ORDER OF THE MINISTRY OF JUSTICE OF UKRAINE, ADMINISTRATION OF PUBLIC SERVICE OF SPECIAL COMMUNICATION AND INFORMATION SECURITY OF UKRAINE

of March 29, 2017 No. 1017/5/206

About introduction of amendments to the Order of the Ministry of Justice of Ukraine, Administration of Public service of special communication and information security of Ukraine of August 20, 2012 No. 1236/5/453

According to subitems 76, of the 77th item 4 of the Regulations on the Ministry of Justice of Ukraine approved by the resolution of the Cabinet of Ministers of Ukraine of July 2, 2014 No. 228, to subitems 6, of the 27th item 4 of the Regulations on Administration of Public service of special communication and information security of Ukraine approved by the resolution of the Cabinet of Ministers of Ukraine of September 3, 2014 No. 411, and for the purpose of enhancement of the legislation in the field of the digital signature by use of new national and international algorithms of cryptographic information security in basic infrastructure facilities of open keys we ORDER:

1. Item 2 of the order of the Ministry of Justice of Ukraine, Administration of Public service of special communication and information security of Ukraine of August 20, 2012 No. 1236/5/453 "About approval of requirements to formats, structure and protocols realized in well-tried remedies of the digital signature", registered in the Ministry of Justice of Ukraine on August 20, 2012 at No. 1398/21710 (with changes) to add with new subitem 2.4 of the following content:

"2.4. The subjects of legal relations in the field of services of the digital signature using the strengthened certificates of open keys in the activities apply the digital signature:

1) within the country for the purpose of providing electronic document management according to:

national standard of Ukraine GSTU 4145-2002 "Information technology. Cryptographic information security. The digital signature based on elliptic curves", the approved order of the State committee of Ukraine concerning technical regulation and consumer policy of December 28, 2002 No. 31 with function of hashing according to the state standard specifications 34.311-95 interstate standards "Information technology. Cryptographic information security. Hashing function", the approved order of the State committee of Ukraine concerning technical regulation and consumer policy of October 21, 1997 No. 640. These standards are applied to imposing of the digital signature till January 1, 2022 and to imposing of the digital signature for the purpose of provision of services of the digital signature on verification of the status of certificates of open keys before the expiration of their action and verification of the digital signature;

national standard of Ukraine GSTU 4145-2002 "Information technology. Cryptographic information security. The digital signature based on elliptic curves", the approved order of the State committee of Ukraine concerning technical regulation and consumer policy of December 28, 2002 No. 31 with function of hashing according to the national standard of Ukraine GSTU 7564-2014 "Information technologies. Cryptographic information security. Hashing function", to No. 1431 approved by the order of the Ministry of Economic Development and Trade of Ukraine of December 2, 2014. These standards are applied to imposing of the digital signature since January 1, 2022 and to verification of the digital signature;

2) within the country for the purpose of ensuring electronic authentication of persons by application of algorithms:

ECDSA according to the national standard of Ukraine GSTU ISO/IEC 148883: 2014 "Information technologies. Protection methods. Digital signatures with amendment. Part 3. Mechanisms on the basis of certificates", the approved order of the Ministry of Economic Development and Trade of Ukraine of December 30, 2014 No. 1493, with extent of expansion of the main field of elliptic curve at least 256 with functions hashing of sha256 or sha512 according to FIPS PUB 180-4 "Secure Hash Standard";

1 this Item specified in the subitem;

3) for cross-border cooperation with any purpose according to requirements:

GSTU ETSI EN 119 312: 2015 "Digital signatures and infrastructures (ESI). Cryptographic sets", the state company "Ukrainian Research and Training Center of Problems of Standardization, Certification and Quality" approved by the order of September 7, 2016 No. 265, and within the country with other purpose specified in subitems 1, 2 presents of Item by application of algorithms of the digital signature:

RSA according to RFC 3447 "Public-Key Cryptography Standards (PKCS) No. 1: RSA Cryptography Specifications Version 2.1" with length of key at least 4096 bits with functions of hashing sha256 according to FIPS PUB 180-4;

2 presents of Item specified in subitems 1,;".

2. Approve enclosed:

1) Changes in the Requirements to format of the strengthened certificate of open key approved by the order of the Ministry of Justice of Ukraine, Administration of Public service of special communication and information security of Ukraine of August 20, 2012 No. 1236/5/453, registered in the Ministry of Justice of Ukraine on August 20, 2012 for No. 1398/21710 (with changes);

2) Changes in Requirements to structure of object identifiers for cryptoalgorithms which are state standards, the Ministries of Justice of Ukraine, Administration of Public service of special communication and information security of Ukraine approved by the order of August 20, 2012 No. 1236/5/453, registered in the Ministry of Justice of Ukraine on August 20, 2012 at No. 1399/21711 (with changes);

3) Changes in the Requirements to format of signed data approved by the order of the Ministry of Justice of Ukraine, Administration of Public service of special communication and information security of Ukraine of August 20, 2012 No. 1236/5/453, registered in the Ministry of Justice of Ukraine on August 20, 2012 at No. 1401/21713 (with changes);

4) Changes in the Requirements to the protocol of fixation of time approved by the order of the Ministry of Justice of Ukraine, Administration of Public service of special communication and information security of Ukraine of August 20, 2012 No. 1236/5/453, registered in the Ministry of Justice of Ukraine on August 20, 2012 at No. 1402/21714 (with changes).

3. To department of private law of the Ministry of Justice of Ukraine () submit A.N. Ferens this order on state registration according to the Presidential decree of Ukraine of October 3, 1992 to No. 493 "About state registration of regulatory legal acts of the ministries and other executive bodies".

4. This order becomes effective from the date of its official publication.

5. To impose control of execution of this order on the first deputy the Minister of Justice of Ukraine Sevostyanova N. I. and First Deputy Chairman of Public service of special communication and information security of Ukraine Chauzov A. N.

Approved by the Order of the Ministry of Justice of Ukraine, Administration of Public service of special communication and information security of Ukraine of March 29, 2017 No. 1017/5/206

Changes in Requirements to format of the strengthened certificate of open key

1. In the Section I:

Item 1.4 to state 1) in the following edition:

Disclaimer! This text was translated by AI translator and is not a valid juridical document. No warranty. No claim. More info