RSA Security 5 Manual

A SERVICE OF

next previous

Chapter 2 Algorithm Info Types 69

AI_EC_DSAWithDigest

AM_ECF2POLY_DSA_VERIFY for even characteristic. Also required is the appropriate AM

for the digest specified, for instance,

AM_SHA when the

digestInfoType

is AI_SHA1.

Key info types for keyObject in B_SignInit:

KI_ECPrivate or KI_ECPrivateBER.

Key info types for keyObject in B_VerifyInit:

KI_ECPublic or KI_ECPublicBER.

Output considerations:

The

signature

result of B_SignFinal is a BER-encoded value of type SEQUENCE

(INTEGER, INTEGER) where the first field is the value

r

and the second field is the

value

s

, as defined in section 5.3.1 of X9.57 Draft. The size of

signature

is 6 + (2 ·

(length of order)) bytes. For instance, if the order is 160 bits (20 bytes), the

signature

will be 46 bytes long.