¹Hkkx IIµ[k.M 3(i)º Hkkjr dk jkti=k % vlk/kj.k 11 (X509 Subject Name) (X509 Certificate) (X509 CRL) (X509 Digest) </x509 Data>) </Keyinfo>) (<Object I

Size: px

Start display at page:

Download "¹Hkkx IIµ[k.M 3(i)º Hkkjr dk jkti=k % vlk/kj.k 11 (X509 Subject Name) (X509 Certificate) (X509 CRL) (X509 Digest) </x509 Data>) </Keyinfo>) (<Object I"

Phillip Shepherd
5 years ago
Views:

1 ¹Hkkx IIµ[k.M 3(i)º Hkkjr dk jkti=k % vlk/kj.k 11 (X509 Subject Name) (X509 Certificate) (X509 CRL) (X509 Digest) </x509 Data>) </Keyinf>) (<Object ID?>)* </Signature> जह "?" श य य एक ब र उपद शत ह न क दश त ह ; "+" एक य अ धक ब र उपद शत ह न क दश त ह ; और "*" श य य अ धक ब र उपद शत ह न क दश त ह 13. अ क य ह त र क य म नक. ह त र फ इल और ह त र प क ब बत अ क य ह त र स जन और स य पन क र त नय क र ज र न न ल खत म ग दश क स त क भ अन प ह ग, अथ त :- (i) अ क य ह त र म णप क लए स चन गक अ ध नयम क अध न ज र अ त क य क र म ग दश क स त ; (ii) भ रत प क आई क लए ए स.509 म णप न त ; (iii) ह त र फ इल ; (iv) म ण करण धक रय (स ए) क लए ऑनल इन म णप थ त ट क ल (ओस एसप ) स व म ग दश क स त ; (v) म णप धक रय (स ए) क लए समय ट प स व म ग दश क स त [फ. स. 19/26/2015-स स ए] तपन र य, अपर स चव MINISTRY OF COMMUNICATIONS AND INFORMATION TECHNOLOGY (Department f Electrnics and Infrmatin Technlgy) NOTIFICATION New Delhi, the 25th August, 2015 G.S.R. 660(E). In exercise f the pwers cnferred by sectin 87 f the Infrmatin Technlgy Act, 2000 (21 f 2000), the Central Gvernment hereby makes the fllwing rules, namely: 1. Shrt title and cmmencement. (1) These rules may be called the Digital Signature (End entity) Rules, (2) They shall cme int frce n the date f their publicatin in the Official Gazette. Definitins- (1)In these rules, unless the cntext therwise requires, (a) "Act" means the Infrmatin Technlgy Act, 2000(21 f 2000); (b) cannicalisatin, in relatin t a xml digital signature, means the prcess f cnverting electrnic recrd that has mre than ne pssible representatin int a standard, nrmal, r cannical frm in which the variatins

2 12 THE GAZETTE OF INDIA : EXTRAORDINARY [PART II SEC. 3(i)] in representatin f electrnic recrd shall be standardised by applying cnsistent rules, primarily as part f the xml digital signature creatin and verificatin prcesses; (c) (d) (e) (f) (g) (h) cunter signature means a signature n a previus signature in a series f signatures, affixed after the verificatin the signature n electrnic recrd and subsequent signatures n previus signatures serially; detached signature means the signature that is stred independent f electrnic recrd being signed; digestmethd element, in relatin t a xml digital signature, means the digest algrithm t be used fr the riginal data bject r transfrmed, if any xml transfrms exists; digestvalue element means the value f the digest; "end entity means the subscriber r system n behalf f the subscriber in whse name the Electrnic Signature Certificate is issued; "end entity signature" means authenticatin f any electrnic recrd by an end entity by means f a digital signature, electrnic methd r prcedure in accrdance with the prvisins f sectins 3 r 3A f the Act; (i) envelped signature means envelping f the signature and the initial electrnic recrd int anther electrnic recrd; (j) (k) (l) (m) (n) () (p) (q) (r) (s) envelping signature means a signature ver a electrnic recrd that is referenced and cntained within the signature element; initial electrnic recrd, in the cntext f xml digital signature prcess, means cannicalised and transfrmed frm f signedinf; keyinf element means an element that enables key infrmatin t be packaged alng with the signature element; "lng term signature" means a signature element that is made verifiable fr a lng term by implementing measures t enable the detectin f unauthrised alteratins f signature; manifest element, in relatin t a xml digital signature, means a structure t carry a list f reference elements prcessing mdel defined by the applicatin; bject element means an ptinal element f xml digital signature, which is used fr envelping signature where the data bject being signed is included in the xml; "csp respnder" means an nline service that prvides revcatin status f a digital signature certificate; "nline certificate status prtcl" means an nline certificate-revcatin checking prtcl that enables relyingparties t determine the revcatin status f an identified digital signature certificate; parallel signatures means ne r mre independent signature ver the same electrnic recrd in which the rdering f the signatures is nt imprtant; reference element, in relatin t a xml digital signature, means an element that carries a references t data bjects, an ptinal list f transfrms t be applied prir t digest (xml transfrms), digestmethd and digestvalue value f referenced data bjects; (t) signedinf, in relatin t a xml digital signature, means an element that cntains a set f infrmatin t be signed fr creating an xml signature, where it shall cntains references t the data bject that includes the cannicalisatin and signature algrithms; (u) (v) signature means digital signature r xml digital signature; signaturevalue means an element that the actual value f the digital signature; (w) signaturemethd means an element that cntains the algrithm used fr signature generatin and this algrithm identifies all cryptgraphic functins invlved in the signature generatin;

3 ¹Hkkx IIµ[k.M 3(i)º Hkkjr dk jkti=k % vlk/kj.k 13 (x) (y) signatureprperties means an element that prvides a way t carry additinal infrmatin abut the signature, such as a time stamp r any ther infrmatin which are defined by applicatin; "time stamp means a ntatin that indicates the crrect date and time f an actin and identity f the persn r device that sent r received the time stamp and is enfrced using time stamp tken; (z) (za) (zb) (zc) "time stamp tken " means a cryptgraphically secure cnfirmatin generated by applying digital signature f a time stamping service prvider that includes the time when the cnfirmatin was generated; "time stamping service prvider " means a trusted entity authrised t generate time stamps; xml means Extensible Markup Language that prvides a standard methdlgy with frmal syntax t identify elements f infrmatin, describe the structure f data and als t stre data in an independent manner, shall have the fllwing prperties, (i) with xml, cntent and presentatin are separate; (ii) the structure f xml data in a particular cntext is described using either xml schema r a dcument type definitin; (iii) xml schema r a dcument type definitin are stred separately frm the xml dcument itself and can be used t validate a given xml dcument fr cnfrmance; xml digital signature element means an element that defined by standard xml schema fr capturing the result f a digital signature peratin applied t arbitrary data in xml frmat, shall satisfy the fllwing, (i) (ii) xml digital signature element shall exist as a standalne dcument r envelp the data bject that it signs; xml digital signature element shall have signedinf, signaturevalue, keyinf, bject and has id attribute f type child elements in rder in which they appear; (zd) xml digital signature means the digital signature n xml electrnic recrd; (ze) (zf) xml dcument means a dcument with xml lgical and physical structure that is used t carry data elements, cmpsed f declaratins, elements, cmments, character references, and prcessing instructins and a physical structure cmpsed f entities, starting with the rt, r dcument entity; xml schema means a set f pre-defined r user defined keywrds and their attributes arranged in a structured manner, shall satisfy the fllwing, (i) (ii) shuld be used fr a particular purpse where as a schema describes the structure f an xml dcument and prvides specificatin f element names that indicates which elements are allwed in an xml dcument, and in what cmbinatins; and shuld prvide extended functinality such as data types, inheritance, and presentatin rules and default values fr attributes; (zg) xml transfrm means an element that specify an ptinal rdered list f prcessing steps applied t the data bjects befre it was digested where the transfrms include cannicalizatin, encding r decding, extensible style sheet language transfrmatins, xpath filtering, and xml schema validatin; (zh) xml namespace means a unifrm resurce identifier (uri) reference where the mechanisms described in the specificatin are used in xml dcuments as element types and attribute names and als t use varius xml vcabularies withut having name cllisin. (2) Wrds and expressins used herein and nt defined but defined in the Act shall have the meanings respectively assigned t them in the said Act. 3. Manner f authenticatin f infrmatin by means f digital signature. A digital signature shall, (a) (b) (c) be created and verified by cryptgraphy which cncerns with transfrming electrnic recrd int seemingly unintelligible frms; use Public Key Cryptgraphy, which emplys an algrithm using tw different but mathematical related keys; ne key (called the private key) fr creating a digital signature and anther key (called the public key) fr verifying a digital signature; use an hash functin fr creating and verifying a digital signature which required t make digital signature generatin and verificatin efficient. 4. Creatin f digital signature. (1) The signatry shall, while signing an electrnic recrd r any ther item f infrmatin, first apply an hash functin in the signatry's hardware r sftware.

4 14 THE GAZETTE OF INDIA : EXTRAORDINARY [PART II SEC. 3(i)] (2) The hash functin shall prduce a hash result. (3) The signatry's hardware r sftware shall then transfrm the hash result int a digital signature using signatry's private key and signature algrithm. (4) The cntextual infrmatin like date and time, shall be then made part f the digital signature. (5) The cunter signatures r parallel signatures r bth may als be applied t electrnic recrd. (6) The fllwing infrmatin may als be a part f signature, (a) the signatry s public key signature certificate(s); (b) the public key certificate(s) f the licensed Certifying Authrities which used t verify the authenticity f the digital signature certificate issued t the signatry; (c) the self signed certificate generated by the Cntrller used t verify the authenticity f the public key certificate f the licensed Certifying Authrities; (d) the certificate revcatin list(s) maintained by the licensed Certifying Authrities, and the cntrller which is used t check whether the digital signature certificate has been revked under sectin 38 the Act; (e) nline certificate status prtcl respnder certificates and nline certificate status prtcl respnses that may be used in lieu f certificate revcatin list. (7) T create lng term valid digital signature, (a) a timestamp shall be applied initially t the signed data including the certificates and revcatin infrmatin; (b) ensure that initial time stamp shall cver all the data and signature(s); (c) a nested time stamp ptin shall be used t ensure signature validity past the time stamping service prvider's (tssp) key r algrithm expiry where the nesting f time stamps implies that a subsequent time stamp shall be applied t the prir time stamp; (d) signature(s) and time stamps may be embedded in the data itself r stred separately as standalne. 5. Verificatin f digital signature. (1)The verificatin f a digital signature shall be accmplished by cmputing a new hash result f the riginal electrnic recrd by means f the hash functin used t create a digital signature and by using the public key and the new hash result, the verifier shall check (a) if the digital signature was created using the crrespnding private key and shall be applicable fr parallel and cunter signatures applied n the electrnic recrd, if present; (b) the time when the digital signature was created. (2) T verify cunter signature, the signature n electrnic recrd and thereafter signature n previus signature serially shall be verified. (3) T verify parallel signature, signature n electrnic recrd shall be verified independently. (4) T verify lng term signature, the initial timestamp and all subsequent time stamp applied n the each prir timestamp shall be verified. 6. Verificatin f Digital Signature Certificate. (1) The self signed certificate generated by the Cntrller, which begins the trust chain fr the public key infrastructure, shall be used t verify the authenticity f the public key certificate f the licensed Certifying Authrities. (2) The public key certificate f the licensed Certifying Authrities shall be used t verify the authenticity f the digital signature certificate issued t the subscribers. (3) The certificate revcatin list maintained by the licensed Certifying Authrities shall be checked t cnfirm whether the certificate f the licensed Certifying Authrities is valid r whether it has been revked under sectin 38 the Act. (4) While verifying the validity f a digital signature the crrespnding digital signature certificate shall chain up thrugh the public key certificate f the issuing Certifying Authrity t the self signed certificate f the Cntrller and if any f the certificates in the trust chain is nt trusted the signature shall nt be verified. (5) The Digital Signature Certificate shall be verified with respect t time f signature created. (6) The chain f certificates shall be verified in accrdance with the standards specified in rule 7. (7) If the certificate validity is less than ne hur, the checking f revcatin list shall nt be required.

5 ¹Hkkx IIµ[k.M 3(i)º Hkkjr dk jkti=k % vlk/kj.k Digital signature standards. The mst imprtant standards that shall be applicable fr different activities assciated with digital signature functins are as under Prducts Standards Cryptgraphic hash functin SHA-2 as specified in FIPS RSA Public Key Technlgy PKCS#1 RSA Encryptin Standard ([2048, 4096 Encryptin and digital signature bit]); Versin 1.5 PKCS#7, CMS Validatin f Digital Signature Certificate RFC 5280 ECC curve NIST P-256, P-384, r P-521 Lng term signature frmats 1. CAdES RFC 5126, 2. PAdES with CAdES Time stamp tken As specified RFC Manner f authenticatin f infrmatin by means f xml digital signature. A xml digital signature shall, (a) (b) (c) (d) (e) be created and verified by cryptgraphy which cncerns with transfrming electrnic recrd int seemingly unintelligible frms; use Public Key Cryptgraphy, which emplys an algrithm using tw different but mathematical related keys, ne key (called the private key) fr creating a xml digital signature and anther key (called the public key) fr verifying a xml digital signature; use an cryptgraphic hash functin fr creating and verifying a xml digital signature; use cannicalizatin and xml transfrmatin t create standard electrnic recrd prir t creatin and verificatin f xml digital signature; authenticate xml dcuments which cntain data as references and crrespnding hashes, which is affected by the use f hash algrithm, cannicalizatin, xml transfrmatin and public key algrithm. 9. Creatin f xml digital signature. (1) T sign an electrnic recrd r any ther item f infrmatin, the signatry shall first cnstructs reference elements, xml digital signature element, signedinf, keyinf and signaturevalue. (2) Fr the purpse f reference element generatin, the signing sftware shall (a) create reference(s) element(s) with reference t the item f infrmatin, xml transfrm element(s) (ptinal), digest algrithms and digest value; (b) ptinally apply xml transfrm(s) t each referenced bject in a sequential rder; (c) apply the hash functin in the signatry's hardware r sftware t each reference elements, stre the hash result in the reference element; (d) ensure that if the bject element is created, it shall nt have a manifest element; (e) ensure that exclusive cannicalizatin "withut cmments" has been mandatrily specified in additin t any ther transfrms. (3) Fr the purpse xml digital signature generatin, the signing sftware shall (a) create signedinf element with signaturemethd, cannicalisatin methd and reference(s); (b) apply cannicalisatin t signedinf and calculate the hash value f cannicalised signedinf using the hashing algrithms implied by the signaturemethd; (c) ensure that, (i) (ii) the signatry has seen all the cntents f the dcument befre signing; the cntents display requirements, in the case f autmated signing prcess, is nt required; (iii) t sign multiple resurces tgether, (a) each resurce shall be rendered n the screen;

6 16 THE GAZETTE OF INDIA : EXTRAORDINARY [PART II SEC. 3(i)] (b) (c) (d) each referenced xml resurce shall be rendered using xslt and the xslt shall be the last transfrm dne t render the resurce n the screen; each nn xml resurce shall be rendered using mimetype attribute mentined in the bject; generate the signature using the signature algrithm and the hash, the signatry's private key, and the public key parameters (if applicable) and perfrm base64 encding f the signature result and use it t frm signaturevalue; (e) cnstruct the signature element that includes signedinf, items f infrmatin, keyinf with 509 certificate element and signaturevalue and the x509 certificate element shall carry the signatry's 509 public key certificate. (4) The cntextual infrmatin like date and time, shall be then made part f the xml digital signature. (5) The cunter signatures r parallel signatures r bth may als be applied t electrnic recrd. (6) The fllwing infrmatin may als be a part f signature (a) the public key certificate(s) f the licensed Certifying Authrities which used t verify the authenticity f the digital signature certificate issued t the signatry; (b) the self signed certificate generated by the Cntrller used t verify the authenticity f the public key certificate f the licensed Certifying Authrities; (c) the certificate revcatin list(s) maintained by the licensed Certifying Authrities and cntrller which is used check whether the digital signature certificate has been revked under sectin 38 the Act; (d) nline certificate status prtcl respnder certificates and nline certificate status prtcl respnses may be used in lieu f certificate revcatin list. (7) T create lng term valid xml digital signature (a) a timestamp shall be applied initially t the signed dcument, where the Initial time stamp shall cver all the electrnic recrd and signature(s); (b) a nested time stamp ptin shall be used t ensure signature validity past the time-stamping service prvider (tssp)'s key r algrithm expiry where as nesting f time stamps implies that a subsequent time stamp shall be applied t the prir time stamp; (c) signature(s) and time stamps may be embedded in the data itself r stred separately as standalne. 10. Verificatin f xml digital signature. (1) The verificatin f the xml digital signature shall be accmplished by signature validatin, reference validatin and certificate validatin and an xml digital signature shall be treated valid nly if signature validatin, reference validatin and certificate validatin as specified belw are cmplied with. (2) T accmplish signature validatin (a) cannical frm f signedinf as prduced during reference validatin shall be used; (b) cannical frm f signaturemethd using the cannicalizatin methd shall be btained; (c) the public key cntained in the signatry's x509 certificate that is included in the xml digital signature, the cannicalisied frm f signedinf signaturevalue, and cannicalisied frm f signaturemethd shall be used t verify the signature. (3) T accmplish reference validatin (a) cannicalise the signedinf element based n the cannicalisatin methd in the signedinf shall be used; (b) fr each reference in the signedinf (i) if transfrmatins were applied by the signatry, then the verifier sftware may de-reference the unifrm resurce identifier (uri) and execute transfrms prvided by the signatry in the reference element; (ii) cmpute digest f referenced item using the digestmethd specified in its reference element; (iii) cmpare the cmputed digest value against digestvalue in the signedinf reference; if there is any mismatch r validatin fails; (4) The Digital Signature Certificate included in the xml digital signature shall be verified in accrdance with the prvisins specified in rule 6. (5) T verify cunter signature, the signature n electrnic recrd first and signature n previus signature shall be verified serially.

7 ¹Hkkx IIµ[k.M 3(i)º Hkkjr dk jkti=k % vlk/kj.k 17 (6) T verify parallel signature, signature n electrnic recrd shall be verified independently. (7) T verify lng term signature, the initial timestamp and all subsequent time stamp applied n the each prir timestamp shall be verified. 11. The xml digital signature standards. The mst imprtant standards that shall be applicable fr different activities assciated with xml digital signature functins are as under The Prduct Standard XML Digital Signature Standard XML Namespace RFC 3986 Signature encding UTF-8 RFC 3629 Signature Value Encding Base64 RFC 4648 RFC 3275 with the fllwing cnstraint Reference element Digest SHA256 FIPS Manifest is nt permitted inside Object, KeyInf cntaining X509Certificate element is mandatry. The Reference Prcessing shall use the Exclusive Cannicalizatin(withut cmments) in additin t ther transfrms. Fr XML resurce, XSLT shall be the last transfrm dne t enable the rendering f the dcument n screen. Fr rendering f dcument n the screen Each referenced XML resurce shall be implemented using XSLT. Signature Algrithm SHA256withRSA PKCS-1 Versin 1.5 Each nn XML resurce shall be implemented using Mime Type attribute mentined in the bject. Exclusive (withut cmments), XML-EXC-C14N, RFC 3741 Cannical XML Signature blck Cannicalizatin 1. Cannical XML 1.0 (mits cmments) 2. Cannical XML 1.1 (mits cmments) Exclusive (withut cmments), XML-EXC-C14N, RFC 3741 Transfrm Algrithms Signature Type Digital Signature Certificate Cannical XML 1. Cannical XML 1.0 (mits cmments) 2. Cannical XML 1.1 (mits cmments) XSLT-XSL Transfrms (XSLT) Versin 1.0. W3C XPath RFC 3653 envelped r envelping r detached (DER) X.509 V3 issued as per interperability guidelines

8 18 THE GAZETTE OF INDIA : EXTRAORDINARY [PART II SEC. 3(i)] Public Key Algrithms RSA PKCS-1 Versin 1.5 ECC curve NIST P-256, P-384, r P-521 Lng Term Signature frmats 1. XMLERS RFC 6283 and XAdES 2. XMLERS RFC 6283 and PAdES with XAdES Time Stamp Tken As specified RFC 3161 in XML ntatin 12. The basic Syntax f xml digital signature and terms used in the rule shall be as fllws, namely:- <Signature ID?> <SignedInf> <CannicalizatinMethd/> <SignatureMethd/> (<Reference URI?> (<Transfrms>)? <DigestMethd> <DigestValue> </Reference>+ </SignedInf> <SignatureValue> (<KeyInf> (KeyName) (KeyValue) (RetrievalMethd) (<X509Data> (X509SKI) (X509SubjectName) (X509Certificate) (X509CRL) (X509Digest) </x509data>) </Keyinf>) (<Object ID?>)* </Signature> Where "?" dentes zer r ne ccurrence; "+" dentes ne r mre ccurrences; and "*" dentes zer r mre ccurrences.

Mapping between DFDL 1.0 Infoset and XML Data Model

Mapping between DFDL 1.0 Infoset and XML Data Model Stephen M Hansn (IBM) Mapping between DFDL 1.0 Infset and XML Data Mdel Status f This Dcument This wrking draft dcument prvides infrmatin t the OGF cmmunity n the Data Frmat Descriptin Language (DFDL)