This article was accepted into the corpus but its outbound wikilinks were never NER-processed — typical at the deepest BFS hop or when the run's entity cap was reached. No expansion funnel to show.
| Digital Signature Standard | |
|---|---|
| Name | Digital Signature Standard |
| Acronym | DSS |
| Developer | National Institute of Standards and Technology; National Security Agency |
| Initial release | 1994 |
| Latest revision | 2013 |
| Genre | Federal cryptographic standard |
| Website | NIST FIPS 186-4 |
Digital Signature Standard The Digital Signature Standard defines a suite of cryptographic signature techniques adopted for federal use and interoperable deployments among United States Department of Defense, Department of Homeland Security, Social Security Administration, Internal Revenue Service, and interoperability frameworks like Federal Information Processing Standards. It specifies algorithms, parameter choices, and operational guidance referenced by standards bodies such as Internet Engineering Task Force, International Organization for Standardization, Institute of Electrical and Electronics Engineers, and procurement authorities including General Services Administration. The standard influences implementations across vendors including Microsoft Corporation, Apple Inc., Oracle Corporation, Google LLC, and open-source projects like OpenSSL Project.
DSS prescribes digital signature generation and verification to support identity, integrity, and non-repudiation in contexts governed by Federal Information Processing Standards Publication 140-2, Federal Information Processing Standards Publication 199, Executive Order 13717, and procurement rules enforced by United States Congress oversight. It enumerates approved algorithms and key sizes cited by standards organizations such as Internet Engineering Task Force working groups, referenced in compliance audits by Government Accountability Office and guidance from National Institute of Standards and Technology cybersecurity initiatives. Implementations are evaluated through programs administered by National Voluntary Laboratory Accreditation Program and tested by laboratories affiliated with National Institute of Standards and Technology and Defense Information Systems Agency.
The standard appears in the series of Federal Information Processing Standards, notably FIPS 186-1, FIPS 186-2, FIPS 186-3, and FIPS 186-4, which are developed by National Institute of Standards and Technology in coordination with agencies including National Security Agency. DSS references algorithm specifications from bodies such as Internet Engineering Task Force RFCs, International Organization for Standardization standards like ISO/IEC 14888, and IEEE standards used by Institute of Electrical and Electronics Engineers committees. It is cross-referenced by federal policies from Office of Management and Budget memoranda, procurement mandates from General Services Administration, and cryptographic guidance in Department of Commerce advisories.
Approved signature algorithms include variants implemented from the Digital Signature Algorithm family, elliptic curve methods from standards promulgated by Standards for Efficient Cryptography Group, and RSA-based schemes aligned with work by Rivest–Shamir–Adleman pioneers and publications from International Association for Cryptologic Research. Algorithm parameter sets draw on mathematical contributions from researchers affiliated with Massachusetts Institute of Technology, Stanford University, University of California, Berkeley, California Institute of Technology, and Princeton University. Implementations appear in products by RSA Security LLC, libraries such as OpenSSL Project, Bouncy Castle (software), and platforms maintained by Red Hat, Inc., Canonical Ltd., and Debian Project. Conformance testing is facilitated by test suites produced by National Institute of Standards and Technology laboratories and interoperability events organized by Internet Engineering Task Force and industry consortia like Trusted Computing Group.
Security assessments reference cryptanalysis from researchers at institutions such as The University of Cambridge, École Normale Supérieure, University of Oxford, and Technische Universität Darmstadt, and published findings in venues including Advances in Cryptology — CRYPTO, Eurocrypt, and ACM Conference on Computer and Communications Security. Compliance regimes map DSS parameters to assurance levels used by Federal Information Processing Standards Publication 140-2 cryptographic module validation and audit frameworks from National Institute of Standards and Technology and National Cybersecurity Center of Excellence. Government procurement and accreditation bodies like Department of Defense Information Assurance Certification and Accreditation Process (legacy) and Risk Management Framework enforce DSS-derived controls in systems certified by organizations such as Mitre Corporation and audited by KPMG and Ernst & Young for federal contractors.
DSS was first promulgated to federal agencies following recommendations from committees including National Security Telecommunications Advisory Committee and policy inputs from the Information Technology Laboratory (NIST). Subsequent revisions incorporated cryptographic research by contributors from Bell Labs, AT&T Laboratories, and academic groups at Cornell University and University of Waterloo. Major updates in 1998, 2000s, and 2013 responded to guidance from Committee on National Security Systems and advisories issued after cryptanalytic advances documented at conferences like RSA Conference and publications by International Association for Cryptologic Research.
DSS-based signatures are used in digital certificates issued by commercial certificate authorities such as DigiCert, Let's Encrypt, and Entrust, and in federal identity systems like Personal Identity Verification cards and Common Access Card. The standard underpins secure email in implementations of S/MIME and protocols deployed by Internet Engineering Task Force standards for Transport Layer Security, code-signing in ecosystems maintained by Microsoft Corporation and Apple Inc., and document workflows in systems by Adobe Systems. DSS influences secure transactions in financial platforms run by institutions like Federal Reserve System, SWIFT, and regulated entities overseen by Securities and Exchange Commission.
Critiques have centered on mandated parameter conservatism and transition timelines raised by academic groups at University of California, Berkeley and industry coalitions like Electronic Frontier Foundation, with debates held at venues including Black Hat, DEF CON, and RSA Conference. Concerns about algorithm agility and legacy compatibility were highlighted in reports from National Institute of Standards and Technology and recommendations by Internet Engineering Task Force working groups. Interoperability challenges were discussed by implementers from OpenSSL Project, LibreSSL, and vendors such as IBM Corporation and Cisco Systems during conformance events organized by Trusted Computing Group and Internet Engineering Task Force.
Category:Cryptography standards