Guidelines on the Cryptographic Algorithms to Accompany the Usage of Standards GOST R 34.10-2012 and GOST R 34.11-2012
RFC 7836

Document Type RFC - Informational (March 2016; No errata)
Last updated 2016-03-31
Stream ISE
Formats plain text pdf html bibtex
IETF conflict review conflict-review-smyshlyaev-gost-usage
Stream ISE state Published RFC
Consensus Boilerplate Unknown
Document shepherd Nevil Brownlee
Shepherd write-up Show (last changed 2015-11-24)
IESG IESG state RFC 7836 (Informational)
Telechat date
Responsible AD (None)
Send notices to "Nevil Brownlee" <rfc-ise@rfc-editor.org>
IANA IANA review state Version Changed - Review Needed
IANA action state No IC
Independent Submission                                S. Smyshlyaev, Ed.
Request for Comments: 7836                                   E. Alekseev
Category: Informational                                        I. Oshkin
ISSN: 2070-1721                                                 V. Popov
                                                             S. Leontiev
                                                              CRYPTO-PRO
                                                             V. Podobaev
                                                               FACTOR-TS
                                                            D. Belyavsky
                                                                     TCI
                                                              March 2016

             Guidelines on the Cryptographic Algorithms to
Accompany the Usage of Standards GOST R 34.10-2012 and GOST R 34.11-2012

Abstract

   The purpose of this document is to make the specifications of the
   cryptographic algorithms defined by the Russian national standards
   GOST R 34.10-2012 and GOST R 34.11-2012 available to the Internet
   community for their implementation in the cryptographic protocols
   based on the accompanying algorithms.

   These specifications define the pseudorandom functions, the key
   agreement algorithm based on the Diffie-Hellman algorithm and a hash
   function, the parameters of elliptic curves, the key derivation
   functions, and the key export functions.

Status of This Memo

   This document is not an Internet Standards Track specification; it is
   published for informational purposes.

   This is a contribution to the RFC Series, independently of any other
   RFC stream.  The RFC Editor has chosen to publish this document at
   its discretion and makes no statement about its value for
   implementation or deployment.  Documents approved for publication by
   the RFC Editor are not a candidate for any level of Internet
   Standard; see Section 2 of RFC 5741.

   Information about the current status of this document, any errata,
   and how to provide feedback on it may be obtained at
   http://www.rfc-editor.org/info/rfc7836.

Smyshlyaev, et al.            Informational                     [Page 1]
RFC 7836            Cryptographic Algorithms for GOST         March 2016

Copyright Notice

   Copyright (c) 2016 IETF Trust and the persons identified as the
   document authors.  All rights reserved.

   This document is subject to BCP 78 and the IETF Trust's Legal
   Provisions Relating to IETF Documents
   (http://trustee.ietf.org/license-info) in effect on the date of
   publication of this document.  Please review these documents
   carefully, as they describe your rights and restrictions with respect
   to this document.

Table of Contents

   1.  Introduction  . . . . . . . . . . . . . . . . . . . . . . . .   3
   2.  Conventions Used in This Document . . . . . . . . . . . . . .   3
   3.  Basic Terms, Definitions, and Notations . . . . . . . . . . .   3
   4.  Algorithm Descriptions  . . . . . . . . . . . . . . . . . . .   6
     4.1.  HMAC Functions  . . . . . . . . . . . . . . . . . . . . .   6
     4.2.  Pseudorandom Functions  . . . . . . . . . . . . . . . . .   7
     4.3.  VKO Algorithms for Key Agreement  . . . . . . . . . . . .   8
     4.4.  The Key Derivation Function KDF_TREE_GOSTR3411_2012_256 .  10
     4.5.  The Key Derivation Function KDF_GOSTR3411_2012_256  . . .  11
     4.6.  Key Wrap and Key Unwrap . . . . . . . . . . . . . . . . .  11
   5.  The Parameters of Elliptic Curves . . . . . . . . . . . . . .  12
     5.1.  Canonical Form  . . . . . . . . . . . . . . . . . . . . .  13
     5.2.  Twisted Edwards Form  . . . . . . . . . . . . . . . . . .  14
   6.  Security Considerations . . . . . . . . . . . . . . . . . . .  15
   7.  References  . . . . . . . . . . . . . . . . . . . . . . . . .  16
     7.1.  Normative References  . . . . . . . . . . . . . . . . . .  16
     7.2.  Informative References  . . . . . . . . . . . . . . . . .  17
   Appendix A.  Values of the Parameter Sets . . . . . . . . . . . .  18
     A.1.  Canonical Form Parameters . . . . . . . . . . . . . . . .  18
     A.2.  Twisted Edwards Form Parameters . . . . . . . . . . . . .  20
   Appendix B.  Test Examples  . . . . . . . . . . . . . . . . . . .  22
   Appendix C.  GOST 28147-89 Parameter Set  . . . . . . . . . . . .  30
   Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . . .  30
   Authors' Addresses  . . . . . . . . . . . . . . . . . . . . . . .  30

Smyshlyaev, et al.            Informational                     [Page 2]
RFC 7836            Cryptographic Algorithms for GOST         March 2016

1.  Introduction

   The accompanying algorithms are intended for the implementation of
Show full document text