a Portal devoted to SIP and Security technologies

SIP/IMS Standardization


	IETF Standardization Process


	RFCs related to SIP (4 p.)


	SIP-SIPPING-SIMPLE... I-Ds (22 p.)


	Audio-Video Transport RFCs (2 p.)


	3GPP Specifications (12 p.)


	OMA Specifications related to SIP


	TISPAN NGN Specifications (3 p.)


	SIP Topics


	IMS Topics

SIP/IMS Call Flows


	RFC3261's Example


	Basic -- RFC3665


	SIP PSTN -- RFC3666 (3 p.)


	SIP Service Examples (19 p.)


	IMS Signaling Flows (35 p.)

SIP/IMS Architecture


	SIP Protocol Structure


	Dialogs & Routing


	UMTS Network Evolution

Security


	PKIX-TLS-SMIME... Standards (20 p.)


	Cryptography Basics


	ASN.1 for PKI Certificate & CRL Profile


	ASN.1 for CMS


	RFC3280's Certificate Examples (4)


	RFC4134's CMS-S/MIME Examples (14)


	RFC4474's SIP Authentication Service


	SSL/TLS Time-Diagrams


	IPSec Guides

ABNF Grammars


	ABNF Notation & Rules


	URI Generic Syntax


	ABNF for SIP

	SIP Messages & URIs

	SIP Header Fields

	MIME Media Types


	ABNF for SDP


	ABNF for MSRP


	ABNF for MRCPv2


	ABNF for RTSP 2.0


	Internet Message Format

DiffServ CoS Simulation


	IPVCoSS Simulator


	IP-VPN Case Study

(daily updated)

RFC 4134 -- Examples of CMS objects and S/MIME messages

Top	- Overview	- Basic Signed Content, DSS	- Multiple Signers
	- Private Keys	- Basic Signed Content, RSA	- Signing Using SKI
	- Enveloped-data	- Basic Signed Content, Detached Content	- SignedData with Attributes
	- Encrypted-data	- Fancier Signed Content	- SignedData with Certificates Only
		- All RSA Signed Message	- S/MIME Messages

Signing Using Subject Key Identifier

cmxex7


Navigation Tips:	the ASN.1 Type in front of the icon has a link to itself, for a display at the top of the screen; and this very icon has a link to the top of the CMS message.

0	30	915
4	06	9
15	A0	900
19	30	896
23	02	1
26	31	9
28	30	7
30	06	5


37	30	43
39	06	9
50	A0	30
52	04	28


82	A0	736
86	30	732
90	30	667
94	A0	3
96	02	1

99	02	2
103	30	9
105	06	7

114	30	18
116	31	16
118	30	14
120	06	3
125	13	7



134	30	30
136	17	13
151	17	13

166	30	19
168	31	17
170	30	15
172	06	3
177	13	8



187	30	438
191	30	299
195	06	7
204	30	286
208	02	129











340	02	21


363	02	128













494	03	132
498	02	128













629	A3	129
632	30	127
634	30	12
636	06	3
641	01	1
644	04	2
646	30	0



648	30	14
650	06	3
655	01	1
658	04	4
660	03	2



664	30	31
666	06	3
671	04	24
673	30	22
675	80	20





697	30	29
699	06	3
704	04	22
706	04	20





728	30	31
730	06	3
735	04	24
737	30	22
739	81	20






761	30	9
763	06	7

772	03	48
775	30	45
777	02	20


799	02	21






822	31	95
824	30	93
826	02	1
829	80	20



851	30	7
853	06	5

860	30	9
862	06	7

871	04	46
873	30	44
875	02	20


897	02	20

SEQUENCE { ContentInfo

OBJECT IDENTIFIER signedData ( 1 2 840 113549 1 7 2 ) contentType ContentType

[0] { content

SEQUENCE { SignedData

INTEGER 3 version CMSVersion

SET { digestAlgorithms DigestAlgorithmIdentifiers

SEQUENCE {

OBJECT IDENTIFIER sha1 ( 1 3 14 3 2 26 )

}

SEQUENCE { encapContentInfo EncapsulatedContentInfo

OBJECT IDENTIFIER data ( 1 2 840 113549 1 7 1 ) eContentType ContentType

[0] { eContent

OCTET STRING 'This is some sample content.'

}

[0] { certificates CertificateSet

SEQUENCE { certificate Certificate (AliceDSSSignByCarlNoInherit)

SEQUENCE { tbsCertificate TBSCertificate

[0] { version Version

INTEGER 2

}

INTEGER 200 serialNumber CertificateSerialNumber

SEQUENCE { signature AlgorithmIdentifier

OBJECT IDENTIFIER dsaWithSha1 ( 1 2 840 10040 4 3 )

}

SEQUENCE { issuer Name

SET { RelativeDistinguishedName

SEQUENCE {

OBJECT IDENTIFIER commonName ( 2 5 4 3 )

PrintableString 'CarlDSS'

}

SEQUENCE { validity Validity

UTCTime '990817011049Z' notBefore Time

UTCTime '391231235959Z' notAfter Time

}

SEQUENCE { subject Name

SET { RelativeDistinguishedName

SEQUENCE {

OBJECT IDENTIFIER commonName ( 2 5 4 3 )

PrintableString 'AliceDSS'

}

SEQUENCE { subjectPublicKeyInfo SubjectPublicKeyInfo

SEQUENCE { algorithm AlgorithmIdentifier

OBJECT IDENTIFIER dsa ( 1 2 840 10040 4 1 )

SEQUENCE { parameters Dss-Parms

INTEGER p

00 81 8D CD ED 83 EA 0A 9E 39 3E C2
48 28 A3 E4 47 93 DD 0E D7 A8 0E EC
53 C5 AB 84 08 4F FF 94 E1 73 48 7E
0C D6 F3 44 48 D1 FE 9F AF A4 A1 89
2F E1 D9 30 C8 36 DE 3F 9B BF B7 4C
DC 5F 69 8A E4 75 D0 37 0C 91 08 95
9B DE A7 5E F9 FC F4 9F 2F DD 43 A8
8B 54 F1 3F B0 07 08 47 4D 5D 88 C3
C3 B5 B3 E3 55 08 75 D5 39 76 10 C4
78 BD FF 9D B0 84 97 37 F2 E4 51 1B
B5 E4 09 96 5C F3 7E 5B DB

INTEGER q

00 E2 47 A6 1A 45 66 B8 13 C6 DA 8F
B8 37 21 2B 62 8B F7 93 CD

INTEGER g

26 38 D0 14 89 32 AA 39 FB 3E 6D D9
4B 59 6A 4C 76 23 39 04 02 35 5C F2
CB 1A 30 C3 1E 50 5D DD 9B 59 E2 CD
AA 05 3D 58 C0 7B A2 36 B8 6E 07 AF
7D 8A 42 25 A7 F4 75 CF 4A 08 5E 4B
3E 90 F8 6D EA 9C C9 21 8A 3B 76 14
E9 CE 2E 5D A3 07 CD 23 85 B8 2F 30
01 7C 6D 49 89 11 89 36 44 BD F8 C8
95 4A 53 56 B5 E2 F9 73 EC 1A 61 36
1F 11 7F C2 BD ED D1 50 FF 98 74 C2
D1 81 4A 60 39 BA 36 39

}

BIT STRING 0 unused bits, encapsulates { subjectPublicKey

INTEGER DSAPublicKey

5C E3 B9 5A 75 14 96 0B A9 7A DD E3
3F A9 EC AC 5E DC BD B7 13 11 34 A6
16 89 28 11 23 D9 34 86 67 75 75 13
12 3D 43 5B 6F E5 51 BF FA 89 F2 A2
1B 3E 24 7D 3D 07 8D 5B 63 C8 BB 45
A5 A0 4A E3 85 D6 CE 06 80 3F E8 23
7E 1A F2 24 AB 53 1A B8 27 0D 1E EF
08 BF 66 14 80 5C 62 AC 65 FA 15 8B
F1 BB 34 D4 D2 96 37 F6 61 47 B2 C4
32 84 F0 7E 41 40 FD 46 A7 63 4E 33
F2 A5 E2 F4 F2 83 E5 B8

}

[3] { extensions Extensions

SEQUENCE {

SEQUENCE { extension

OBJECT IDENTIFIER basicConstraints ( 2 5 29 19 )

BOOLEAN TRUE

OCTET STRING, encapsulates { extnValue

SEQUENCE { BasicConstraints

}

SEQUENCE { extension

OBJECT IDENTIFIER keyUsage ( 2 5 29 15 )

BOOLEAN TRUE

OCTET STRING, encapsulates { extnValue

BIT STRING 6 unused bits KeyUsage

'11'B digitalSignature & nonRepudiation

}

SEQUENCE { extension

OBJECT IDENTIFIER authorityKeyIdentifier ( 2 5 29 35 )

OCTET STRING, encapsulates { extnValue

SEQUENCE { AuthorityKeyIdentifier

[0] keyIdentifier KeyIdentifier

70 44 3E 82 2E 6F 87 DE 4A D3 75 E3
3D 20 BC 43 2B 93 F1 1F

}

SEQUENCE { extension

OBJECT IDENTIFIER subjectKeyIdentifier ( 2 5 29 14 )

OCTET STRING, encapsulates { extnValue

OCTET STRING SubjectKeyIdentifier

KeyIdentifier

BE 6C A1 B3 E3 C1 F7 ED 43 70 A4 CE
13 01 E2 FD E3 97 FE CD

}

SEQUENCE { extension

OBJECT IDENTIFIER subjectAltName ( 2 5 29 17 )

OCTET STRING, encapsulates { extnValue

SEQUENCE { GeneralNames

[1] 'AliceDSS@example.com' rfc822Name

}

SEQUENCE { signatureAlgorithm AlgorithmIdentifier

OBJECT IDENTIFIER dsaWithSha1 ( 1 2 840 10040 4 3 )

}

BIT STRING 0 unused bits, encapsulates { signatureValue

SEQUENCE { Dss-Sig-Value

INTEGER r

55 0C A4 19 1F 42 2B 89 71 22 33 8D
83 6A B5 3D 67 6B BF 45

INTEGER s

00 9F 61 53 52 54 0B 5C B2 DD DA E7
76 1D E2 10 52 5B 43 5E BD

}

SET { signerInfos SignerInfos

SEQUENCE { SignerInfo

INTEGER 3 version CMSVersion

[0] sid subjectKeyIdentifier SubjectKeyIdentifier (AliceDSS)

BE 6C A1 B3 E3 C1 F7 ED 43 70 A4 CE
13 01 E2 FD E3 97 FE CD

}

SEQUENCE { digestAlgorithm DigestAlgorithmIdentifier

OBJECT IDENTIFIER sha1 ( 1 3 14 3 2 26 )

}

SEQUENCE { signatureAlgorithm SignatureAlgorithmIdentifier

OBJECT IDENTIFIER dsa ( 1 2 840 10040 4 1 )

}

OCTET STRING, encapsulates { signature SignatureValue

SEQUENCE { Dss-Sig-Value

INTEGER r

6D 8E 5A CD 28 A0 1F D9 86 AD 7A E9
DF AC D7 BE EC BE 3F F8

INTEGER s

7C 8A 06 1E FC A4 41 35 7E F7 24 14
FD 3D C0 56 B7 05 27 D5

}

Note: RFC3851 (S/MIME 3.1 Message Specification) mentions in §2.2 (SignatureAlgorithmIdentifier) that S/MIME v3 clients might only implement signing or signature verification using id-dsa-with-sha1, and might also use id-dsa as an AlgorithmIdentifier in this field. Receiving clients SHOULD recognize id-dsa as equivalent to id-dsa-with-sha1.

Last update: January 18, 2008