Overview
ISO/IEC 14888-3:2018 - "IT Security techniques - Digital signatures with appendix - Part 3: Discrete logarithm based mechanisms" specifies digital-signature-with-appendix mechanisms whose security relies on the discrete logarithm problem. The standard defines a general model for these mechanisms and gives concrete algorithm specifications. For each mechanism it details key generation, signature production, and signature verification processes. The document also includes annexes that assign object identifiers (OIDs), define conversion functions, and explain DSA domain parameter generation.
Key Topics and Technical Requirements
- General model and processes
- Parameter generation (certificate-based and identity-based approaches)
- Signature process: randomizer, pre-signature, witness/assignment, appendix construction
- Verification process: recomputing pre-signature and witness, witness verification
- Discrete-logarithm-based mechanisms specified
- Classic and elliptic-curve varieties including DSA, KCDSA, SDSA, Pointcheval/Vaudenay, EC-DSA (ECDSA), EC-KCDSA, EC-GDSA, EC-RDSA, EC-SDSA, EC-FSDSA, and SM2
- Identity-based mechanisms (e.g., IBS-1 and related constructions)
- Algorithmic artifacts and structures
- Object identifiers and algorithm parameter structures (Annex A)
- Conversion functions (Annex B) such as FE2I, I2FE, FE2BS, BS2I and OS2I
- Guidance on generating DSA domain parameters (Annex D)
- Security assumptions
- Reliance on hardness of the discrete logarithm problem in appropriate groups (multiplicative groups or elliptic curves)
- Interoperability and conformance
- Clear specification of data formats for keys, signatures and appendices to ensure implementer interoperability
Practical Applications
ISO/IEC 14888-3 is used where digital signatures based on discrete logarithm problems are required:
- Secure email and document signing
- TLS / SSL authentication and certificate issuance (ECDSA/DSA use cases)
- Code signing, firmware updates, and software distribution
- Identity-based security systems and smartcards
- IoT devices and constrained environments using elliptic-curve signatures
- Any application requiring standardized, interoperable digital-signature algorithms and verifiable signature formats
Who should use this standard
- Cryptographers, security architects and protocol designers
- Software engineers implementing signature libraries (DSA, ECDSA, SM2)
- Standards and compliance teams validating conformity and interoperability
- PKI operators and implementers of identity-based signature systems
Related standards
- ISO/IEC 14888-1 (general framework for digital signatures with appendix)
- Standards for hash functions and key management (referenced normative documents within ISO/IEC 14888-3)
- Algorithm-specific national or regional standards (e.g., SM2 technical specs)
Keywords: ISO/IEC 14888-3, digital signatures, discrete logarithm, DSA, ECDSA, SM2, signature verification, key generation, IT security standard.