Principali Norme ISO e IEC relative alla Firma Digitale
L'elenco che segue riporta quelle più direttamente correlate con le problematiche connesse alla firma digitale.
- ISO/IEC 8372: 1987
- Modes of operation for a 64-bit block cipher algorithm.
- ISO/IEC 873 1-1: 1988
- Banking - Approved Algorithms for Message Authentication - Part 1: DEA
- ISO/IEC 873 1-2: 1992
- Banking - Approved Algorithms for Message Authentication - Part 2: Message Authentication Algorithm
- ISO/IEC 8732: 1988
- Banking - Key management (wholesale)
- ISO/IEC 9796: 1991
- Information technology - Security techniques - Digital signature scheme giving message recovery.
- ISO/IEC 9796-2: l997
- Information technology - Security techniques - Digital signature scheme giving message recovery
- Part 2: Mechanisms Using a Hash-Function
- ISO/IEC 9797: 1994
- Information technology - Security techniques - Data integrity mechanism
using a cryptographic check function employing a block cipher algorithm.
- ISO/IEC 9798-1: 1991
- Information technology - Security techniques - Entity authentication mechanism
- Part 1: General model (in revision come DIS).
- ISO/IEC 9798-2:1994
- Information technology - Security techniques - Entity authentication mechanism
- Part 2: Mechanisms using symmetric decipherment algorithms.
- ISO/IEC 9T98-3: 1993
- Information technology - Security techniques - Entity authentication mechanism
- Part 3: Mechanisms using a public key algorithm.
- ISO/IEC 9798-4: 1995
- Information technology - Security techniques - Entity authentication mechanism
- Part 4: Mechanisms using a cryptographic check function.
- ISO/IEC WD 9798-5: 1995
- Information technology - Security techniques - Entity authentication mechanism
- Part 5: Mechanisms using zero knowledge techniques.
- ISO/IEC 9979: 1991
- Data cryptographic techniques - Procedures for the registration of cryptographic algorithms.
- ISO/IEC l0116: 1991
- Information technology - Security techniques - Modes of operation for an n-bit block cipher algorithm
(in revision come DIS).
- ISO/IEC 10118-1: 1994
- Information technology - Security techniques - Hash-functions - Part 1: General.
- ISO/IEC 10118-2: 1994
- Information technology - Security techniques - Hash-functions
- Part 2: Hash-functions using an n-bit block cipher algorithm.
- ISO/IEC CD 10118-3
- Information technology - Security techniques - Hash-functions - Part 3: Dedicated hash-functions.
- ISO/IEC CD 10118-4
- Information technology - Security techniques - Hash-functions
- Part 4: Hash-functions using modular arithmetic.
- ISO/IEC 10126-1: 1991
- Banking - Procedures for message encipherment (wholesale) - Part 1: General principles.
- ISO/IEC 10126-2: 1991
- Banking - Procedures for message encipherment (wholesale)
- Part 2: DEA algorithm.
- ISO/IEC 11166-1: 1994
- Banking - Key management by means of asymmetric algorithms - Part 1: Principles, procedures and formats.
- ISO/IEC 11166-2: 1994
- Banking - Key management by means of asymmetric algorithms
- Part 2: Approved algorithms using the RSA cryptosystem.
- ISO 11568-1: 1994
- Banking - Key management (retail) - Part 1: Introduction to key management.
- ISO 11568-2: 1994
- Banking - Key management (retail) - Part 2: Key management techniques for symmetric ciphers.
- ISO 11568-3: 1994
- Banking - Key management (retail) - Part 3: Key life cycle for symmetric ciphers.
- ISO DIS 11568-4
- Banking - Key management (retail) - Part 4: Key management techniques for public key cryptosystems.
- ISO DIS 11568-5
- Banking - Key management (retail) - Part 5: Key life cycle for public key cryptosystems.
- ISO DIS 11568-6
- Banking - Key management (retail) - Part 6: Key management schemes.
- IS0/IEC DIS 11770-1
- Information technology - Security techniques - Key management - Part 1: Framework.
- ISO/IEC 11770-2: 1996
- Information technology - Security techniques - Key management
- Part 2: Mechanism using symmetric techniques.
- ISO/lEC DIS 11770-3
- Information technology - Security techniques - Key management
- Part 3: Mechanism using asymmetric techniques.
Bibliografia:
[DIHE76] W. DIFFIE e M. HELLMAN, "New directions in cryptography", in "IEEE
Transactions on Information Theory", vol. 22 (1976), pp. 644-654.
[ELGA85] T. ElGamal "A Public-Key Cryptosystem and a Signature Scheme Based on
Discrete Logarithms", in "lEEE Transactions an Information Theory", vol. 31 (1985), n. 4, pp. 469-472.
[FIPS46] National Bureau of Standards, "Data Encryption Standard", Federal
Information Processing Standard, U.S. Department of Commerce, FIPS PUB 46-2,Washington, DC, 1993.
[FIPS81] National Bureau of Standards, "DES Modes of operation Change Notices 1-2",
Federal Information Processing Standard, U.S. Department of Commerce, FIPS PUB Bl, Washington, DC, l980.
[FIPS I 86] National Bureau of Standards, "Digital Signature Standard (DSS) Change Notice",
Federal Information Processing Standard, U.S. Department of Commerce, FIPS PUB 186, Washington, DC, 1994.
[JTC196] International Organization of Standardization
and International Electrotechnical Commission Joint Technical Committee I, "ISO/IEC Draft International Standard 10118-3:
Information technology - Security techniques - Hash functions - Part 3: Dedicated Hash Functions", 1996.
[KALI92] B. B. Kaliski, "RFC 1319: The MD2 Message-Digest Algorithm",
Internet Activities Board, April 1992.
[MENE93] A. Menezes, "Elliptic Curve Public Key Cryptosystems",
Kluwer Academic Publishers, Norwell, Massachusetts, l993.
[RIVE90] R. L. Rivest, "The MD4 Message Digest Algorithm",
in "Advances in Cryptology - CRYPTO '90", Lecture Notes in Computer Science, n. 537,
Springer-Verlag, Berlino, l991, pp. 303-311.
[RIVE92] R. L. Rivest, "RFC 1321: The MDS Message Digest Algorithm",
Internet Activities Board, Aprile 1992.
[RSA78] R. L. Rivest, A. Shamir e L. Adlemann, "A Method for Obtaining
Digital Signatures and Public-Key Cryptosystems", in "Communications of the ACM", vol. 21 (1978), n. 2, pp. 120-126.
[SCHN91] C. Schnorr, "Efficient signature generation by smart cards",
in "Journal of Cryptology", n. 4 (1991), pp. 161-174.
Per maggiori informazioni sulle corrispondenze tra Norme ISO e X500
Il PROTECT IP Act (forma breve del nome completo Preventing Real Online Threats to Economic Creativity and Theft of Intellectual Property Act of 2011),
chiamato anche PIPA, è una proposta di legge statunitense che si propone di accordare al governo e ai titolari di copyright maggiori strumenti
per limitare l'accesso "ai siti web canaglia, dediti alla pirateria e alla contraffazione di prodotti"
("rogue websites dedicated to infringing or counterfeit goods"),
in particolare quelli registrati al di fuori del territorio statunitense.
Nel PIPA è espressamente previsto che i motori di ricerca "rimuovano o disabilitino l'accesso al sito internet associato al nome a dominio indicato dall'ordinanza oppure rimuovano i link ai suddetti siti internet".
Tra gli intermediari individuati figurano anche i gestori dei sistemi DNS ai quali dovrebbe essere ordinato di prendere le misure atte a prevenire
che un dominio internet sia risolto nel suo indirizzo IP (filtraggio del DNS).
Riflessioni e domande
Allora perché nasce questa proposta? Alcuni risponderanno che è giusto tutelare gli investimenti fatti dalle aziende per creare i prodotti,
ma di fatto queste tutele esistono già, molti di voi ricordano come è andata a finire la lite decennale tra la Apple e la Microsoft...
Per conoscere ulteriori informazioni sul PIPA e SOPA (Stop Online Piracy Act).
Internet: un percorso verso la Democrazia - Novembre 2000 Quartu Sant'Elena
Internet e Democrazia: Normativa, Appunti, Informazioni e Considerazioni - Revisione 1.4 Agosto 2009
La pubblicazione di testi relativi a Leggi, Regolamenti e Normative non ha carattere di ufficialità
Data Ultimo Aggiornamento:
2012-01-29
|