RFC 3369: Cryptographic Message Syntax (CMS)

Spec

• RFC3369.txt

RFC 3369 Overview

• Derived from RFC2315: PKCS#7 version 1.5
• Obsoletes RFC2630 and RFC3211
• Defines one ContentInfo which encapsulates a single content type
• data: general encapsulated in the other content types
• signed-data
  -signed-attributes: DER required
• enveloped-data
• digested-data
• encrypted-data
• authenticated-data
  -authenticated-attributes: DER required

Object Identifiers

Signed-data
Contains a content of any type and 0 or more signature values

Object identifier
id-ct-contentInfo OBJECT IDENTIFIER ::= { iso(1) member-body(2)
us(840) rsadsi(113549) pkcs(1) pkcs9(9) smime(16) ct(1) 6 }

data content type
id-data OBJECT IDENTIFIER ::= { iso(1) member-body(2)
us(840) rsadsi(113549) pkcs(1) pkcs7(7) 1 }

signed-data content type
id-signedData OBJECT IDENTIFIER ::= { iso(1) member-body(2)
us(840) rsadsi(113549) pkcs(1) pkcs7(7) 2 }