EMSA-PSS

E192656

EMSA-PSS is a probabilistic signature padding and encoding scheme used with RSA to provide secure, randomized message signatures.

All labels observed (1)

Label Occurrences
EMSA-PSS canonical 3

How this entity was disambiguated

Statements (46)

Predicate Object
instanceOf encoding method for digital signatures
probabilistic signature padding scheme
basedOn PSS (Probabilistic Signature Scheme)
belongsTo PKCS #1 RSA Cryptography Standard
linked to: PKCS #1
compatibleWith RSA public-key cryptography
linked to: RSA
contrastedWith EMSA-PKCS1-v1_5
linked to: PKCS #1
definedIn PKCS #1 v2.1
linked to: PKCS #1

PKCS #1 v2.2
linked to: PKCS #1
designedFor digital signature generation
digital signature verification
hasComponent mask
message hash
salt value
trailer field
hasEncodingType signature with appendix
hasFullName Encoding Method for Signature with Appendix – Probabilistic Signature Scheme
hasParameter hash function identifier
mask generation function identifier
salt length
trailer field value
hasProperty message-dependent encoding
non-deterministic
probabilistic
improves security of RSA signatures
isPartOf RSA-PSS signature algorithm
linked to: PKCS #1
offersAdvantageOver EMSA-PKCS1-v1_5 in terms of provable security
linked to: PKCS #1
operatesOn message to be signed
output encoded message representative for RSA signature
provides probabilistic padding for RSA signatures
randomized message signatures
recommendedFor new RSA signature applications
requires choice of hash function such as SHA-256
choice of mask generation function such as MGF1
securityGoal EUF-CMA (existential unforgeability under chosen-message attack)
tight security reduction to RSA assumption
standardizedBy IETF
RSA Laboratories
linked to: RSA Security
standardizedIn PKCS #1
usedFor RSA-PSS digital signature scheme
usedIn modern cryptographic libraries
usedInContext TLS and other security protocols
public key infrastructures
usedWith RSA
uses hash function
mask generation function
random salt

How these facts were elicited

Referenced by (3)

Full triples — surface form annotated when it differs from this entity's canonical label.

PKCS #1 includes EMSA-PSS
RFC 8017 defines EMSA-PSS
RFC 3447 defines EMSA-PSS