Re: [lamps] Call for adoption of draft-housley-lamps-cms-aes-mac-alg

[Russ Housley <[e-mail]>]

Here is my proposed addition for the Example.  Please let me know if it does not meet your needs.

Russ

= = = = = = = = =

Appendix: AuthenticatedData Example

This example shows the establishment of an AES-256 key-encryption
key to distribute the AES-128-GMAC content-authentication key.
The content-authentication key is encrypted using AES-256-KEYWRAP.
Thus, any party in possession of the key-encryption key could have
produced the autenticated message.  The recipient only knows that
the message was produced by one of those parties.

The AES-256 key-encryption key, in hexadecimal:
   0b4db8bfae5d202c2dffaa6746658c7edf7a2c100fe8c8a74fc198b2cd9b7419

The identifier assigned to the key-encryption key is:
   fb6f2b3952fd7449d298f68aa4bcd94d

The date used with this identifier is:
   20201110120000Z

The DER encoding of the AuthenticatedData encapsulated in the
ContentInfo produces 289 octets, which are
shown in hexadecimal:
   3082011d060b2a864886f70d0109100102a082010c308201080201003151a24f
   02010430230410fb6f2b3952fd7449d298f68aa4bcd94d180f32303230313131
   303132303030305a300b060960864801650304012d04180cc1b55b29628000d7
   005dc34b7e4ca2dc6735d53ae4def1301b0609608648016503040109300e040c
   bd4fecfd737d29e5419f307ea10b0609608648016503040201302b06092a8648
   86f70d010701a01e041c5468697320697320736f6d652073616d706c6520636f
   6e74656e742ea24b301806092a864886f70d010903310b06092a864886f70d01
   0701302f06092a864886f70d01090431220420c875df2a4210704a9edddbb6df
   cc870471168f904d183318bbf184ac0b045e53040c86e90edca0be9fd74dd59c
   37

Decoding this ASN.1 structure gives:
  0 285: SEQUENCE {
  4  11:  OBJECT IDENTIFIER authData (1 2 840 113549 1 9 16 1 2)
 17 268:  [0] {
 21 264:   SEQUENCE {
 25   1:    INTEGER 0
 28  81:    SET {
 30  79:     [2] {
 32   1:      INTEGER 4
 35  35:      SEQUENCE {
 37  16:       OCTET STRING
       :       FB 6F 2B 39 52 FD 74 49 D2 98 F6 8A A4 BC D9 4D
 55  15:       GeneralizedTime 10/11/2020 12:00:00 GMT
       :        }
 72  11:      SEQUENCE {
 74   9:       OBJECT IDENTIFIER
       :        aes256-wrap (2 16 840 1 101 3 4 1 45)
       :        }
 85  24:      OCTET STRING
       :       0C C1 B5 5B 29 62 80 00 D7 00 5D C3 4B 7E 4C A2
       :       DC 67 35 D5 3A E4 DE F1
       :       }
       :      }
111  27:    SEQUENCE {
113   9:     OBJECT IDENTIFIER
       :      aes128-GMAC (2 16 840 1 101 3 4 1 9)
124  14:     SEQUENCE {
126  12:      OCTET STRING BD 4F EC FD 73 7D 29 E5 41 9F 30 7E
       :       }
       :      }
140  11:    [1] {
142   9:     OBJECT IDENTIFIER sha-256 (2 16 840 1 101 3 4 2 1)
       :      }
153  43:    SEQUENCE {
155   9:     OBJECT IDENTIFIER data (1 2 840 113549 1 7 1)
166  30:     [0] {
168  28:      OCTET STRING 'This is some sample content.'
       :       }
       :      }
198  75:    [2] {
200  24:     SEQUENCE {
202   9:      OBJECT IDENTIFIER
       :       contentType (1 2 840 113549 1 9 3)
213  11:      SET {
215   9:       OBJECT IDENTIFIER data (1 2 840 113549 1 7 1)
       :        }
       :       }
226  47:     SEQUENCE {
228   9:      OBJECT IDENTIFIER
       :       messageDigest (1 2 840 113549 1 9 4)
239  34:      SET {
241  32:       OCTET STRING
       :       C8 75 DF 2A 42 10 70 4A 9E DD DB B6 DF CC 87 04
       :       71 16 8F 90 4D 18 33 18 BB F1 84 AC 0B 04 5E 53
       :        }
       :       }
       :      }
275  12:    OCTET STRING 86 E9 0E DC A0 BE 9F D7 4D D5 9C 37
       :     }
       :    }
       :   }

The authenticated content is: 'This is some sample content.'