GNUTLS { }
DEFINITIONS EXPLICIT TAGS ::=
BEGIN
-- This file contains parts of PKCS-1 structures and some stuff
-- required for DSA keys.
RSAPublicKey ::= SEQUENCE {
modulus INTEGER, -- n
publicExponent INTEGER -- e
}
--
-- Representation of RSA private key with information for the
-- CRT algorithm.
--
RSAPrivateKey ::= SEQUENCE {
version INTEGER,
modulus INTEGER, -- (Usually large) n
publicExponent INTEGER, -- (Usually small) e
privateExponent INTEGER, -- (Usually large) d
prime1 INTEGER, -- (Usually large) p
prime2 INTEGER, -- (Usually large) q
exponent1 INTEGER, -- (Usually large) d mod (p-1)
exponent2 INTEGER, -- (Usually large) d mod (q-1)
coefficient INTEGER, -- (Usually large) (inverse of q) mod p
otherPrimeInfos OtherPrimeInfos OPTIONAL
}
ProvableSeed ::= SEQUENCE {
algorithm OBJECT IDENTIFIER, -- the hash algorithm OID used for FIPS186-4 generation
seed OCTET STRING
}
OtherPrimeInfos ::= SEQUENCE SIZE(1..MAX) OF OtherPrimeInfo
OtherPrimeInfo ::= SEQUENCE {
prime INTEGER, -- ri
exponent INTEGER, -- di
coefficient INTEGER -- ti
}
-- for signature calculation
-- added by nmav
AlgorithmIdentifier ::= SEQUENCE {
algorithm OBJECT IDENTIFIER,
parameters ANY DEFINED BY algorithm OPTIONAL
}
-- contains a value of the type
-- registered for use with the
-- algorithm object identifier value
DigestInfo ::= SEQUENCE {
digestAlgorithm DigestAlgorithmIdentifier,
digest OCTET STRING
}
DigestAlgorithmIdentifier ::= AlgorithmIdentifier
DSAPublicKey ::= INTEGER
DSAParameters ::= SEQUENCE {
p INTEGER,
q INTEGER,
g INTEGER
}
DSASignatureValue ::= SEQUENCE {
r INTEGER,
s INTEGER
}
DSAPrivateKey ::= SEQUENCE {
version INTEGER, -- should be zero
p INTEGER,
q INTEGER,
g INTEGER,
Y INTEGER, -- public
priv INTEGER
}
-- from PKCS#3
DHParameter ::= SEQUENCE {
prime INTEGER, -- p
base INTEGER, -- g
privateValueLength INTEGER OPTIONAL
}
-- From PKCS #11 3.0
pkcs-11-ec-Parameters ::= CHOICE {
--ecParameters ECParameters,
oId OBJECT IDENTIFIER,
--implicitlyCA NULL,
curveName PrintableString
}
-- ECC from RFC5480
ECParameters ::= CHOICE {
namedCurve OBJECT IDENTIFIER
}
ECPrivateKey ::= SEQUENCE {
Version INTEGER, -- { ecPrivkeyVer1(1) }
privateKey OCTET STRING,
parameters [0] ECParameters OPTIONAL,
publicKey [1] BIT STRING OPTIONAL
}
-- Structures used for the PKINIT othername variables
PrincipalName ::= SEQUENCE {
name-type [0] INTEGER,
name-string [1] SEQUENCE OF GeneralString
}
KRB5PrincipalName ::= SEQUENCE {
realm [0] GeneralString,
principalName [1] PrincipalName
}
-- from RFC4055
RSAPSSParameters ::= SEQUENCE {
hashAlgorithm [0] AlgorithmIdentifier OPTIONAL, -- sha1Identifier
maskGenAlgorithm [1] AlgorithmIdentifier OPTIONAL, -- mgf1SHA1Identifier
saltLength [2] INTEGER DEFAULT 20,
trailerField [3] INTEGER DEFAULT 1
}
-- GOST R 34.10
GOSTParameters ::= SEQUENCE {
publicKeyParamSet OBJECT IDENTIFIER,
digestParamSet OBJECT IDENTIFIER OPTIONAL
}
GOSTParametersOld ::= SEQUENCE {
publicKeyParamSet OBJECT IDENTIFIER,
digestParamSet OBJECT IDENTIFIER,
encryptionParamSet OBJECT IDENTIFIER OPTIONAL
}
GOSTPrivateKey ::= OCTET STRING
GOSTPrivateKeyOld ::= INTEGER
-- GOST x509 Extensions
IssuerSignTool ::= SEQUENCE {
signTool UTF8String, -- (SIZE (1..200))
cATool UTF8String, -- (SIZE (1..200))
signToolCert UTF8String, -- (SIZE (1..100))
cAToolCert UTF8String -- (SIZE (1..100))
}
Gost28147-89-EncryptedKey ::= SEQUENCE {
encryptedKey OCTET STRING, -- (SIZE (32))
maskKey [0] IMPLICIT OCTET STRING OPTIONAL,
macKey OCTET STRING -- (SIZE (1..4))
}
SubjectPublicKeyInfo ::= SEQUENCE {
algorithm AlgorithmIdentifier,
subjectPublicKey BIT STRING
}
GostR3410-TransportParameters ::= SEQUENCE {
encryptionParamSet OBJECT IDENTIFIER,
ephemeralPublicKey [0] IMPLICIT SubjectPublicKeyInfo OPTIONAL,
ukm OCTET STRING
}
GostR3410-KeyTransport ::= SEQUENCE {
sessionEncryptedKey Gost28147-89-EncryptedKey,
transportParameters [0] IMPLICIT GostR3410-TransportParameters OPTIONAL
}
END