2.4.2 SIMPLEBLOB
The SIMPLEBLOB type is used for transferring cryptographic session keys from a sender to a receiver in a secure manner.
|
|
|
|
|
|
|
|
|
|
1 |
|
|
|
|
|
|
|
|
|
2 |
|
|
|
|
|
|
|
|
|
3 |
|
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
0x01 |
0x02 |
0x00 |
0x00 |
||||||||||||||||||||||||||||
sessionKeyAlgorithm |
|||||||||||||||||||||||||||||||
0x00 |
0xA4 |
0x00 |
0x00 |
||||||||||||||||||||||||||||
encryptedKey (256 bytes) |
|||||||||||||||||||||||||||||||
... |
|||||||||||||||||||||||||||||||
... |
sessionKeyAlgorithm (4 bytes): A 32-bit integer in little-endian format that identifies the algorithm with which the session key is associated. This field MUST be assigned according to the following table.
-
Algorithm Name
Field Value
AES-128
0x0000660e
AES-192
0x0000660f
AES-256
0x00006610
RC2
0x00006602
RC4
0x00006801
encryptedKey (256 bytes): The session key, encrypted with one of the receiver's public keys using the RSAES-PKCS1-v1_5 encryption scheme specified in [RFC8017] section 7.2 and encoded in little-endian format. See section 3.1.7.1.5 for more information on how the receiver's public keys are retrieved and how a specific key is chosen.