Pre-Grant Publication Number: 20090129585
Please help the USPTO examine the application by evaluating the relevance of the publicly submitted prior art to the patent application.
Peer To Patent forwards the Top 10 most relevant prior art submissions and their annotations to the USPTO.
Review this prior art and click on the thumbs up (or down) to indicate whether this submission should be forwarded to the USPTO.
If you login then you can add an annotation by typing in the box at the bottom of the screen to comment on the relevance of the prior art to the claims of the patent application.
Review this prior art and click on the thumbs up (or down) to indicate whether this submission should be forwarded to the USPTO.
If you login then you can add an annotation by typing in the box at the bottom of the screen to comment on the relevance of the prior art to the claims of the patent application.
Prior Art Detail
Summary / Description
| Summary / Description | "This document describes a password-based content encryption mechanism for S/MIME. This is implemented as a new RecipientInfo type and is an extension to the RecipientInfo types currently defined in CMS [CMS]" |
Basic Information
| Type of Prior Art | Online Publication |
| URL | http://www.imc.org/ietf-smime/a... |
| Author/Creator | |
| Title | |
| Publication Date | March 11, 1999 |
| Publisher | imc.org |
| Directions to Document Location | |
| Additional Information | |
Notes / To Do
| Notes | |
Excerpt
Excerpt 1.2.2 Rationale
>
> Password-based key wrapping is a two-stage process, a first stage in which the
> user-supplied password is converted into a KEK, and a second stage in which the
> KEK is used to encrypt a content-encryption key. These two stages are
> identified by the two algorithm identifiers. Although the PKCS #5 standard
> wraps these up into a single AlgorithmIdentifier, this design is particular to
> that standard and may not be applicable for other password-based key wrapping
> standards. For this reason the two steps are specified separately.
>
2 Supported Algorithms
>
> This section lists the algorithms that must be implemented. Additional
> algorithms that should be implemented are also included.
>
> 2.1 Key Derivation Algorithms
>
> These algorithms are used to convert the password into a KEK. The key
> derivation algorithms are:
>
> KeyDerivationAlgorithmIdentifer ALGORITHM-IDENTIFIER ::= {
> { SYNTAX PBKDF2-params IDENTIFIED BY id-PBKDF2 },
> ...
> }
>
> CMS implementations must include PBKDF2 [PKCS5v2].
>
> 2.2 Key Encryption Algorithms
>
> These algorithms are used to encrypt the content (the key) using the derived
> KEK. The content encryption algorithms are:
>
> KeyEncryptionAlgorithmIdentifer ALGORITHM-IDENTIFIER ::= PBES2-Encs
>
> CMS implementations must include Triple-DES in CBC mode, should include RC2 in
> CBC mode, and may include other algorithms (CAST-128, RC5, IDEA, Skipjack) and
> modes as required. CMS implementations should not include any KSG ciphers such
> as RC4.
>
> 2.3 Symmetric Key Encryption Algorithms
>
> <<Align with CMS KEK algorithm when it's stable. The content is encrypted is
> as per the KEK algorithm, but using the IV given in the
> KeyEncryptionAlgorithmIdentifier instead of a fixed IV - this is just
> standard CMS content encryption. The latest CMS KEK stuff looked like it was
> moving in this direction anyway>>
>
> 3. Security Considerations
>
> The security of this recipient information type rests on the security of the
> underlying mechanisms employed, for which further information can be found in
> CMS and PKCS5v2.
>
|
Relevance
Claims
1
Relevance
Disclosed is a two step encryption process. See the Excerpt.
Disclosed is a two step encryption process. See the Excerpt.
Claim Chart
Some
0 days left
