ietf-corim-cddl/xcorim.cddl at main · ietf-rats/ietf-corim-cddl · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
xcorim = #6.525($xcorim-type-choice)

tagged-xcorim-map = #6.526(xcorim-map)
$xcorim-type-choice /= tagged-xcorim-map
$xcorim-type-choice /= #6.527(signed-xcorim)

signed-xcorim = #6.18(COSE-Sign1-xcorim)

protected-xcorim-header-map = {
  xcorim.alg-id => int
  xcorim.content-type => "application/xcorim-unsigned+cbor"
  xcorim.issuer-key-id => bstr
  xcorim.meta => bstr .cbor xcorim-meta-map
  * cose-label => cose-values
}

xcorim-meta-map = {
  xcorim.signer => xcorim-signer-map
  xcorim.timestamp => time
}

xcorim-signer-map = {
  xcorim.signer-name => $entity-name-type-choice
  ? xcorim.signer-uri => uri
  * $$xcorim-signer-map-extension
}

xcorim-entity-map = {
  xcorim.entity-name => $entity-name-type-choice
  ? xcorim.reg-id => uri
  xcorim.role => $xcorim-role-type-choice
  * $$xcorim-entity-map-extension
}

$xcorim-role-type-choice /= xcorim.deny-list-creator

unprotected-xcorim-header-map = {
  * cose-label => cose-values
}

COSE-Sign1-xcorim = [
  protected: bstr .cbor protected-xcorim-header-map
  unprotected: unprotected-xcorim-header-map
  payload: bstr .cbor tagged-xcorim-map
  signature: bstr
]

xcorim-map = {
  ? xcorim.entity => [ + xcorim-entity-map ]
  xcorim.deny-list => [ + $corim-id-type-choice ]
  * $$xcorim-map-extension
}

; vim: set tw=60 ts=2 et: