Encoding Method for Signature with Appendix – Probabilistic Signature Scheme

E830588

Encoding Method for Signature with Appendix – Probabilistic Signature Scheme (EMSA-PSS) is a cryptographic message encoding method used with RSA-PSS digital signatures to provide strong security against forgery through probabilistic padding.

All labels observed (2)

How this entity was disambiguated

Statements (45)

Predicate Object
instanceOf cryptographic encoding method
digital signature padding scheme
message encoding method
abbreviation EMSA-PSS
appliesTo messages of bounded length relative to RSA modulus
category digital signatures
public-key cryptography
comparedTo deterministic PKCS #1 v1.5 encoding
definedBy RSA Laboratories
linked to: RSA Security
hasAdvantage prevents deterministic signature patterns
reduces risk of signature replay analysis
hasComponent data block DB
encoded message EM
hash H
trailer field
hasDesignGoal tight security reduction to RSA assumption
hasProperty collision resistance dependent on hash function
compatible with various hash algorithms
message encoding with randomness
non-deterministic output for same message and key
probabilistic padding
supports configurable salt length
hasPurpose provide strong security against forgery
hasStep combine hash output and padding to form encoded message
generate mask using mask generation function
hash the message and salt
relatedTo EMSA-PKCS1-v1_5
linked to: PKCS #1

Probabilistic Signature Scheme
requires random salt generation
securityBasedOn RSA inversion problem
properties of underlying hash function
securityGoal EUF-CMA security for RSA-PSS
specifiedAs encoding method for signature with appendix
standardizedIn PKCS #1 v2.1
linked to: PKCS #1

PKCS #1 v2.2
linked to: PKCS #1
usedIn RSA-PSS signature generation
RSA-PSS signature verification
usedInStandard TLS (when RSA-PSS is used)
linked to: TLS

X.509 certificates with RSA-PSS signatures
usedWith RSA digital signatures
linked to: RSA

RSA-PSS
usesComponent hash function
mask generation function
message representative
salt value

How these facts were elicited

Referenced by (2)

Full triples — surface form annotated when it differs from this entity's canonical label.

EMSA-PSS hasFullName Encoding Method for Signature with Appendix – Probabilistic Signature Scheme
Encoding Method for Signature with Appendix – Probabilistic Signature Scheme usedIn RSA-PSS signature verification
linked to: Encoding Method for Signature with Appendix – Probabilistic Signature Scheme