[thirdparty/openssl.git] / doc / standards.txt

Standards related to OpenSSL
============================

This is a work in progress.  These are documents that describe things that
are implemented (in whole or at least great parts) in OpenSSL.

To search for RFCs, you can start at https://www.ietf.org/rfc.html

To search for internet-drafts, you can start at https://www.ietf.org/id-info/

Many PKCS standards are now RFC's; PKCS#11 is now at Oasis and can be
found at https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=pkcs11


Implemented
-----------

PKCS#8: Private-Key Information Syntax Standard

PKCS#12: Personal Information Exchange Syntax Standard, version 1.0.

1319 The MD2 Message-Digest Algorithm

1320 The MD4 Message-Digest Algorithm

1321 The MD5 Message-Digest Algorithm

2246 The TLS Protocol Version 1

2268 A Description of the RC2(r) Encryption Algorithm

2315 PKCS 7: Cryptographic Message Syntax Version 1.5

2560 X.509 Internet Public Key Infrastructure Online Certificate
     Status Protocol - OCSP

2898 PKCS #5: Password-Based Cryptography Specification Version 2.0

2986 PKCS #10: Certification Request Syntax Specification Version 1.7

3161 Internet X.509 Public Key Infrastructure, Time-Stamp Protocol (TSP)

3174 US Secure Hash Algorithm 1 (SHA1)

3268 Advanced Encryption Standard (AES) Ciphersuites for Transport
     Layer Security (TLS)

3279 Algorithms and Identifiers for the Internet X.509 Public Key
     Infrastructure Certificate and Certificate Revocation List (CRL)
     Profile

3280 Internet X.509 Public Key Infrastructure Certificate and
     Certificate Revocation List (CRL) Profile

3447 Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography
     Specifications Version 2.1

3713 A Description of the Camellia Encryption Algorithm

3820 Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate
     Profile

4132 Addition of Camellia Cipher Suites to Transport Layer Security
     (TLS)

4162 Addition of SEED Cipher Suites to Transport Layer Security (TLS)

4269 The SEED Encryption Algorithm


Related
-------

These are documents that are close to OpenSSL, for example the
STARTTLS documents.

1421 Privacy Enhancement for Internet Electronic Mail: Part I: Message
     Encryption and Authentication Procedures

1422 Privacy Enhancement for Internet Electronic Mail: Part II:
     Certificate-Based Key Management

1423 Privacy Enhancement for Internet Electronic Mail: Part III:
     Algorithms, Modes, and Identifiers

1424 Privacy Enhancement for Internet Electronic Mail: Part IV: Key
     Certification and Related Services

2025 The Simple Public-Key GSS-API Mechanism (SPKM)

2510 Internet X.509 Public Key Infrastructure Certificate Management
     Protocols

2511 Internet X.509 Certificate Request Message Format

2527 Internet X.509 Public Key Infrastructure Certificate Policy and
     Certification Practices Framework

2538 Storing Certificates in the Domain Name System (DNS)

2539 Storage of Diffie-Hellman Keys in the Domain Name System (DNS)

2559 Internet X.509 Public Key Infrastructure Operational Protocols -
     LDAPv2

2585 Internet X.509 Public Key Infrastructure Operational Protocols:
     FTP and HTTP

2587 Internet X.509 Public Key Infrastructure LDAPv2 Schema

2595 Using TLS with IMAP, POP3 and ACAP

2631 Diffie-Hellman Key Agreement Method

2632 S/MIME Version 3 Certificate Handling

2716 PPP EAP TLS Authentication Protocol

2797 Certificate Management Messages over CMS

2817 Upgrading to TLS Within HTTP/1.1

2818 HTTP Over TLS

2984 Use of the CAST-128 Encryption Algorithm in CMS

2985 PKCS #9: Selected Object Classes and Attribute Types Version 2.0

3029 Internet X.509 Public Key Infrastructure Data Validation and
     Certification Server Protocols

3039 Internet X.509 Public Key Infrastructure Qualified Certificates
     Profile

3058 Use of the IDEA Encryption Algorithm in CMS

3161 Internet X.509 Public Key Infrastructure Time-Stamp Protocol
     (TSP)

3185 Reuse of CMS Content Encryption Keys

3207 SMTP Service Extension for Secure SMTP over Transport Layer
     Security

3217 Triple-DES and RC2 Key Wrapping

3274 Compressed Data Content Type for Cryptographic Message Syntax
     (CMS)

3278 Use of Elliptic Curve Cryptography (ECC) Algorithms in
     Cryptographic Message Syntax (CMS)

3281 An Internet Attribute Certificate Profile for Authorization

3369 Cryptographic Message Syntax (CMS)

3370 Cryptographic Message Syntax (CMS) Algorithms

3394 Advanced Encryption Standard (AES) Key Wrap Algorithm

3436 Transport Layer Security over Stream Control Transmission
     Protocol

3657 Use of the Camellia Encryption Algorithm in Cryptographic 
     Message Syntax (CMS)
Commit	Line	Data
6d52cf21 RL	1	Standards related to OpenSSL
	2	============================
	3
9f7f8ece RS	4	This is a work in progress. These are documents that describe things that
9f7f8ece RS	5	are implemented (in whole or at least great parts) in OpenSSL.
6d52cf21	6
63a3c455	7	To search for RFCs, you can start at https://www.ietf.org/rfc.html
6d52cf21	8
63a3c455	9	To search for internet-drafts, you can start at https://www.ietf.org/id-info/
6d52cf21	10
9f7f8ece RS	11	Many PKCS standards are now RFC's; PKCS#11 is now at Oasis and can be
9f7f8ece RS	12	found at https://www.oasis-open.org/committees/tc_home.php?wg_abbrev=pkcs11
6d52cf21 RL	13
6d52cf21 RL	14
9f7f8ece RS	15	Implemented
9f7f8ece RS	16	-----------
6d52cf21	17
9f7f8ece	18	PKCS#8: Private-Key Information Syntax Standard
6d52cf21	19
9f7f8ece	20	PKCS#12: Personal Information Exchange Syntax Standard, version 1.0.
6d52cf21	21
9f7f8ece	22	1319 The MD2 Message-Digest Algorithm
6d52cf21	23
9f7f8ece	24	1320 The MD4 Message-Digest Algorithm
6d52cf21	25
9f7f8ece	26	1321 The MD5 Message-Digest Algorithm
6d52cf21	27
9f7f8ece	28	2246 The TLS Protocol Version 1
6d52cf21	29
9f7f8ece	30	2268 A Description of the RC2(r) Encryption Algorithm
6d52cf21	31
9f7f8ece	32	2315 PKCS 7: Cryptographic Message Syntax Version 1.5
6d52cf21	33
1d833a99	34	2560 X.509 Internet Public Key Infrastructure Online Certificate
9f7f8ece	35	Status Protocol - OCSP
1d833a99	36
9f7f8ece	37	2898 PKCS #5: Password-Based Cryptography Specification Version 2.0
dcf19c17	38
9f7f8ece	39	2986 PKCS #10: Certification Request Syntax Specification Version 1.7
dcf19c17	40
c7235be6	41	3161 Internet X.509 Public Key Infrastructure, Time-Stamp Protocol (TSP)
9f7f8ece RS	42
9f7f8ece RS	43	3174 US Secure Hash Algorithm 1 (SHA1)
c7235be6	44
dcf19c17	45	3268 Advanced Encryption Standard (AES) Ciphersuites for Transport
9f7f8ece	46	Layer Security (TLS)
dcf19c17 RL	47
	48	3279 Algorithms and Identifiers for the Internet X.509 Public Key
	49	Infrastructure Certificate and Certificate Revocation List (CRL)
9f7f8ece	50	Profile
dcf19c17 RL	51
dcf19c17 RL	52	3280 Internet X.509 Public Key Infrastructure Certificate and
9f7f8ece	53	Certificate Revocation List (CRL) Profile
dcf19c17	54
27a9bf17	55	3447 Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography
9f7f8ece	56	Specifications Version 2.1
27a9bf17	57
9f7f8ece	58	3713 A Description of the Camellia Encryption Algorithm
8e4560c4	59
d9bfe4f9	60	3820 Internet X.509 Public Key Infrastructure (PKI) Proxy Certificate
9f7f8ece	61	Profile
d9bfe4f9	62
8e4560c4	63	4132 Addition of Camellia Cipher Suites to Transport Layer Security
9f7f8ece	64	(TLS)
6d52cf21	65
9f7f8ece	66	4162 Addition of SEED Cipher Suites to Transport Layer Security (TLS)
96afc1cf	67
9f7f8ece	68	4269 The SEED Encryption Algorithm
96afc1cf BM	69
96afc1cf BM	70
9f7f8ece RS	71	Related
9f7f8ece RS	72	-------
6d52cf21 RL	73
	74	These are documents that are close to OpenSSL, for example the
	75	STARTTLS documents.
	76
adbd4ed1	77	1421 Privacy Enhancement for Internet Electronic Mail: Part I: Message
9f7f8ece	78	Encryption and Authentication Procedures
adbd4ed1 RL	79
adbd4ed1 RL	80	1422 Privacy Enhancement for Internet Electronic Mail: Part II:
9f7f8ece	81	Certificate-Based Key Management
adbd4ed1 RL	82
adbd4ed1 RL	83	1423 Privacy Enhancement for Internet Electronic Mail: Part III:
9f7f8ece	84	Algorithms, Modes, and Identifiers
adbd4ed1 RL	85
adbd4ed1 RL	86	1424 Privacy Enhancement for Internet Electronic Mail: Part IV: Key
9f7f8ece	87	Certification and Related Services
adbd4ed1	88
9f7f8ece	89	2025 The Simple Public-Key GSS-API Mechanism (SPKM)
b5beb13a	90
dcf19c17	91	2510 Internet X.509 Public Key Infrastructure Certificate Management
9f7f8ece	92	Protocols
dcf19c17	93
9f7f8ece	94	2511 Internet X.509 Certificate Request Message Format
dcf19c17 RL	95
dcf19c17 RL	96	2527 Internet X.509 Public Key Infrastructure Certificate Policy and
9f7f8ece	97	Certification Practices Framework
dcf19c17	98
9f7f8ece	99	2538 Storing Certificates in the Domain Name System (DNS)
1d833a99	100
9f7f8ece	101	2539 Storage of Diffie-Hellman Keys in the Domain Name System (DNS)
dcf19c17 RL	102
dcf19c17 RL	103	2559 Internet X.509 Public Key Infrastructure Operational Protocols -
9f7f8ece	104	LDAPv2
6d52cf21 RL	105
6d52cf21 RL	106	2585 Internet X.509 Public Key Infrastructure Operational Protocols:
9f7f8ece	107	FTP and HTTP
6d52cf21	108
9f7f8ece	109	2587 Internet X.509 Public Key Infrastructure LDAPv2 Schema
dcf19c17	110
9f7f8ece	111	2595 Using TLS with IMAP, POP3 and ACAP
6d52cf21	112
9f7f8ece	113	2631 Diffie-Hellman Key Agreement Method
dcf19c17	114
9f7f8ece	115	2632 S/MIME Version 3 Certificate Handling
dcf19c17	116
9f7f8ece	117	2716 PPP EAP TLS Authentication Protocol
dcf19c17	118
9f7f8ece	119	2797 Certificate Management Messages over CMS
dcf19c17	120
9f7f8ece	121	2817 Upgrading to TLS Within HTTP/1.1
6d52cf21	122
9f7f8ece	123	2818 HTTP Over TLS
6d52cf21	124
9f7f8ece	125	2984 Use of the CAST-128 Encryption Algorithm in CMS
6d52cf21	126
9f7f8ece	127	2985 PKCS #9: Selected Object Classes and Attribute Types Version 2.0
dcf19c17 RL	128
dcf19c17 RL	129	3029 Internet X.509 Public Key Infrastructure Data Validation and
9f7f8ece	130	Certification Server Protocols
dcf19c17 RL	131
dcf19c17 RL	132	3039 Internet X.509 Public Key Infrastructure Qualified Certificates
9f7f8ece	133	Profile
dcf19c17	134
9f7f8ece	135	3058 Use of the IDEA Encryption Algorithm in CMS
dcf19c17 RL	136
dcf19c17 RL	137	3161 Internet X.509 Public Key Infrastructure Time-Stamp Protocol
9f7f8ece	138	(TSP)
dcf19c17	139
9f7f8ece	140	3185 Reuse of CMS Content Encryption Keys
dcf19c17 RL	141
dcf19c17 RL	142	3207 SMTP Service Extension for Secure SMTP over Transport Layer
9f7f8ece	143	Security
dcf19c17	144
9f7f8ece	145	3217 Triple-DES and RC2 Key Wrapping
dcf19c17 RL	146
dcf19c17 RL	147	3274 Compressed Data Content Type for Cryptographic Message Syntax
9f7f8ece	148	(CMS)
dcf19c17 RL	149
dcf19c17 RL	150	3278 Use of Elliptic Curve Cryptography (ECC) Algorithms in
9f7f8ece	151	Cryptographic Message Syntax (CMS)
dcf19c17	152
9f7f8ece	153	3281 An Internet Attribute Certificate Profile for Authorization
dcf19c17	154
9f7f8ece	155	3369 Cryptographic Message Syntax (CMS)
dcf19c17	156
9f7f8ece	157	3370 Cryptographic Message Syntax (CMS) Algorithms
dcf19c17	158
9f7f8ece	159	3394 Advanced Encryption Standard (AES) Key Wrap Algorithm
dcf19c17 RL	160
dcf19c17 RL	161	3436 Transport Layer Security over Stream Control Transmission
9f7f8ece	162	Protocol
dcf19c17	163
8e4560c4	164	3657 Use of the Camellia Encryption Algorithm in Cryptographic
9f7f8ece	165	Message Syntax (CMS)