An update... I was able to extend my COSE parser to verify the countersignature examples from the I-D and I recreated the JSON input for the Examples repository (https://github.com/cose-wg/Examples/pull/99).
I wasn't able to compute a few of the intermediate values due to limitations of my code. The intermediate values that I did not compute or verify, I removed from the JSON. But, important to this I-D, I generated and included the ToBeSign_hex in countersignatures and used this to successfully verify the ECDSA signature. As Michael said, it would be nice if there was a second independent implementation to validate. As I pointed out in my previous message, these examples do not test the CounterSignatureV2 structure. But I think I'm close enough now that I should be able to create some new examples. Russ, maybe hold off on the PR for removing those Example stubs. Jonathan On Thu, Nov 19, 2020 at 7:13 PM Jonathan Hammell <[email protected]> wrote: > > Hi Russ, > I cannot find the existing examples from the document in the GitHub > Examples repository, despite Appendix A saying that they are there. > > Furthermore, the existing examples in the document do not cover the > COSE_Sign1 case that was deemed to be the problem with the original > countersignature. I realize that the WG is having difficulty finding > someone to produce these examples, but I thought that this omission > should be pointed out on the list. > > Jonathan > > On Mon, Nov 16, 2020 at 5:32 AM Russ Housley <[email protected]> wrote: > > > > Based on the discussion at the meeting earlier today, I put together a PR: > > > > https://github.com/cose-wg/countersign/pull/2 > > > > Comments are most welcome. > > > > Russ > > > > _______________________________________________ > > COSE mailing list > > [email protected] > > https://www.ietf.org/mailman/listinfo/cose _______________________________________________ COSE mailing list [email protected] https://www.ietf.org/mailman/listinfo/cose
