Digital Signature Algorithm

Digital Signature Algorithm
Name	Digital Signature Algorithm
Acronym	DSA
Developer	United States National Security Agency; standardized by National Institute of Standards and Technology
Introduced	1991
Type	Digital signature scheme
Related	Rivest–Shamir–Adleman, Elliptic-curve cryptography, SHA-1, SHA-2

Digital Signature Algorithm is a Federal Information Processing Standard digital signature method specified for authentication and integrity in cryptographic systems. It was proposed amid policy and technical debates involving Ronald Reagan-era initiatives and standardized by National Institute of Standards and Technology during the early 1990s, aiming to provide an alternative to Rivest–Shamir–Adleman signatures and to interoperate with Secure Hash Algorithm families. DSA has been implemented across products from vendors such as Microsoft Corporation, Oracle Corporation, IBM, and supported in protocols endorsed by Internet Engineering Task Force and European Telecommunications Standards Institute.

History

DSA emerged from a collaboration that involved the United States Department of Defense, the National Security Agency, and the National Institute of Standards and Technology as part of the push to update federal cryptographic guidance after controversies surrounding export controls and the Clinton administration policy on cryptography. The algorithm’s publication in FIPS 186 followed deliberations that included critiques from cryptographers at Bell Laboratories, researchers associated with Stanford University, and practitioners at RSA Security. Early cryptanalysis and commentary appeared in journals circulated by Association for Computing Machinery and Institute of Electrical and Electronics Engineers. Debates over parameter choices referenced incidents such as the Crypto Wars and policy discussions involving legislators in the United States Congress.

Design and specifications

The DSA design is specified in standards promulgated by National Institute of Standards and Technology and related documents produced by the Internet Engineering Task Force. It uses modular arithmetic over prime fields with parameters generated using methods discussed in publications by researchers at Massachusetts Institute of Technology and the University of California, Berkeley. The algorithm couples a discrete logarithm problem instantiated in groups described by primes and subprime factors with hash functions from the Secure Hash Standard family, originally including SHA-1 and later SHA-2 variants. Specification drafts and updates referenced contributions from engineers at Sun Microsystems and cryptographers publishing at Eurocrypt and Crypto conferences. Implementers consult guidance from bodies such as National Institute of Standards and Technology Special Publications and interoperability test suites maintained by Internet Engineering Task Force working groups.

Security and cryptanalysis

Security analyses of DSA have been produced by academics at Princeton University, ETH Zurich, and University of Cambridge, and debated in proceedings of venues such as CRYPTO, EUROCRYPT, and ACM CCS. The core security relies on the hardness of the discrete logarithm problem in the multiplicative group modulo a prime, a problem also studied in the context of Discrete logarithm problem research groups at University of Waterloo and Technische Universität Darmstadt. Cryptanalysis has highlighted risks from poor nonce generation and side-channel leaks demonstrated by teams from CWI and NIST collaborators; famous demonstrations involved work published by researchers at University of California, San Diego and University of Pennsylvania. Post-quantum considerations discussed at International Conference on Post-Quantum Cryptography include threats studied by groups at Google, Microsoft Research, and IBM Research.

Implementations and usage

DSA has been implemented in libraries and products produced by organizations such as OpenSSL Project, GnuPG, Bouncy Castle, LibreSSL, and commercial stacks from Microsoft Corporation and Oracle Corporation. It features in protocol suites standardized by Internet Engineering Task Force working groups and is present in secure communication products used by institutions including European Commission bodies and national agencies such as United Kingdom Home Office. Implementations appear in smart card middleware developed by vendors like Gemalto and in enterprise security appliances from Cisco Systems and Juniper Networks. Interoperability testing has been coordinated by consortia including IETF and laboratories accredited under ISO/IEC frameworks.

Performance and optimization

Performance studies comparing DSA to alternatives such as Rivest–Shamir–Adleman and Elliptic-curve cryptography have been published by research teams at Carnegie Mellon University and University of Illinois Urbana–Champaign. Optimization strategies in software include techniques used in projects like OpenSSL Project and vendor libraries from Intel Corporation and ARM Holdings that exploit assembly-level acceleration and hardware primitives in processors from Intel and ARM. Hardware implementations appear in cryptographic modules certified by Federal Information Processing Standards testing laboratories and used in devices from NXP Semiconductors and Texas Instruments. Benchmarks and profiling studies are commonly presented at industry forums such as RSA Conference and academic venues like Usenix Security Symposium.

Standards and legal status

DSA is specified in FIPS 186 and subsequent revisions produced by National Institute of Standards and Technology, and referenced in international frameworks such as ISO/IEC 14888 and documents from European Telecommunications Standards Institute. Legal and policy discussions involving export controls and trust frameworks have engaged agencies like the United States Department of Commerce and legislative bodies in the European Parliament. Adoption and deprecation recommendations have been influenced by security advisories from National Cyber Security Centre and directive-like guidance from European Union Agency for Cybersecurity.

Category:Cryptography