Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

slight reflow of §3.1 #40

Merged
merged 2 commits into from
Jan 9, 2025
Merged

slight reflow of §3.1 #40

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
aad4b81
slight reflow of §3.1
thomas-fossati Jan 8, 2025
d3c0361
Merge branch 'main' into artart-36
henkbirkholz Jan 9, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions draft-birkholz-cose-tsa-tst-header-parameter.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -146,16 +146,16 @@ To minimize dependencies, the hash algorithm used for signing the COSE message S

The `3161-ctt` COSE _unprotected_ header parameter MUST be used for the mode described in {{sec-cose-then-timestamp}}.

The MessageImprint sent in the request to the TSA MUST be:
The `3161-ctt` unprotected header parameter contains a DER-encoded RFC3161 TimeStampToken wrapped in a CBOR byte string (Major type 2).

The message imprint sent in the request to the TSA MUST be either:

* the hash of the signature field of the `COSE_Sign1` message, or
* the hash of the signatures field of the `COSE_Sign` message.

In either case, to minimize dependencies, the hash algorithm SHOULD be the same as the algorithm used for signing the COSE message.
This may not be possible if the timestamp token has been obtained outside the processing context in which the COSE object is assembled.

The `3161-ctt` unprotected header parameter contains a DER-encoded RFC3161 TimeStampToken wrapped in a CBOR byte string (Major type 2).

# Timestamp Processing

RFC 3161 timestamp tokens use CMS as signature envelope format.
Expand Down
Loading