Skip to content

Commit

Permalink
initial example
Browse files Browse the repository at this point in the history
  • Loading branch information
OR13 committed Nov 6, 2023
1 parent 912098f commit 13d8d55
Showing 1 changed file with 33 additions and 14 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -19,18 +19,18 @@
# Change the file extension to match the format (.xml for XML, etc...)
#
###
title: "TODO - Your title"
abbrev: "TODO - Abbreviation"
title: "COSE Hash Envelope"
abbrev: "CHE"
category: info

docname: draft-todo-yourname-protocol-latest
docname: draft-steele-cose-hash-envelope-latest
submissiontype: IETF # also: "independent", "editorial", "IAB", or "IRTF"
number:
date:
consensus: true
v: 3
area: AREA
workgroup: WG Working Group
area: Security
workgroup: COSE
keyword:
- next generation
- unicorn
Expand All @@ -40,14 +40,14 @@ venue:
type: Working Group
mail: [email protected]
arch: https://example.com/WG
github: USER/REPO
github: OR13/draft-steele-cose-hash-envelope
latest: https://example.com/LATEST

author:
-
fullname: Your Name Here
organization: Your Organization Here
email: [email protected]
fullname: Orie Steele
organization: Transmute
email: [email protected]

normative:

Expand All @@ -56,21 +56,38 @@ informative:

--- abstract

TODO Abstract

This draft defines a mechanism for signing hashes of payloads along with hints about their content format and availability.

--- middle

# Introduction

TODO Introduction
COSE defined detached payloads in [rfc9052#section-2].
However, a detached payload cose sign 1 still requires the payload content to be availble in order to verify.

For large payloads this is a problem. This draft addresses this problem by describing a simply way to sign hashes of large payloads while maintaining information about their content type.

## Usage

~~~~ cbor-diag
{
/ Algorithm /
1: -35,
/ Key identifier /
4: h'75726e3a...32636573',
/ typ of the envelope /
TBD 0: application/hashed+cose
/ Hash algorithm of the payload /
TBD 1: sha-256
/ cty of the preimage of the payload /
TBD 2: application/jwk+json
}
~~~~

# Conventions and Definitions

{::boilerplate bcp14-tagged}


# Security Considerations

TODO Security
Expand All @@ -86,4 +103,6 @@ This document has no IANA actions.
# Acknowledgments
{:numbered="false"}

TODO acknowledge.
The following individuals provided input into the final form of the document: Carsten Bormann, Henk Birkholz, Antoine Delignat-Lavaud, Cedric Fournet.


0 comments on commit 13d8d55

Please sign in to comment.