Overview - ISO/IEC 29150:2011 (Signcryption)
ISO/IEC 29150:2011 is an international standard for signcryption - cryptographic methods that provide both confidentiality and unforgeability in a single public‑key operation. The standard specifies four signcryption mechanisms that require both sender and recipient to possess their own public/private key pairs. These mechanisms are designed for efficient processing, strong security guarantees, and include formal mathematical proofs of security. ISO/IEC 29150 focuses on algorithmic methods and is not a public‑key management (PKI) infrastructure standard.
Key topics and technical requirements
The standard covers both foundational and mechanism‑specific material, including:
- Security objectives: data confidentiality, data integrity, data origin authentication, and data unforgeability (stronger than integrity/authentication).
- Mathematical foundations: finite fields and elliptic curves, conversion functions for bits/integers/curve points.
- Cryptographic primitives: approved hash functions (including full‑domain hashes), key derivation functions (KDFs), and other transformations required by the mechanisms.
- General signcryption model: formal definitions of signcryption and unsigncryption operations, system parameters, and algorithmic interfaces.
- Four specified mechanisms:
- DLSC - discrete logarithm based signcryption (requires system‑wide parameters).
- ECDLSC - elliptic curve discrete logarithm based signcryption (requires system‑wide parameters).
- IFSC - integer factorization based signcryption (no system‑wide parameters required).
- EtS - encrypt‑then‑sign based mechanism (no system‑wide parameters required).
- Procedural elements: system‑wide parameter definitions, key generation algorithms, signcryption and unsigncryption algorithms, and error/validation checks.
- Supporting material: object identifiers (Annex A), security considerations (Annex B), guidance for use (Annex C), and examples (Annex D).
Practical applications and users
ISO/IEC 29150 is intended for implementers and architects who need compact, provably secure asymmetric solutions that simultaneously provide confidentiality and unforgeability. Typical users include:
- Cryptographic library developers and software vendors implementing secure messaging, email, or document protection.
- Security architects designing protocols that require both encryption and non‑repudiation.
- Standards bodies and evaluators assessing signcryption schemes.
- Researchers and cryptographers comparing discrete logarithm, elliptic curve, and integer‑factorization based approaches.
Use cases: secure email, confidential messaging, payment instructions, and any application where combining signing and encryption into a single, efficient operation is beneficial.
Related standards