ECDSA

ECDSA

The CA SHALL use the appropriate signature algorithm and encoding based upon the signing key used.

CA 應（SHALL）根據所使用之簽章金鑰選用適當的簽章演算法及編碼。

If the signing key is P-256, the signature MUST use ECDSA with SHA-256. When encoded, the AlgorithmIdentifier MUST be byte-for-byte identical with the following hex-encoded bytes: 300a06082a8648ce3d040302.

若簽章金鑰為 P-256，簽章應（MUST）使用採用 SHA-256 的 ECDSA。編碼時，AlgorithmIdentifier 應（MUST）與下列十六進位編碼位元組逐位元組完全相同：300a06082a8648ce3d040302。

If the signing key is P-384, the signature MUST use ECDSA with SHA-384. When encoded, the AlgorithmIdentifier MUST be byte-for-byte identical with the following hex-encoded bytes: 300a06082a8648ce3d040303.

若簽章金鑰為 P-384，簽章應（MUST）使用採用 SHA-384 的 ECDSA。編碼時，AlgorithmIdentifier 應（MUST）與下列十六進位編碼位元組逐位元組完全相同：300a06082a8648ce3d040303。

If the signing key is P-521, the signature MUST use ECDSA with SHA-512. When encoded, the AlgorithmIdentifier MUST be byte-for-byte identical with the following hex-encoded bytes: 300a06082a8648ce3d040304.

若簽章金鑰為 P-521，簽章應（MUST）使用採用 SHA-512 的 ECDSA。編碼時，AlgorithmIdentifier 應（MUST）與下列十六進位編碼位元組逐位元組完全相同：300a06082a8648ce3d040304。