[Cites 0, Cited by 0]
[Entire Act]
Union of India - Section
Section 6 in The Information Technology (Certifying Authorities) Rules, 2000
6. Standards.
- The Information Technology (IT) architecture for Certifying Authorities may support open standards and accepted de facto standards; the most important standards that may be considered for different activities associated with the Certifying Authority's functions are as under:-| THE PRODUCT | The Standard |
| Public Key infrastructure | PKIX |
| Digital Signature Certificates and Digital Signature revocation list | S.509,Version 3 certificates as specified in ITU RFC 1422. |
| Directory (DAP and LDAP) | X.500 for publication of certificates and Certification Revovation Lists (CRLs). |
| Database Management Operations | Use of generic SQL. |
| Public Key algorithm | [DSA, RSA and Curves NIST P-256, P-384, or P-521] [Substituted by Notification No. G.S.R. 662(E), dated 25.8.2015 (w.e.f. 17.10.2000).] |
| Digital Hash Function | [SHA-2] [Substituted for the words "SHA-l and SHA-2" by Notification No. G.S.R. 783 (E) dated 25.10.2011 (w.e.f. 17.10.2000)] |
| RSA Public Key Technology | PKCS # 1 RSA Encryption Standard[2048, 4096 bit] [Substituted for the words "512, 1024, 2048 bit" by Notification No. G.S.R. 783 (E) dated 25.10.2011 (w.e.f. 17.10.2000)] |
| PKCS # 5 Password Based Encryption Standard | |
| PKCS #7 Cryptographic Message Syntax Standard. | |
| PKCS#8 Private Key Information Syntax Standard | |
| PKCS# 9 Selected Attribute Types | |
| PKCS# 10 RSA Certification Request | |
| PKCS# 12 Portable Format for storing/transporting a user's private keys and certificates. | |
| Distinguished name | X.520. |
| Digital Encryption and Digital Signature | PKCS# 7. |
| [Explanation. [Substituted by Notification No. G.S.R. 783 (E) dated 25.10.2011 (w.e.f. 17.10.2000)] | The Digital signature certificate granted before the commencement of the Information Technology (Certifying Authorities Amendment) Rules, 2011 using SHA-1, digital hash function standard shall continue to be valid till the date of expiry of such certificate.] |