[COSE] Re: I-D Action: draft-ietf-cose-hash-envelope-02.txt

[Anders Rundgren]

The application seems valid.  COSE alternatives address this in a simpler and 
more universal way:
https://github.com/cyberphone/cbor-everywhere?tab=readme-ov-file#cryptographic-operations

{
  "media": [{
    1: "one-red-pixel.png",
    2: "image/png",
    # Inline binary
    3: 
h'89504e470d0a1a0a0000000d49484452000000010000000108060000001f15c489000000017352474200aece1ce90000000467414d410000b18f0bfc6105000000097048597300001d8700001d87018fe5f1650000000d49444154185763782ba3f21f000554022dc63d929d0000000049454e44ae426082'
  }, {
    1: "W3C logo",
    2: "image/svg",
    # URL + Sha256 hash
    4: {
      1: "https://www.w3.org/assets/logos/w3c/w3c-no-bars.svg";,
      2: h'796663c35a13ebde00d99d4149bb0b1124e391fff99e8f55e8908d4c8b15fb6d'
    }
  }],
  "other": [true, false, null, 2.3],
  "signature": {
    1: -50,  # Ed25519
    4: {
      1: 1,  # OKP
      -1: 6, # Ed25519
      -2: h'fe49acf5b92b6e923594f2e83368f680ac924be93cf533aecaf802e37757f8c9'
    },
    6: 
h'1b0067a1cbc89713ff8d605938564c37f48f30d87b1c8c1f34282ce8e006b1c4b76c346fc8ee0d60ca0739c2eaaba2804cc5b90210532218e637cd8827105d02'
  }
}

Anders
https://test.webpki.org/csf-lab/home

_______________________________________________
COSE mailing list -- cose@ietf.org
To unsubscribe send an email to cose-le...@ietf.org