.
国密算法是为了替代美国的EC系列算法。因此,我认为SM系列是与美国的EC算法家族并列关系。在SM2的证书中,采用了1.2.840.10045.2.1标识该证书是SM2系列的公钥(与ECDSA证书的该域相同)。当然,可以通过Curve OID来进一步区分是SM2 PubKey还是EC PubKey。但是我认为需要申请id-sm2PublicKey(如1.2.156.10197.2.1)来表示该域,因为“1.2.156”是ISO-CN(中国标准)的算法OID;而“1.2.840”是ISO-US(美国标准)算法的OID。

严格地讲,尽管美国标准定义的id-ecPublicKey表示“椭圆曲线上某点作为公钥”,我们也不能使用该OID,因为该OID的前缀是美国标准。

Describe the solution you'd like
添加id-sm2PublicKey的oid为1.2.156.10197.2.1,该OID表示“椭圆曲线上某点作为公钥”(中国标准)

Describe alternatives you've considered
因为我只关注了SM2的证书,不知道id-sm9PublicKey是否也表示“椭圆曲线上某点作为公钥”。是否可以与id-sm9PublicKey的OID通用可以进一步讨论。

Additional context
是否需要同时申请1.2.156.10197.1.1表示“素域”?(替代1.2.840.10045.1.1 prime-field,为了扩展性)

@github-actions
Copy link

Marked as stale issue. Will be closed later if no activity for a while.

@emmansun
Copy link

@andylee521
Copy link

最主要的问题是,市场上大量应用了使用EC OID的证书,导致修正的成本太高,而最终导致糊里糊涂的无法更正为正确的OID。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants