标准摘要
[中文适用范围]: 本部分ISO/IEC 9798规定了使用零知识技术的实体认证机制: - 基于身份并提供单向认证的机制; - 基于整数分解并提供单向认证的机制; - 基于相对于素数或合数的离散对数并提供单向认证的机制; - 基于非对称加密系统并提供单向认证或双向认证的机制; - 基于椭圆曲线离散对数并提供单向认证的机制。 这些机制是使用零知识技术的原理构建的,但对于某些参数选择,它们不一定严格符合零知识的定义。 [外文原描述]: ISO/IEC 9798-5:2009 specifies entity authentication mechanisms using zero-knowledge techniques: mechanisms based on identities and providing unilateral authentication; mechanisms based on integer factorization and providing unilateral authentication; mechanisms based on discrete logarithms with respect to numbers that are either prime or composite, and providing unilateral authentication; mechanisms based on asymmetric encryption systems and providing either unilateral authentication, or mutual authentication; mechanisms based on discrete logarithms on elliptic curves and providing unilateral authentication. These mechanisms are constructed using the principles of zero-knowledge techniques, but they are not necessarily zero-knowledge according to the strict definition for every choice of parameters.
英文名称Information technology - Security techniques - Entity authentication - Part 5: Mechanisms using zero-knowledge techniques