Skip to content
QPKI

Standards Reference

Standards Reference

Section titled “Standards Reference”

This document provides reference information for OIDs, X.509 extensions, and file formats used by QPKI.

1. OID Registry

Section titled “1. OID Registry”

1.1 Classical Algorithm OIDs

Section titled “1.1 Classical Algorithm OIDs”
AlgorithmOID
ECDSA P-2561.2.840.10045.3.1.7
ECDSA P-3841.3.132.0.34
ECDSA P-5211.3.132.0.35
Ed255191.3.101.112
RSA1.2.840.113549.1.1.1

1.2 Post-Quantum Algorithm OIDs

Section titled “1.2 Post-Quantum Algorithm OIDs”
AlgorithmOID
ML-DSA-442.16.840.1.101.3.4.3.17
ML-DSA-652.16.840.1.101.3.4.3.18
ML-DSA-872.16.840.1.101.3.4.3.19
SLH-DSA-SHA2-128s2.16.840.1.101.3.4.3.20
SLH-DSA-SHA2-128f2.16.840.1.101.3.4.3.21
SLH-DSA-SHA2-192s2.16.840.1.101.3.4.3.22
SLH-DSA-SHA2-192f2.16.840.1.101.3.4.3.23
SLH-DSA-SHA2-256s2.16.840.1.101.3.4.3.24
SLH-DSA-SHA2-256f2.16.840.1.101.3.4.3.25
ML-KEM-5122.16.840.1.101.3.4.4.1
ML-KEM-7682.16.840.1.101.3.4.4.2
ML-KEM-10242.16.840.1.101.3.4.4.3

1.3 Catalyst Extension OIDs

Section titled “1.3 Catalyst Extension OIDs”
OIDName
2.5.29.72AltSubjectPublicKeyInfo
2.5.29.73AltSignatureAlgorithm
2.5.29.74AltSignatureValue

1.4 Composite Algorithm OIDs (IANA-allocated)

Section titled “1.4 Composite Algorithm OIDs (IANA-allocated)”
AlgorithmOID
MLDSA65-ECDSA-P256-SHA5121.3.6.1.5.5.7.6.45
MLDSA65-ECDSA-P384-SHA5121.3.6.1.5.5.7.6.46
MLDSA87-ECDSA-P521-SHA5121.3.6.1.5.5.7.6.54

2. X.509 Extension OIDs

Section titled “2. X.509 Extension OIDs”
OIDNameUsage
2.5.29.14Subject Key IdentifierCertificate extension
2.5.29.35Authority Key IdentifierCertificate extension
2.5.29.15Key UsageCertificate extension
2.5.29.37Extended Key UsageCertificate extension
2.5.29.17Subject Alternative NameCertificate extension
2.5.29.19Basic ConstraintsCertificate extension
2.5.29.31CRL Distribution PointsCertificate extension

3. File Formats

Section titled “3. File Formats”

3.1 Private Keys

Section titled “3.1 Private Keys”
  • Format: PEM (PKCS#8)
  • Encryption: Optional AES-256-CBC with PBKDF2
  • Header: -----BEGIN PRIVATE KEY----- or -----BEGIN ENCRYPTED PRIVATE KEY-----

3.2 Certificates

Section titled “3.2 Certificates”
  • Format: PEM (X.509)
  • Header: -----BEGIN CERTIFICATE-----

3.3 Certificate Revocation Lists

Section titled “3.3 Certificate Revocation Lists”
  • Format: PEM and DER
  • Header: -----BEGIN X509 CRL-----

See Also

Section titled “See Also”