Skip to content

Commit fa1ec2c

Browse files
dajiajidajiaji
authored
Merge pull request #620 from dajiaji/ajitomi-add-docs-for-fully-specified-algs
Update algorithms and supported specs for fully specified algs.
2 parents bb6b9cf + 7d3a84b commit fa1ec2c

2 files changed

Lines changed: 31 additions & 6 deletions

File tree

‎README.md‎

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,7 @@ implementation compliant with:
1515
- [RFC8392: CWT (CBOR Web Token)](https://tools.ietf.org/html/rfc8392)
1616
- [draft-07: Use of HPKE with COSE](https://www.ietf.org/archive/id/draft-ietf-cose-hpke-07.html) - experimental
1717
- [draft-06: CWT Claims in COSE Headers](https://www.ietf.org/archive/id/draft-ietf-cose-cwt-claims-in-headers-06.html) - experimental
18+
- [draft-13: Fully-Specified Algorithms for JOSE and COSE](https://www.ietf.org/archive/id/draft-ietf-jose-fully-specified-algorithms-13.html)
1819
- and related various specifications. See [Referenced Specifications](#referenced-specifications).
1920

2021
It is designed to make users who already know about [JWS](https://tools.ietf.org/html/rfc7515)/[JWE](https://tools.ietf.org/html/rfc7516)/[JWT](https://tools.ietf.org/html/rfc7519)
@@ -1748,6 +1749,7 @@ Python CWT is (partially) compliant with following specifications:
17481749
- [RFC8152: CBOR Object Signing and Encryption (COSE)](https://tools.ietf.org/html/rfc8152)
17491750
- [draft-07: Use of HPKE with COSE](https://www.ietf.org/archive/id/draft-ietf-cose-hpke-07.html) - experimental
17501751
- [draft-06: CWT Claims in COSE Headers](https://www.ietf.org/archive/id/draft-ietf-cose-cwt-claims-in-headers-06.html) - experimental
1752+
- [draft-13: Fully-Specified Algorithms for JOSE and COSE](https://www.ietf.org/archive/id/draft-ietf-jose-fully-specified-algorithms-13.html)
17511753
- [Electronic Health Certificate Specification](https://github.com/ehn-dcc-development/hcert-spec/blob/main/hcert_spec.md)
17521754
- [Technical Specifications for Digital Green Certificates Volume 1](https://ec.europa.eu/health/sites/default/files/ehealth/docs/digital-green-certificates_v1_en.pdf)
17531755

‎docs/algorithms.rst‎

Lines changed: 29 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -30,12 +30,17 @@ COSE Key Types
3030
COSE Algorithms
3131
---------------
3232

33-
-65534: 128, # AES-CTR w/ 128-bit key (Deprecated)
34-
-65533: 192, # AES-CTR w/ 192-bit key (Deprecated)
35-
-65532: 256, # AES-CTR w/ 256-bit key (Deprecated)
36-
-65531: 128, # AES-CBC w/ 128-bit key (Deprecated)
37-
-65530: 192, # AES-CBC w/ 192-bit key (Deprecated)
38-
-65529: 256, # AES-CBC w/ 256-bit key (Deprecated)
33+
-65534: A128CTR, # AES-CTR w/ 128-bit key (Deprecated)
34+
-65533: A192CTR, # AES-CTR w/ 192-bit key (Deprecated)
35+
-65532: A256CTR, # AES-CTR w/ 256-bit key (Deprecated)
36+
-65531: A128CBC, # AES-CBC w/ 128-bit key (Deprecated)
37+
-65530: A192CBC, # AES-CBC w/ 192-bit key (Deprecated)
38+
-65529: A256CBC, # AES-CBC w/ 256-bit key (Deprecated)
39+
-65529: A256CBC, # AES-CBC w/ 256-bit key (Deprecated)
40+
-36: ES512, # ECDSA w/ SHA-512 (Deprecated)
41+
-35: ES384, # ECDSA w/ SHA-384 (Deprecated)
42+
-8: EdDSA, # EdDSA (Deprecated)
43+
-7: ES256, # ECDSA w/ SHA-256 (Deprecated)
3944

4045
+------------------------+--------+-------+-----------------------------------------------------+
4146
| Name | Status | Value | Description |
@@ -54,6 +59,14 @@ COSE Algorithms
5459
+------------------------+--------+-------+-----------------------------------------------------+
5560
| A256CBC | ✅ | -65529| AES-CBC w/ 256-bit key |
5661
+------------------------+--------+-------+-----------------------------------------------------+
62+
| ESB512 | | -268 | ECDSA using BrainpoolP512r1 curve and SHA-512 |
63+
+------------------------+--------+-------+-----------------------------------------------------+
64+
| ESB384 | | -267 | ECDSA using BrainpoolP384r1 curve and SHA-384 |
65+
+------------------------+--------+-------+-----------------------------------------------------+
66+
| ESB320 | | -266 | ECDSA using BrainpoolP320r1 curve and SHA-384 |
67+
+------------------------+--------+-------+-----------------------------------------------------+
68+
| ESB256 | | -265 | ECDSA using BrainpoolP256r1 curve and SHA-256 |
69+
+------------------------+--------+-------+-----------------------------------------------------+
5770
| WalnutDSA | | -260 | WalnutDSA signature |
5871
+------------------------+--------+-------+-----------------------------------------------------+
5972
| RS512 | ✅ | -259 | RSASSA-PKCS1-v1_5 using SHA-512 |
@@ -62,6 +75,12 @@ COSE Algorithms
6275
+------------------------+--------+-------+-----------------------------------------------------+
6376
| RS256 | ✅ | -257 | RSASSA-PKCS1-v1_5 using SHA-256 |
6477
+------------------------+--------+-------+-----------------------------------------------------+
78+
| Ed448 | ✅ | -53 | EdDSA using Ed448 curve |
79+
+------------------------+--------+-------+-----------------------------------------------------+
80+
| ESP512 | ✅ | -52 | ECDSA using P-521 curve and SHA-512 |
81+
+------------------------+--------+-------+-----------------------------------------------------+
82+
| ESP384 | ✅ | -51 | ECDSA using P-384 curve and SHA-384 |
83+
+------------------------+--------+-------+-----------------------------------------------------+
6584
| ES256K | ✅ | -47 | ECDSA using secp256k1 curve and SHA-256 |
6685
+------------------------+--------+-------+-----------------------------------------------------+
6786
| HSS-LMS | | -46 | HSS/LMS hash-based digital signature |
@@ -116,6 +135,8 @@ COSE Algorithms
116135
+------------------------+--------+-------+-----------------------------------------------------+
117136
| ECDH-ES + HKDF-256 | ✅ | -25 | ECDH ES w/ HKDF - generate key directly |
118137
+------------------------+--------+-------+-----------------------------------------------------+
138+
| Ed25519 | ✅ | -19 | EdDSA using Ed25519 curve |
139+
+------------------------+--------+-------+-----------------------------------------------------+
119140
| SHAKE128 | | -18 | SHAKE-128 256-bit Hash Value |
120141
+------------------------+--------+-------+-----------------------------------------------------+
121142
| SHA-512/256 | | -17 | SHA-2 512-bit Hash truncated to 256-bits |
@@ -134,6 +155,8 @@ COSE Algorithms
134155
+------------------------+--------+-------+-----------------------------------------------------+
135156
| direct+HKDF-SHA-256 | ✅ | -10 | Shared secret w/ HKDF and SHA-256 |
136157
+------------------------+--------+-------+-----------------------------------------------------+
158+
| ESP256 | ✅ | -9 | ECDSA using P-256 curve and SHA-256 |
159+
+------------------------+--------+-------+-----------------------------------------------------+
137160
| EdDSA | ✅ | -8 | EdDSA |
138161
+------------------------+--------+-------+-----------------------------------------------------+
139162
| ES256 | ✅ | -7 | ECDSA w/ SHA-256 |

0 commit comments

Comments
 (0)