a Portal devoted to SIP and Security technologies
Search
Home
Site Map
Contact
SIP/IMS Standardization
IETF Standardization Process
RFCs related to SIP (4 p.)
SIP-SIPPING-SIMPLE... I-Ds (22 p.)
Audio-Video Transport RFCs (2 p.)
3GPP Specifications (12 p.)
OMA Specifications related to SIP
TISPAN NGN Specifications (3 p.)
SIP Topics
IMS Topics
SIP/IMS Call Flows
RFC3261's Example
Basic -- RFC3665
SIP PSTN -- RFC3666 (3 p.)
SIP Service Examples (19 p.)
IMS Signaling Flows (35 p.)
SIP/IMS Architecture
SIP Protocol Structure
Dialogs & Routing
UMTS Network Evolution
Security
PKIX-TLS-SMIME... Standards (20 p.)
Cryptography Basics
ASN.1 for PKI Certificate & CRL Profile
ASN.1 for CMS
RFC3280's Certificate Examples (4)
RFC4134's CMS-S/MIME Examples (14)
RFC4474's SIP Authentication Service
SSL/TLS Time-Diagrams
IPSec Guides
ABNF Grammars
ABNF Notation & Rules
URI Generic Syntax
ABNF for SIP
SIP Messages & URIs
SIP Header Fields
MIME Media Types
ABNF for SDP
ABNF for MSRP
ABNF for MRCPv2
ABNF for RTSP 2.0
Internet Message Format
DiffServ CoS Simulation
IPVCoSS Simulator
IP-VPN Case Study
(daily updated)
RFC 4134 -- Examples of CMS objects and S/MIME messages
Top
- Overview
- Basic Signed Content, DSS
- Multiple Signers
- Private Keys
- Basic Signed Content, RSA
- Signing Using SKI
- Enveloped-data
- Basic Signed Content, Detached Content
- SignedData with Attributes
- Encrypted-data
- Fancier Signed Content
- SignedData with Certificates Only
- All RSA Signed Message
- S/MIME Messages
Basic Signed Content, Detached Content
Navigation Tips:
the ASN.1 Type in front of the
icon has a link to itself, for a display at the top of the screen; and this very icon has a link to the top of the CMS message.
0
30
887
4
06
9
15
A0
872
19
30
868
23
02
1
26
31
9
28
30
7
30
06
5
37
30
11
39
06
9
50
A0
736
54
30
732
58
30
667
62
A0
3
64
02
1
67
02
2
71
30
9
73
06
7
82
30
18
84
31
16
86
30
14
88
06
3
93
13
7
102
30
30
104
17
13
119
17
13
134
30
19
136
31
17
138
30
15
140
06
3
145
13
8
155
30
438
159
30
299
163
06
7
172
30
286
176
02
129
308
02
21
331
02
128
462
03
132
466
02
128
597
A3
129
600
30
127
602
30
12
604
06
3
609
01
1
612
04
2
614
30
0
616
30
14
618
06
3
623
01
1
626
04
4
628
03
2
632
30
31
634
06
3
639
04
24
641
30
22
643
80
20
665
30
29
667
06
3
672
04
22
674
04
20
696
30
31
698
06
3
703
04
24
705
30
22
707
81
20
729
30
9
731
06
7
740
03
48
743
30
45
745
02
20
767
02
21
790
31
99
792
30
97
794
02
1
797
30
24
799
30
18
801
31
16
803
30
14
805
06
3
810
13
7
819
02
2
823
30
7
825
06
5
832
30
9
834
06
7
843
04
46
845
30
44
847
02
20
869
02
20
SEQUENCE
{
ContentInfo
OBJECT IDENTIFIER
signedData
( 1 2 840 113549 1 7 2 )
contentType
ContentType
[0] {
content
SEQUENCE
{
SignedData
INTEGER
1
version
CMSVersion
SET {
digestAlgorithms
DigestAlgorithmIdentifiers
SEQUENCE {
OBJECT IDENTIFIER
sha1
( 1 3 14 3 2 26 )
}
}
SEQUENCE
{
encapContentInfo
EncapsulatedContentInfo
OBJECT IDENTIFIER
data
( 1 2 840 113549 1 7 1 )
eContentType
ContentType
}
[0]
{
certificates
CertificateSet
SEQUENCE {
certificate
Certificate
(AliceDSSSignByCarlNoInherit)
SEQUENCE
{
tbsCertificate
TBSCertificate
[0] {
version
Version
INTEGER
2
}
INTEGER
200
serialNumber
CertificateSerialNumber
SEQUENCE {
signature
AlgorithmIdentifier
OBJECT IDENTIFIER
dsaWithSha1
( 1 2 840 10040 4 3 )
}
SEQUENCE
{
issuer
Name
SET {
RelativeDistinguishedName
SEQUENCE {
OBJECT IDENTIFIER
commonName ( 2 5 4 3 )
PrintableString
'CarlDSS'
}
}
}
SEQUENCE
{
validity
Validity
UTCTime
'990817011049Z'
notBefore
Time
UTCTime
'391231235959Z'
notAfter
Time
}
SEQUENCE
{
subject
Name
SET {
RelativeDistinguishedName
SEQUENCE {
OBJECT IDENTIFIER
commonName ( 2 5 4 3 )
PrintableString
'AliceDSS'
}
}
}
SEQUENCE
{
subjectPublicKeyInfo
SubjectPublicKeyInfo
SEQUENCE {
algorithm
AlgorithmIdentifier
OBJECT IDENTIFIER
dsa
( 1 2 840 10040 4 1 )
SEQUENCE {
parameters
Dss-Parms
INTEGER
p
00 81 8D CD ED 83 EA 0A 9E 39 3E C2
48 28 A3 E4 47 93 DD 0E D7 A8 0E EC
53 C5 AB 84 08 4F FF 94 E1 73 48 7E
0C D6 F3 44 48 D1 FE 9F AF A4 A1 89
2F E1 D9 30 C8 36 DE 3F 9B BF B7 4C
DC 5F 69 8A E4 75 D0 37 0C 91 08 95
9B DE A7 5E F9 FC F4 9F 2F DD 43 A8
8B 54 F1 3F B0 07 08 47 4D 5D 88 C3
C3 B5 B3 E3 55 08 75 D5 39 76 10 C4
78 BD FF 9D B0 84 97 37 F2 E4 51 1B
B5 E4 09 96 5C F3 7E 5B DB
INTEGER
q
00 E2 47 A6 1A 45 66 B8 13 C6 DA 8F
B8 37 21 2B 62 8B F7 93 CD
INTEGER
g
26 38 D0 14 89 32 AA 39 FB 3E 6D D9
4B 59 6A 4C 76 23 39 04 02 35 5C F2
CB 1A 30 C3 1E 50 5D DD 9B 59 E2 CD
AA 05 3D 58 C0 7B A2 36 B8 6E 07 AF
7D 8A 42 25 A7 F4 75 CF 4A 08 5E 4B
3E 90 F8 6D EA 9C C9 21 8A 3B 76 14
E9 CE 2E 5D A3 07 CD 23 85 B8 2F 30
01 7C 6D 49 89 11 89 36 44 BD F8 C8
95 4A 53 56 B5 E2 F9 73 EC 1A 61 36
1F 11 7F C2 BD ED D1 50 FF 98 74 C2
D1 81 4A 60 39 BA 36 39
}
}
BIT STRING 0 unused bits, encapsulates {
subjectPublicKey
INTEGER
DSAPublicKey
5C E3 B9 5A 75 14 96 0B A9 7A DD E3
3F A9 EC AC 5E DC BD B7 13 11 34 A6
16 89 28 11 23 D9 34 86 67 75 75 13
12 3D 43 5B 6F E5 51 BF FA 89 F2 A2
1B 3E 24 7D 3D 07 8D 5B 63 C8 BB 45
A5 A0 4A E3 85 D6 CE 06 80 3F E8 23
7E 1A F2 24 AB 53 1A B8 27 0D 1E EF
08 BF 66 14 80 5C 62 AC 65 FA 15 8B
F1 BB 34 D4 D2 96 37 F6 61 47 B2 C4
32 84 F0 7E 41 40 FD 46 A7 63 4E 33
F2 A5 E2 F4 F2 83 E5 B8
}
}
[3]
{
extensions
Extensions
SEQUENCE {
SEQUENCE
{
extension
OBJECT IDENTIFIER
basicConstraints
( 2 5 29 19 )
BOOLEAN TRUE
OCTET STRING, encapsulates {
extnValue
SEQUENCE {
BasicConstraints
}
}
}
SEQUENCE
{
extension
OBJECT IDENTIFIER
keyUsage
( 2 5 29 15 )
BOOLEAN TRUE
OCTET STRING, encapsulates {
extnValue
BIT STRING 6 unused bits
KeyUsage
'11'B
digitalSignature & nonRepudiation
}
}
SEQUENCE
{
extension
OBJECT IDENTIFIER
authorityKeyIdentifier
( 2 5 29 35 )
OCTET STRING, encapsulates {
extnValue
SEQUENCE {
AuthorityKeyIdentifier
[0]
keyIdentifier
KeyIdentifier
70 44 3E 82 2E 6F 87 DE 4A D3 75 E3
3D 20 BC 43 2B 93 F1 1F
}
}
}
SEQUENCE
{
extension
OBJECT IDENTIFIER
subjectKeyIdentifier
( 2 5 29 14 )
OCTET STRING, encapsulates {
extnValue
OCTET STRING
SubjectKeyIdentifier
KeyIdentifier
BE 6C A1 B3 E3 C1 F7 ED 43 70 A4 CE
13 01 E2 FD E3 97 FE CD
}
}
SEQUENCE
{
extension
OBJECT IDENTIFIER
subjectAltName
( 2 5 29 17 )
OCTET STRING, encapsulates {
extnValue
SEQUENCE {
GeneralNames
[1]
'AliceDSS@example.com'
rfc822Name
}
}
}
}
}
}
SEQUENCE
{
signatureAlgorithm
AlgorithmIdentifier
OBJECT IDENTIFIER
dsaWithSha1
( 1 2 840 10040 4 3 )
}
BIT STRING
0 unused bits, encapsulates {
signatureValue
SEQUENCE {
Dss-Sig-Value
INTEGER
r
55 0C A4 19 1F 42 2B 89 71 22 33 8D
83 6A B5 3D 67 6B BF 45
INTEGER
s
00 9F 61 53 52 54 0B 5C B2 DD DA E7
76 1D E2 10 52 5B 43 5E BD
}
}
}
}
SET
{
signerInfos
SignerInfos
SEQUENCE {
SignerInfo
INTEGER
1
version
CMSVersion
SEQUENCE {
sid
IssuerAndSerialNumber
SEQUENCE {
issuer
Name
SET {
RelativeDistinguishedName
SEQUENCE {
OBJECT IDENTIFIER
commonName ( 2 5 4 3 )
PrintableString
'CarlDSS'
}
}
}
INTEGER
200
serialNumber
CertificateSerialNumber
(AliceDSS)
}
SEQUENCE {
digestAlgorithm
DigestAlgorithmIdentifier
OBJECT IDENTIFIER
sha1
( 1 3 14 3 2 26 )
}
SEQUENCE {
signatureAlgorithm
SignatureAlgorithmIdentifier
OBJECT IDENTIFIER
dsaWithSha1
( 1 2 840 10040 4 3 )
}
OCTET STRING, encapsulates {
signature
SignatureValue
SEQUENCE {
Dss-Sig-Value
INTEGER
r
06 FB C7 2A 24 D5 34 89 F7 8B B5 FD
73 24 A5 86 C8 0F 5A 6C
INTEGER
s
66 69 19 BC 68 58 D1 8D B1 9D 52 3F
DA 14 88 0D FD C9 A1 B8
}
}
}
}
}
}
}
Last update: January 18, 2008
© 2005-2008 Joël Repiquet, All Rights Reserved.