[COSE] exact input to the sig computation

"Lundblade, Laurence" <llundbla@qti.qualcomm.com> Tue, 06 December 2016 02:39 UTC

Return-Path: <llundbla@qti.qualcomm.com>
X-Original-To: cose@ietfa.amsl.com
Delivered-To: cose@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4DA22129667 for <cose@ietfa.amsl.com>; Mon, 5 Dec 2016 18:39:29 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -9.917
X-Spam-Level:
X-Spam-Status: No, score=-9.917 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, RCVD_IN_DNSWL_HI=-5, RCVD_IN_MSPIKE_H3=-0.01, RCVD_IN_MSPIKE_WL=-0.01, RP_MATCHES_RCVD=-2.896, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (1024-bit key) header.d=qti.qualcomm.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dpzoYfw6uhQN for <cose@ietfa.amsl.com>; Mon, 5 Dec 2016 18:39:28 -0800 (PST)
Received: from wolverine01.qualcomm.com (wolverine01.qualcomm.com [199.106.114.254]) (using TLSv1.2 with cipher AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 2AC0912955F for <cose@ietf.org>; Mon, 5 Dec 2016 18:39:28 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=qti.qualcomm.com; i=@qti.qualcomm.com; q=dns/txt; s=qcdkim; t=1480991968; x=1512527968; h=from:to:subject:date:message-id:content-id: content-transfer-encoding:mime-version; bh=K8XKImify1Lpe1hWbYfH1Qoy/VwlluGBBBMPOw/zzdI=; b=VKizcFtjW7LRMpgak8wPPSC5CQLs1EDRO5iwna9+DuiP08x1eAAUrLh+ YptzNeq4wvmg5rD/nt2Ox4sPlzByf9zXx91gRwJ3Bh9g/Jtf2U9n1WRMi XIA8I0IwO6iqhWIjSBhf6I0/hzHOyIWqu6ivxY9ijMKMbCdgpQAL2WN+3 A=;
X-IronPort-AV: E=Sophos;i="5.33,750,1477983600"; d="scan'208";a="245709192"
Received: from unknown (HELO ironmsg02-R.qualcomm.com) ([10.53.140.106]) by wolverine01.qualcomm.com with ESMTP; 05 Dec 2016 18:39:27 -0800
X-IronPort-AV: E=McAfee;i="5700,7163,8370"; a="859287046"
X-Amp-Result: CLEAN
Received: from nasanexm01a.na.qualcomm.com ([10.85.0.81]) by ironmsg02-R.qualcomm.com with ESMTP/TLS/RC4-SHA; 05 Dec 2016 18:39:27 -0800
Received: from NASANEXM01B.na.qualcomm.com (10.85.0.82) by nasanexm01a.na.qualcomm.com (10.85.0.81) with Microsoft SMTP Server (TLS) id 15.0.1178.4; Mon, 5 Dec 2016 18:39:26 -0800
Received: from NASANEXM01B.na.qualcomm.com ([10.85.0.82]) by NASANEXM01B.na.qualcomm.com ([10.85.0.82]) with mapi id 15.00.1178.000; Mon, 5 Dec 2016 18:39:26 -0800
From: "Lundblade, Laurence" <llundbla@qti.qualcomm.com>
To: cose <cose@ietf.org>
Thread-Topic: exact input to the sig computation
Thread-Index: AQHST2n1R6OqlPuV/EaiRlaLIWe8iw==
Date: Tue, 06 Dec 2016 02:39:26 +0000
Message-ID: <6965DA5C-E0A2-4B33-A290-2CE04BB41BAC@qti.qualcomm.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-mailer: Apple Mail (2.1878.6)
x-ms-exchange-messagesentrepresentingtype: 1
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [199.106.107.6]
Content-Type: text/plain; charset="Windows-1252"
Content-ID: <5928F8381C6E394CB6B8D35BCDD96909@qualcomm.com>
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
Archived-At: <https://mailarchive.ietf.org/arch/msg/cose/Tg9QN-SMswH-ykZf4HlM440bp2o>
Subject: [COSE] exact input to the sig computation
X-BeenThere: cose@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: CBOR Object Signing and Encryption <cose.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/cose>, <mailto:cose-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/cose/>
List-Post: <mailto:cose@ietf.org>
List-Help: <mailto:cose-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/cose>, <mailto:cose-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 06 Dec 2016 02:39:29 -0000

Can you confirm for me the input to the signature computation (e.g. ECDSA) is the concatenation of the the bstr wrapped  protected headers and the bstr wrapped payload?  Pretty sure that’s right, but it doesn’t seem to be explicit in the cose draft. Sorry if I missed it.

Thx

LL