ISO/IEC 9796-3:2006 情報技術—セキュリティ技術—メッセージ回復を提供するデジタル署名スキーム—パート3：離散対数ベースのメカニズム | ページ 6

3.1

data input

octet string which depends on the entire message or a portion of the message and which forms a part of the input to the signature generation process

3.2

domain parameter

data item which is common to and known by or accessible to all entities within the domain

[SOURCE:ISO/IEC 14888-1:1998]

Note 1 to entry: The set of domain parameters may contain data items such as hash-function identifier, length of the hash-token, maximum length of the recoverable part of the message, finite field parameters, elliptic curve parameters, or other parameters specifying the security policy in the domain.

3.3

elliptic curve

set of points P= (x,y) ここで, x and y are elements of an explicitly given finite field, that satisfy a cubic equation without any singular point, together with the “point at infinity” denoted by O

[SOURCE:ISO/IEC 15946-1:2002]

Note 1 to entry: For a mathematical definition of an elliptic curve over an explicitly given finite field, see Clause A.4.

3.4

explicitly given finite field

set of all e -tuples over [0,p- 1] ここで, p is prime and e≥ 1, along with a “multiplication table”

Note 1 to entry: For a mathematical definition of an explicitly given finite field, see Clause A.3.

Note 2 to entry: For more detailed information on finite fields, see ISO/IEC 15946-1:2002.

3.5

hash-code

string of octets which is the output of a hash-function

Note 1 to entry: Adapted from ISO/IEC 10118-1:2000.

3.6

hash-function

Note 1 to entry: Adapted from ISO/IEC 10118-1:2000.

Note 2 to entry: Computational feasibility depends on the specific security requirements and environment.

3.7

hash-token

concatenation of a hash-code and an optional control field which can be used to identify the hash-function and the padding method

[SOURCE:ISO/IEC 14888-1:1998]

Note 1 to entry: The control field with the hash-function identifier is mandatory unless the hash-function is uniquely determined by the signature mechanism or by the domain parameters.

3.8

message

string of octets of any length

3.9

parameter generation process

process which gives as its output domain parameter and user keys

3.10

pre-signature

octet string computed in the signature generation process which is a function of the randomizer but which is independent of the message

Note 1 to entry: Adapted from ISO/IEC 14888-1:1998.

3.11

private signature key

data item specific to an entity and usable only by this entity in the signature generation process

3.12

public verification key

data item which is mathematically related to a private signature key and is known by or accessible to all entities and which is used by the verifier in the signature verification process

3.13

randomized

dependent on a randomizer

[SOURCE:ISO/IEC 14888-1]

3.14

randomizer

secret integer produced by the signing entity in the pre-signature production process, and not predictable by other entities

Note 1 to entry: Adapted from ISO/IEC 14888-1:1998.

3.15

signature

pair of an octet string and an integer for providing authentication, generated in the signature generation process

Note 1 to entry: Adapted from ISO/IEC 14888-1:1998.

3.16

signature generation process

process which takes as inputs the message, the signature key and the domain parameters, and which gives as output the signature

Note 1 to entry: Adapted from the definition of signature process in ISO/IEC 14888-1:1998.

3.17

signature verification process

process, which takes as its input the signed message, the verification key and the domain parameters, and which gives as its output the recovered message if valid

Note 1 to entry: Adapted from the definition of verification process in ISO/IEC 14888-1:- ¹⁾ .

3.18

signed message

set of data items consisting of the signature, the part of the message which cannot be recovered from the signature, and an optional text field

[SOURCE:ISO/IEC 14888-1:1998]

3.19

user keys

data item of a set of private signature key and public verification key