a Portal devoted to SIP and Security technologies
Search
Home
Site Map
Contact
SIP/IMS Standardization
IETF Standardization Process
RFCs related to SIP (4 p.)
SIP-SIPPING-SIMPLE... I-Ds (22 p.)
Audio-Video Transport RFCs (2 p.)
3GPP Specifications (12 p.)
OMA Specifications related to SIP
TISPAN NGN Specifications (3 p.)
SIP Topics
IMS Topics
SIP/IMS Call Flows
RFC3261's Example
Basic -- RFC3665
SIP PSTN -- RFC3666 (3 p.)
SIP Service Examples (19 p.)
IMS Signaling Flows (35 p.)
SIP/IMS Architecture
SIP Protocol Structure
Dialogs & Routing
UMTS Network Evolution
Security
PKIX-TLS-SMIME... Standards (20 p.)
Cryptography Basics
ASN.1 for PKI Certificate & CRL Profile
ASN.1 for CMS
RFC3280's Certificate Examples (4)
RFC4134's CMS-S/MIME Examples (14)
RFC4474's SIP Authentication Service
SSL/TLS Time-Diagrams
IPSec Guides
ABNF Grammars
ABNF Notation & Rules
URI Generic Syntax
ABNF for SIP
SIP Messages & URIs
SIP Header Fields
MIME Media Types
ABNF for SDP
ABNF for MSRP
ABNF for MRCPv2
ABNF for RTSP 2.0
Internet Message Format
DiffServ CoS Simulation
IPVCoSS Simulator
IP-VPN Case Study
(daily updated)
RFC 4134 -- Examples of CMS objects and S/MIME messages
Top
- Overview
- Basic Signed Content, DSS
- Multiple Signers
- Private Keys
- Basic Signed Content, RSA
- Signing Using SKI
- Enveloped-data
- Basic Signed Content, Detached Content
- SignedData with Attributes
- Encrypted-data
- Fancier Signed Content
- SignedData with Certificates Only
- All RSA Signed Message
- S/MIME Messages
Basic Signed Content, DSS
Navigation Tips:
the ASN.1 Type in front of the
icon has a link to itself, for a display at the top of the screen; and this very icon has a link to the top of the CMS message.
0
30
919
4
06
9
15
A0
904
19
30
900
23
02
1
26
31
9
28
30
7
30
06
5
37
30
43
39
06
9
50
A0
30
52
04
28
82
A0
736
86
30
732
90
30
667
94
A0
3
96
02
1
99
02
2
103
30
9
105
06
7
114
30
18
116
31
16
118
30
14
120
06
3
125
13
7
134
30
30
136
17
13
151
17
13
166
30
19
168
31
17
170
30
15
172
06
3
177
13
8
187
30
438
191
30
299
195
06
7
204
30
286
208
02
129
340
02
21
363
02
128
494
03
132
498
02
128
629
A3
129
632
30
127
634
30
12
636
06
3
641
01
1
644
04
2
646
30
0
648
30
14
650
06
3
655
01
1
658
04
4
660
03
2
664
30
31
666
06
3
671
04
24
673
30
22
675
80
20
697
30
29
699
06
3
704
04
22
706
04
20
728
30
31
730
06
3
735
04
24
737
30
22
739
81
20
761
30
9
763
06
7
772
03
48
775
30
45
777
02
20
799
02
21
822
31
99
824
30
97
826
02
1
829
30
24
831
30
18
833
31
16
835
30
14
837
06
3
842
13
7
851
02
2
855
30
7
857
06
5
864
30
9
866
06
7
875
04
46
877
30
44
879
02
20
901
02
20
SEQUENCE
{
ContentInfo
OBJECT IDENTIFIER
signedData
( 1 2 840 113549 1 7 2 )
contentType
ContentType
[0] {
content
SEQUENCE
{
SignedData
INTEGER
1
version
CMSVersion
SET {
digestAlgorithms
DigestAlgorithmIdentifiers
SEQUENCE {
OBJECT IDENTIFIER
sha1
( 1 3 14 3 2 26 )
}
}
SEQUENCE
{
encapContentInfo
EncapsulatedContentInfo
OBJECT IDENTIFIER
data
( 1 2 840 113549 1 7 1 )
eContentType
ContentType
[0] {
eContent
OCTET STRING
'This is some sample content.'
}
}
[0]
{
certificates
CertificateSet
SEQUENCE {
certificate
Certificate
(AliceDSSSignByCarlNoInherit)
SEQUENCE
{
tbsCertificate
TBSCertificate
[0] {
version
Version
INTEGER
2
}
INTEGER
200
serialNumber
CertificateSerialNumber
SEQUENCE {
signature
AlgorithmIdentifier
OBJECT IDENTIFIER
dsaWithSha1
( 1 2 840 10040 4 3 )
}
SEQUENCE
{
issuer
Name
SET {
RelativeDistinguishedName
SEQUENCE {
OBJECT IDENTIFIER
commonName ( 2 5 4 3 )
PrintableString
'CarlDSS'
}
}
}
SEQUENCE
{
validity
Validity
UTCTime
'990817011049Z'
notBefore
Time
UTCTime
'391231235959Z'
notAfter
Time
}
SEQUENCE
{
subject
Name
SET {
RelativeDistinguishedName
SEQUENCE {
OBJECT IDENTIFIER
commonName ( 2 5 4 3 )
PrintableString
'AliceDSS'
}
}
}
SEQUENCE
{
subjectPublicKeyInfo
SubjectPublicKeyInfo
SEQUENCE {
algorithm
AlgorithmIdentifier
OBJECT IDENTIFIER
dsa
( 1 2 840 10040 4 1 )
SEQUENCE {
parameters
Dss-Parms
INTEGER
p
00 81 8D CD ED 83 EA 0A 9E 39 3E C2
48 28 A3 E4 47 93 DD 0E D7 A8 0E EC
53 C5 AB 84 08 4F FF 94 E1 73 48 7E
0C D6 F3 44 48 D1 FE 9F AF A4 A1 89
2F E1 D9 30 C8 36 DE 3F 9B BF B7 4C
DC 5F 69 8A E4 75 D0 37 0C 91 08 95
9B DE A7 5E F9 FC F4 9F 2F DD 43 A8
8B 54 F1 3F B0 07 08 47 4D 5D 88 C3
C3 B5 B3 E3 55 08 75 D5 39 76 10 C4
78 BD FF 9D B0 84 97 37 F2 E4 51 1B
B5 E4 09 96 5C F3 7E 5B DB
INTEGER
q
00 E2 47 A6 1A 45 66 B8 13 C6 DA 8F
B8 37 21 2B 62 8B F7 93 CD
INTEGER
g
26 38 D0 14 89 32 AA 39 FB 3E 6D D9
4B 59 6A 4C 76 23 39 04 02 35 5C F2
CB 1A 30 C3 1E 50 5D DD 9B 59 E2 CD
AA 05 3D 58 C0 7B A2 36 B8 6E 07 AF
7D 8A 42 25 A7 F4 75 CF 4A 08 5E 4B
3E 90 F8 6D EA 9C C9 21 8A 3B 76 14
E9 CE 2E 5D A3 07 CD 23 85 B8 2F 30
01 7C 6D 49 89 11 89 36 44 BD F8 C8
95 4A 53 56 B5 E2 F9 73 EC 1A 61 36
1F 11 7F C2 BD ED D1 50 FF 98 74 C2
D1 81 4A 60 39 BA 36 39
}
}
BIT STRING 0 unused bits, encapsulates {
subjectPublicKey
INTEGER
DSAPublicKey
5C E3 B9 5A 75 14 96 0B A9 7A DD E3
3F A9 EC AC 5E DC BD B7 13 11 34 A6
16 89 28 11 23 D9 34 86 67 75 75 13
12 3D 43 5B 6F E5 51 BF FA 89 F2 A2
1B 3E 24 7D 3D 07 8D 5B 63 C8 BB 45
A5 A0 4A E3 85 D6 CE 06 80 3F E8 23
7E 1A F2 24 AB 53 1A B8 27 0D 1E EF
08 BF 66 14 80 5C 62 AC 65 FA 15 8B
F1 BB 34 D4 D2 96 37 F6 61 47 B2 C4
32 84 F0 7E 41 40 FD 46 A7 63 4E 33
F2 A5 E2 F4 F2 83 E5 B8
}
}
[3]
{
extensions
Extensions
SEQUENCE {
SEQUENCE
{
extension
OBJECT IDENTIFIER
basicConstraints
( 2 5 29 19 )
BOOLEAN TRUE
OCTET STRING, encapsulates {
extnValue
SEQUENCE {
BasicConstraints
}
}
}
SEQUENCE
{
extension
OBJECT IDENTIFIER
keyUsage
( 2 5 29 15 )
BOOLEAN TRUE
OCTET STRING, encapsulates {
extnValue
BIT STRING 6 unused bits
KeyUsage
'11'B
digitalSignature & nonRepudiation
}
}
SEQUENCE
{
extension
OBJECT IDENTIFIER
authorityKeyIdentifier
( 2 5 29 35 )
OCTET STRING, encapsulates {
extnValue
SEQUENCE {
AuthorityKeyIdentifier
[0]
keyIdentifier
KeyIdentifier
70 44 3E 82 2E 6F 87 DE 4A D3 75 E3
3D 20 BC 43 2B 93 F1 1F
}
}
}
SEQUENCE
{
extension
OBJECT IDENTIFIER
subjectKeyIdentifier
( 2 5 29 14 )
OCTET STRING, encapsulates {
extnValue
OCTET STRING
SubjectKeyIdentifier
KeyIdentifier
BE 6C A1 B3 E3 C1 F7 ED 43 70 A4 CE
13 01 E2 FD E3 97 FE CD
}
}
SEQUENCE
{
extension
OBJECT IDENTIFIER
subjectAltName
( 2 5 29 17 )
OCTET STRING, encapsulates {
extnValue
SEQUENCE {
GeneralNames
[1]
'AliceDSS@example.com'
rfc822Name
}
}
}
}
}
}
SEQUENCE
{
signatureAlgorithm
AlgorithmIdentifier
OBJECT IDENTIFIER
dsaWithSha1
( 1 2 840 10040 4 3 )
}
BIT STRING
0 unused bits, encapsulates {
signatureValue
SEQUENCE {
Dss-Sig-Value
INTEGER
r
55 0C A4 19 1F 42 2B 89 71 22 33 8D
83 6A B5 3D 67 6B BF 45
INTEGER
s
00 9F 61 53 52 54 0B 5C B2 DD DA E7
76 1D E2 10 52 5B 43 5E BD
}
}
}
}
SET
{
signerInfos
SignerInfos
SEQUENCE {
SignerInfo
INTEGER
1
version
CMSVersion
SEQUENCE {
sid
IssuerAndSerialNumber
SEQUENCE {
issuer
Name
SET {
RelativeDistinguishedName
SEQUENCE {
OBJECT IDENTIFIER
commonName ( 2 5 4 3 )
PrintableString
'CarlDSS'
}
}
}
INTEGER
200
serialNumber
CertificateSerialNumber
(AliceDSS)
}
SEQUENCE {
digestAlgorithm
DigestAlgorithmIdentifier
OBJECT IDENTIFIER
sha1
( 1 3 14 3 2 26 )
}
SEQUENCE {
signatureAlgorithm
SignatureAlgorithmIdentifier
OBJECT IDENTIFIER
dsaWithSha1
( 1 2 840 10040 4 3 )
}
OCTET STRING, encapsulates {
signature
SignatureValue
SEQUENCE {
Dss-Sig-Value
INTEGER
r
09 91 FE EB D2 69 F5 18 B7 D7 CD 55
F4 81 EA 2A 42 6A AD 03
INTEGER
s
3A 07 CC C3 21 BE E1 1A 4B 7F 3E B5
0D DB BA 1C EA BC CD 89
}
}
}
}
}
}
}
Last update: January 18, 2008
© 2005-2008 Joël Repiquet, All Rights Reserved.