LTANS WG: ERS November 7, 2005 Tobias Gondrom

LTANS WG (ltans): ERS Draft straightened up Corrected ERS (feedback from Peter and Carl) Prepared for WG final call Need 2 id’s for ASN.1 spec Products based on ERS promoted by Open Text, IBM, … hit market beginning (Jan-Mar) of next year – SHOULD really conclude now with ERS!

LTANS WG (ltans): ERS Feedback from Young H. Etheridge: “Also include the possibility of other Timestamp- Standards” Time-Stamp: An irrefutably verifiable confirmation generated by a Time Stamping Authority (TSA) that a data item existed at a certain time. [RFC3161], [I180141], [I180142], [I180143], and [ANSX995] specify a good structure for time-stamps and a protocol for communicating with a Time-stamp Authority (TSA). These documents SHOULD be used as the references for creating a standards-based Time-Stamp. Opinions???

ASN.1 (1/3) ERS {iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-mod(0) id-mod-ers(4711) } DEFINITIONS IMPLICIT TAGS ::= BEGIN -- EXPORTS ALL -- IMPORTS TimeStampToken FROM PKIXTSP {iso(1) identified-organization(3) dod(6) internet(1) security(5) mechanisms(5) pkix(7) id-mod(0) id-mod-tsp(13) } id-ERS-1 FROM ERS ContentInfo FROM CryptographicMessageSyntax {iso(1) member-body(2) us(840) rsadsi(113549) pkcs(1) pkcs-9(9) smime(16) modules(0) cms(1)} AlgorithmIdentifier FROM AI ;

ASN.1 (2/3) ArchiveTimeStamp ::= SEQUENCE { digestAlgorithm AlgorithmIdentifier, reducedHashtree [0] SEQUENCE OF SEQUENCE OF OCTET STRING OPTIONAL, timeStamp ContentInfo} ArchiveTimeStampChain::= SEQUENCE SIZE (1..MAX) OF ArchiveTimeStamp ArchiveTimeStampSequence::= SEQUENCE SIZE (1..MAX) OF ArchiveTimeStampChain EncryptionMethod ::= SEQUENCE { encryptionAlgorithm TYPE-IDENTIFIER.&id({EncryptionMethods}), encryptionParameters OPTIONAL } EncryptionMethods TYPE-IDENTIFIER ::= {cms-Encryption, dynamically extensible information object set --} cms-Encryption TYPE-IDENTIFIER ::= { CMSEncryptionParams IDENTIFIED BY id-ERS-1 } CMSEncryptionParams ::= SEQUENCE { encryptionCover ContentInfo, publicKey [0] BIT STRING OPTIONAL, params CHOICE { privateKey BIT STRING, encryptionKeyRan EncryptionKeyRandom} }

ASN.1 (3/3) EncryptionKeyRandom::= SEQUENCE { encryptionKey OCTET STRING, randomValue BIT STRING } EvidenceRecord ::= SEQUENCE { version INTEGER { v1(1) }, digestAlgorithms SEQUENCE SIZE (1..MAX) OF AlgorithmIdentifier, cryptoInfos [0] SEQUENCE SIZE (1..MAX) OF CryptoInfo OPTIONAL, encryption [1] EncryptionMethod OPTIONAL, archiveTimeStampSequence ArchiveTimeStampSequence} CryptoInfo ::= SEQUENCE { cryptoInfoType TYPE-IDENTIFIER.&id({CryptoInfos}), cryptoInfoValue OPTIONAL } CryptoInfos TYPE-IDENTIFIER ::= { dynamically extensible information object set --} END

LTANS WG (ltans): ERS Proposal: WG Last Call (two weeks until Nov 21)