ISO/IEC 23264-2:2024

Information security — Redaction of authentic data — Part 2: Redactable signature schemes based on asymmetric mechanisms

This document specifies cryptographic mechanisms to redact authentic data. The mechanisms described in this document offer different combinations of the security properties defined and described in ISO/IEC 23264-1. For all mechanisms, this document describes the processes for key generation, generating the redactable attestation, carrying out redactions and verifying redactable attestations. This document contains mechanisms that are based on asymmetric cryptography using three related transformations: ¾ a public transformation defined by a verification key (verification process for verifying a redactable attestation), ¾ a private transformation defined by a private attestation key (redactable attestation process for generating a redactable attestation), and ¾ a third transformation defined by the redaction key (redaction process) allowing to redact authentic information within the constraints set forth during generation of the attestation such that redacted information cannot be reconstructed. This document contains mechanisms which, after a successful redaction, allow the attestation to remain verifiable using the verification transformation and attest that non-redacted fields of the attested message are unmodified. This document further details that the three transformations have the property whereby it is computationally infeasible to derive the private attestation transformation, given the redaction and or the verification transformation and key(s).

Sécurité de l'information — Rédaction de données authentifiées — Partie 2: Schémas de signature éditable basés sur des mécanismes asymétriques

General Information

• Status: Published
• Publication Date: 14-Aug-2024
• ICS: 35.030 - IT Security
• Technical Committee: ISO/IEC JTC 1/SC 27 - Information security, cybersecurity and privacy protection
• Drafting Committee: ISO/IEC JTC 1/SC 27/WG 2 - Cryptography and security mechanisms
• Current Stage: 6060 - International Standard published
• Start Date: 15-Aug-2024
• Due Date: 24-Jan-2024
• Completion Date: 15-Aug-2024

Standards Content (Sample)

International
Standard
ISO/IEC 23264-2
First edition
Information security — Redaction
2024-08
of authentic data —
Part 2:
Redactable signature schemes
based on asymmetric mechanisms
Sécurité de l'information — Rédaction de données
authentifiées —
Partie 2: Schémas de signature éditable basés sur des mécanismes
asymétriques
Reference number
© ISO/IEC 2024
All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may
be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on
the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below
or ISO’s member body in the country of the requester.
ISO copyright office
CP 401 • Ch. de Blandonnet 8
CH-1214 Vernier, Geneva
Phone: [phone]
Email: [e-mail]
Website: www.iso.org
Published in Switzerland
© ISO/IEC 2024 – All rights reserved
ii
Contents Page
Foreword .v
Introduction .vi
1 Scope . 1
2 Normative references . 1
3 Terms and definitions . 1
4 Symbols and conventions . 3
4.1 Symbols .3
4.2 Conventions .4
5 General . 5
6 Generic construction from signature schemes and hash-functions . 5
6.1 Parameters .5
6.2 Construction .6
6.2.1 Key generation process .6
6.2.2 Redactable attestation process .6
6.2.3 Redaction process .7
6.2.4 Verification process .8
7 Scheme SBZ02-MERSAProd . 8
7.1 Parameters .8
7.2 Construction .9
7.2.1 Key generation process .9
7.2.2 Redactable attestation process .9
7.2.3 Redaction process .10
7.2.4 Verification process .11
8 Scheme BBDFFKMOPPS10 .12
8.1 Parameters . 12
8.2 Construction . 12
8.2.1 Key generation process . 12
8.2.2 Redactable attestation process . 12
8.2.3 Redaction process .14
8.2.4 Verification process . 15
9 Scheme DPSS15 . 17
9.1 Parameters .17
9.2 Subroutine: RSA Accumulators .17
9.3 Construction .18
9.3.1 Key generation process .18
9.3.2 Redactable attestation process .19
9.3.3 Redaction process . 20
9.3.4 Verification Process . 20
10 Scheme MHI06 .21
10.1 Parameters .21
10.2 Construction . 22
10.2.1 Key generation process . 22
10.2.2 Redactable attestation process . 22
10.2.3 Redaction process . 23
10.2.4 Verification Process .24
11 Scheme MIMSYTI05 .25
11.1 Parameters . 25
11.2 Construction . 25
11.2.1 Key generation process . 25
11.2.2 Redactable attestation process . 25

© ISO/IEC 2024 – All rights reserved
iii
11.2.3 Redaction process . 26
11.2.4 Verification Process .27
Annex A (normative) Object identifiers .29
Annex B (informative) Overview of properties of redactable signature schemes based on
asymmetric mechanisms .30
Annex C (informative) Criteria for inclusion of schemes in this document .33
Annex D (informative) Numerical examples .34
Bibliography .57

© ISO/IEC 2024 – All rights reserved
iv
Foreword
ISO (the International Organization for Standardization) and IEC (the International Electrotechnical
Commission) form the specialized system for worldwide standardization. National bodies that are
members of ISO or IEC participate in the development of International Standards through technical
committees established by the respective organization to deal with particular fields of technical activity.
ISO and IEC technical committees collaborate in fields of mutual interest. Other international organizations,
governmental and non-governmental, in liaison with ISO and IEC, also take part in the work.
The procedures used to develop this document and those intended for its further maintenance are described
in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the different types
of document should be noted. This document was drafted in accordance with the editorial rules of the ISO/
IEC Directives, Part 2 (see www.iso.org/directives or www.iec.ch/members_experts/refdocs).
ISO and IEC draw attention to the possibility that the implementation of this document may involve the
use of (a) patent(s). ISO and IEC take no position concerning the evidence, validity or applicability of any
claimed patent rights in respect thereof. As of the date of publication of this document, ISO and IEC had not
received notice of (a) patent(s) which may be required to implement this document. However, implementers
are cautioned that this may not represent the latest information, which may be obtained from the patent
database available at www.iso.org/patents and https://patents.iec.ch. ISO and IEC shall not be held
responsible for identifying any or
...