Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
The SIMPLEBLOB type is used for transferring cryptographic session keys from a sender to a receiver in a secure manner.
|
|
|
|
|
|
|
|
|
|
1 |
|
|
|
|
|
|
|
|
|
2 |
|
|
|
|
|
|
|
|
|
3 |
|
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
0x01 |
0x02 |
0x00 |
0x00 |
||||||||||||||||||||||||||||
sessionKeyAlgorithm |
|||||||||||||||||||||||||||||||
0x00 |
0xA4 |
0x00 |
0x00 |
||||||||||||||||||||||||||||
encryptedKey (256 bytes) |
|||||||||||||||||||||||||||||||
... |
|||||||||||||||||||||||||||||||
... |
sessionKeyAlgorithm (4 bytes): A 32-bit integer in little-endian format that identifies the algorithm with which the session key is associated. This field MUST be assigned according to the following table.
-
Algorithm Name
Field Value
AES-128
0x0000660e
AES-192
0x0000660f
AES-256
0x00006610
RC2
0x00006602
RC4
0x00006801
encryptedKey (256 bytes): The session key, encrypted with one of the receiver's public keys using the RSAES-PKCS1-v1_5 encryption scheme specified in [RFC8017] section 7.2 and encoded in little-endian format. See section 3.1.7.1.5 for more information on how the receiver's public keys are retrieved and how a specific key is chosen.