BS ISO/IEC 9798-5:2009

Foreword
Introduction
1 Scope
2 Terms and definitions
3 Notation, symbols and abbreviated terms
4 Mechanisms based on identities
5 Mechanisms based on integer factorization
6 Mechanisms based on discrete logarithms with respect
  to prime numbers
7 Mechanisms based on discrete logarithms with respect
  to composite numbers
8 Mechanisms based on asymmetric encryption systems
9 Mechanism based on discrete logarithms with respect
  to elliptic curves
Annex A (normative) - Object identifiers
Annex B (informative) - Principles of zero-knowledge techniques
Annex C (informative) - Guidance on parameter choice and
        comparison of the mechanisms
Annex D (informative) - Numerical examples
Bibliography

Describes entity authentication mechanisms using zero-knowledge techniques: - mechanisms based on identities and providing unilateral authentication; - mechanisms based on integer factorization and providing unilateral authentication; - mechanisms based on discrete logarithms with respect to numbers that are either prime or composite, and providing unilateral authentication; - mechanisms based on asymmetric encryption systems and providing either unilateral authentication, or mutual authentication; - mechanisms based on discrete logarithms on elliptic curves and providing unilateral authentication.

This part of ISO/IEC9798 specifies entity authentication mechanisms using zero-knowledge techniques:

• mechanisms based on identities and providing unilateral authentication;

• mechanisms based on integer factorization and providing unilateral authentication;

• mechanisms based on discrete logarithms with respect to numbers that are either prime or composite, and providing unilateral authentication;

• mechanisms based on asymmetric encryption systems and providing either unilateral authentication, or mutual authentication;

• mechanisms based on discrete logarithms on elliptic curves and providing unilateral authentication.

These mechanisms are constructed using the principles of zero-knowledge techniques, but they are not necessarily zero-knowledge according to the strict definition for every choice of parameters.