ISO/IEC 14888-3:2018/Amd 1
Amendment 1 to the digital signature standard for discrete logarithm based mechanisms. It adds EdDSA for Ed25519 and Ed448, adds the twisted Edwards curve setting to the general model, narrows the EC-DSA hash list, adds a normative reference, and replaces Annex A.
ISO/IEC 14888-3:2018/Amd 1 is a compliance framework from international with 6 domains and 33 controls. The largest domains are EdDSA, the new clause (17 controls), Annexes changed (5 controls), Existing mechanisms changed (3 controls). Every control below carries what it requires and what an assessor expects to see.
Framework summaries on this platform are interpretations grounded in the published source, for educational and compliance planning purposes. They do not reproduce or replace the official standards. Refer to the authoritative source for the definitive text. Framework names and trademarks belong to their respective organisations.
Framework Domains (6)
Annexes changed
| Code | Title |
|---|---|
| iso-iec-14888-3-2018-amd-1::Annex A | Object identifiers are replaced, including two new curves |
| iso-iec-14888-3-2018-amd-1::Annex B | Point encoding and decoding for EdDSA |
| iso-iec-14888-3-2018-amd-1::Annex F | Worked examples for both parameter sets |
| iso-iec-14888-3-2018-amd-1::Annex G | The comparison table now includes EdDSA |
| iso-iec-14888-3-2018-amd-1::Annex H | Claimed features, and what a claim is worth |
EdDSA, the new clause
| Code | Title |
|---|---|
| iso-iec-14888-3-2018-amd-1::6.12.5.7 | Why the new clause sits after SM2 |
| iso-iec-14888-3-2018-amd-1::6.13.1 | EdDSA enters as its own mechanism |
| iso-iec-14888-3-2018-amd-1::6.13.2 | Two parameter sets, and they do not mix |
| iso-iec-14888-3-2018-amd-1::6.13.3 | Key generation, and two different clamping rules |
| iso-iec-14888-3-2018-amd-1::6.13.4.1 | The randomizer is derived, not drawn |
| iso-iec-14888-3-2018-amd-1::6.13.4.2 | The pre-signature is one scalar multiple |
| iso-iec-14888-3-2018-amd-1::6.13.4.3 | One message part is empty by design |
| iso-iec-14888-3-2018-amd-1::6.13.4.4 | The witness is an encoded point |
| iso-iec-14888-3-2018-amd-1::6.13.4.5 | The assignment binds the key into the hash |
| iso-iec-14888-3-2018-amd-1::6.13.4.6 | The second part fits a fixed octet length |
| iso-iec-14888-3-2018-amd-1::6.13.4.7 | What the appendix carries |
| iso-iec-14888-3-2018-amd-1::6.13.4.8 | The signed message is the message plus the appendix |
| iso-iec-14888-3-2018-amd-1::6.13.5.1 | Verification acquires its inputs first |
| iso-iec-14888-3-2018-amd-1::6.13.5.2 | Decode, range check, then verify |
| iso-iec-14888-3-2018-amd-1::6.13.5.3 | The verifier splits the message the same way |
| iso-iec-14888-3-2018-amd-1::6.13.5.4 | The assignment is recomputed, not trusted |
| iso-iec-14888-3-2018-amd-1::6.13.5.5 | The group equation, with the curve parameters in hand |
Existing mechanisms changed
| Code | Title |
|---|---|
| iso-iec-14888-3-2018-amd-1::6.3.2 | KCDSA: the pair, the hash and the strength |
| iso-iec-14888-3-2018-amd-1::6.5.2 | SDSA: three sizes, one strength rule |
| iso-iec-14888-3-2018-amd-1::6.6.1 | EC-DSA: the hash list is closed |
Terms and symbols
| Code | Title |
|---|---|
| iso-iec-14888-3-2018-amd-1::3.7 | A new term for the twisted Edwards group |
| iso-iec-14888-3-2018-amd-1::Clause 4 | Symbols for the third arithmetic setting |
The amendment frame
| Code | Title |
|---|---|
| iso-iec-14888-3-2018-amd-1::Clause 2 | One normative reference is added |
| iso-iec-14888-3-2018-amd-1::Introduction, Note 4 | The mechanism count becomes fifteen |
| iso-iec-14888-3-2018-amd-1::Introduction, Note 5 | The key substitution warning is reworded |
The general model
| Code | Title |
|---|---|
| iso-iec-14888-3-2018-amd-1::5.2.2 | The randomizer range is not one rule |
| iso-iec-14888-3-2018-amd-1::5.3.5 | EdDSA verification has its own clause |
| iso-iec-14888-3-2018-amd-1::6.1 | Twelve mechanisms, three arithmetic settings |
What is ISO/IEC 14888-3:2018/Amd 1 and who does it apply to?
ISO/IEC 14888-3:2018/Amd 1 is a compliance framework from international with 6 domains and 33 controls. Amendment 1 to the digital signature standard for discrete logarithm based mechanisms. It adds EdDSA for Ed25519 and Ed448, adds the twisted Edwards curve setting to the general model, narrows the EC-DSA hash list, adds a normative reference, and replaces Annex A. It is used by organisations to establish and maintain compliance with industry standards and regulatory requirements.
What does ISO/IEC 14888-3:2018/Amd 1 actually require?
ISO/IEC 14888-3:2018/Amd 1 has 33 controls organised across 6 domains. The largest domains are EdDSA, the new clause (17 controls), Annexes changed (5 controls), Existing mechanisms changed (3 controls). Each control defines specific requirements that organisations must implement to achieve compliance.
If I already comply with another framework, how much of ISO/IEC 14888-3:2018/Amd 1 do I already cover?
ISO/IEC 14888-3:2018/Amd 1 does not currently have cross-framework mappings in our system. Check back as we continuously expand our mapping database.
How do I implement ISO/IEC 14888-3:2018/Amd 1?
Start your ISO/IEC 14888-3:2018/Amd 1 compliance journey by running a self-assessment on our platform to identify your current compliance posture. Our AI advisory can answer specific questions about ISO/IEC 14888-3:2018/Amd 1 requirements, and cross-framework mapping helps you leverage existing controls from other frameworks you may already comply with. Create a free account to access all 33 controls and track your progress.
Start Your Compliance Journey
Create a free account to run self-assessments, get AI advisory, and track your compliance progress across 1,089 frameworks.
Get Started Free →Free forever, no credit card required