Victorian Electronic Records Strategy


VERS STORY	STANDARD	ASSESSMENT	PROJECTS	DIGITAL ARCHIVE	TRAINING	TOOLKIT	PUBLICATIONS

Introduction

Standard
(Version 1)
  Specification 1
  Specification 2
  Specification 3

Standard
(Version 2)
  Specification 1
  Specification 2
  Specification 3
  Specification 4
  Specification 5
  Advice 9
  Advice 10
  Advice 11
  Advice 12
  Advice 13
  Advice 14

Home > Standard > Standard (Version 2) >Specification 3 > Structure of Signature Block

5.5 Structure of Signature Block

5.5.1 Indication of hash and signature algorithms

To allow systems to automatically verify digital signatures it is necessary to indicate the digital signature and hash algorithms used.

The algorithms are indicated by the vers:SignatureAlgorithm (M149) element. A SignatureAlgorithmIdentifier element contains one of the standard Object Identifiers (OIDs) used to identify algorithms in X.509 certificates. These OIDs can be found in a variety of places, but a convenient source is p75 of RFC 2459 [RFC 2459] The OID is represented as a textual value in the 'dot notation' and the standard values for the approved algorithms are:

SHA1 with RSA: '1.2.840.113549.1.1.5'
SHA256 with RSA: '1.2.840.113549.1.1.11'
SHA512 with RSA: '1.2.840.113549.1.1.13'
SHA1 with DSA: '1.2.840.10040.4.3'

5.5.2 Encoding of signature

Signatures are encoded in Base64 [Base64].

printer friendly