2.4.2 SIMPLEBLOB

The SIMPLEBLOB type is used for transferring cryptographic session keys from a sender to a receiver in a secure manner.


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

0x01

0x02

0x00

0x00

sessionKeyAlgorithm

0x00

0xA4

0x00

0x00

encryptedKey (256 bytes)

...

...

sessionKeyAlgorithm (4 bytes): A 32-bit integer in little-endian format that identifies the algorithm with which the session key is associated. This field MUST be assigned according to the following table.

Algorithm Name

Field Value

AES-128

0x0000660e

AES-192

0x0000660f

AES-256

0x00006610

RC2

0x00006602

RC4

0x00006801

encryptedKey (256 bytes): The session key, encrypted with one of the receiver's public keys using the RSAES-PKCS1-v1_5 encryption scheme specified in [RFC8017] section 7.2 and encoded in little-endian format. See section 3.1.7.1.5 for more information on how the receiver's public keys are retrieved and how a specific key is chosen.