X509证书中的Subject Public Key Info

SubjectPublicKeyInfo在TBSCertificate的第七项:

 

对于ECC

id-ecPublicKey OBJECT IDENTIFIER ::= {
iso(1) member-body(2) us(840) ansi-X9-62(10045) keyType(2) 1 }

id-ecPublicKey 是必须的

ECParameters ::= CHOICE {
namedCurve OBJECT IDENTIFIER
-- implicitCurve NULL
-- specifiedCurve SpecifiedECDomain
}

ECParameters中的 namedCurve根据曲线的不同而不同

The ECC public key MUST be encoded as an ECC Point. The uncompressed format SHOULD be used.  ( 04 xxxxxx)
ECPoint ::= OCTET STRING
The namedCurve field in ECParameters of the Subject Public Key Info depends on the ECC curve.
 

示例:

SM2 P256 为例：

the namedCurve field MUST contain the OID defined in GM/T 0006-2012
Cryptographic Application Identifier Criterion Specification [20]:

SM2EllipticCurveCryptography OBJECT IDENTIFIER ::= {
iso(1) member-body(2) cn(156) ccstc(10197) cryptographic-algorithm (1) 301 }
 

ECC 为例：

ECC P384 密钥类型

OID 1.3.132.0.34 ansip384r1

 

 

 ECC P256 密钥类型

OID 1.2.840.10045.3.1.7 prime256v1

 

 

 

RSA 为例：

The AlgorithmIdentifier parameters field MUST be the ASN.1 type NULL.
 

rsaEncryption OBJECT IDENTIFIER ::= {
iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-1(1) 1 }
The RSA public key MUST be encoded using the ASN.1 type RSAPublicKey as defined in RFC 3279
RSAPublicKey ::= SEQUENCE {

modulus INTEGER, publicExponent INTEGER }

-- n -- e

}

 NULL 是 0500