The promotion of PKI (Public Key Infrastructure) interoperability is one of the most important issues today for creating a 'true PKI'. This issue is especially important for multi-domain PKI, such as GPKI (Government Public Key Infrastructure in Japan), where PKI must run on various applications across broad and diverse authorization domains. We take aim at the following.

1. Proposing criteria and specifications for multi-domain PKI
2. Development of PKI interoperability test suite
3. Designing and maintaining the test case
4. Showing implementations and its guideline for PKI applications

The new project page for TSP (Time Stamp Protocol) Interoperability Test Suite will be appear soon. (December 2003)

We have issued an announcement about the RFC 3280 UTF8String problem, which describes about the conclusion of the 58th IETF discussion in Japanese. (December 2003)

Our Internet-draft Memorandum for Multi-domain PKI Interoperability has been updated. (October 2003)

Below we feature the Challenge PKI projects.

Internet-drafts

Memorandum for Multi-domain PKI Interoperability The technology needed for an interconnection between muliple PKI domains is insufficient with only the specification of conventional protocol and data format and need to define the thing such as PKI domain and PKI architecture. This document will clarifies these definitions for multi-domain PKI interoperability. draft-shimaoka-multidomain-pki-01.txt (ChangeLog) NEW! draft-shimaoka-multidomain-pki-00.txt (57th IETF slide) PKI Interoperability Testing Criteria (in preparation)

Challenge PKI 2002

This project created and disclosed a development environment for GPKI (Government Public Key Infrastructure in Japan) applications. All documents and programs are downloadable. We have already had a presentation to feedback the results to RFC at PKIX-WG sessions and discussed about the multi domain PKI with international point of view and propose it to IETF. Reports GPKI Application Implementation Guide Report (Rev.1): Zipped HTML, PDF(in preparation) GPKI Testcase specification (Rev.1): Zipped HTML, PDF(in preparation) Test suite Test suite (v1.0 for RedHat Linux6.2): pki14y-1.0.0.tar.gz * Vmware 4.0 imagefile including RedHat-OS and test suite (v1.0): (in preparation) * *NOTE: The test suite contains AiCrypto library developed by Iwata Lab. in Nagoya Institute of Technology. Sample implementations for Certificate Path Construction and Verification Sun JDK1.4-based Implementations: Source, Binary, Library ** **NOTE: No part of this library may be reverse-engineered or commercial used without the prior written consent of Fuji Xerox Co.,Ltd. Microsoft CryptoAPI-based Implementations: Source, Binary These reports and programs are products of the Challenge PKI 2002 Project. The project was sponsored by IPA (Information-Technology Promotion Agency in Japan) and was supervised by JNSA (NPO Japan Network Security Association).

Challenge PKI 2001

This project validated interoperability between multivendor CAs. Technical Report: Implementation Problems on PKI

International workshops

59th IETF in Seoul, Korea on February 29 - March 5, 2004

58th IETF in Minneapolis, USA on November 9-14, 2003 *
*We have issued an announcement about the RFC 3280 UTF8String problem, which describes about the conclusion of the 58th IETF discussion in Japanese. NEW!

57th IETF in Vienna, Austria on July 13-18, 2003 (slide)

56th IETF in San Francisco on March 16-21, 2003 (slide)

55th IETF in Atlanta on November 17-22, 2002 (slide)

54th IETF in Yokohama,Japan on July 14-19, 2002 (slide1, slide2)

Domestic seminars

Internet Week 2003 in Yokohama, Japan on December 2-5, 2003

CISCO Wave 2003 in Tokyo, Japan on June 5-6, 2003

RSA Conference / NSF2003 spring in Tokyo, Japan on June 3-4, 2003

Internet Week 2002 in Yokohama, Japan on December 16-20, 2002

Your comments, advices, quiestions, bug reports for test suite or test case are always welcome!
Please e-mail to mpki@jnsa.org