| Davide Pesavento | 933a567 | 2020-07-03 22:32:43 -0400 | [diff] [blame] | 1 | SafeBag Format for Exported Credentials |
| 2 | ======================================= |
| Yingdi Yu | 55ea01a | 2015-07-21 22:42:17 -0700 | [diff] [blame] | 3 | |
| 4 | Sometimes, one may need to export credentials (e.g., certificate and private key) from |
| 5 | one machine, and import them into another machine. This requires a secured container for |
| 6 | sensitive information. We define **SafeBag**, which contains both an NDN certificate |
| Davide Pesavento | cad94b0 | 2021-04-09 21:23:03 -0400 | [diff] [blame] | 7 | (:doc:`version 2.0 <certificate>`) and the corresponding private key, which is encrypted |
| 8 | in `PKCS #8 format <https://tools.ietf.org/html/rfc5208>`_. |
| Yingdi Yu | 55ea01a | 2015-07-21 22:42:17 -0700 | [diff] [blame] | 9 | |
| 10 | The format of **SafeBag** is defined as: |
| 11 | |
| Davide Pesavento | 933a567 | 2020-07-03 22:32:43 -0400 | [diff] [blame] | 12 | .. code-block:: abnf |
| Yingdi Yu | 55ea01a | 2015-07-21 22:42:17 -0700 | [diff] [blame] | 13 | |
| Junxiao Shi | 9a04dda | 2019-07-02 15:18:20 +0000 | [diff] [blame] | 14 | SafeBag = SAFE-BAG-TYPE TLV-LENGTH |
| Davide Pesavento | 933a567 | 2020-07-03 22:32:43 -0400 | [diff] [blame] | 15 | CertificateV2 |
| Junxiao Shi | 9a04dda | 2019-07-02 15:18:20 +0000 | [diff] [blame] | 16 | EncryptedKeyBag |
| 17 | |
| 18 | EncryptedKeyBag = ENCRYPTED-KEY-BAG-TYPE TLV-LENGTH |
| Davide Pesavento | 933a567 | 2020-07-03 22:32:43 -0400 | [diff] [blame] | 19 | *OCTET ; private key encrypted in PKCS #8 format |
| Yingdi Yu | 55ea01a | 2015-07-21 22:42:17 -0700 | [diff] [blame] | 20 | |
| Davide Pesavento | 933a567 | 2020-07-03 22:32:43 -0400 | [diff] [blame] | 21 | All TLV-TYPE numbers are application specific: |
| Yingdi Yu | 55ea01a | 2015-07-21 22:42:17 -0700 | [diff] [blame] | 22 | |
| Davide Pesavento | cad94b0 | 2021-04-09 21:23:03 -0400 | [diff] [blame] | 23 | +---------------------------------------------+------------------+-----------------+ |
| 24 | | Type | Assigned number | Assigned number | |
| 25 | | | (decimal) | (hexadecimal) | |
| 26 | +=============================================+==================+=================+ |
| 27 | | SafeBag | 128 | 0x80 | |
| 28 | +---------------------------------------------+------------------+-----------------+ |
| 29 | | EncryptedKeyBag | 129 | 0x81 | |
| 30 | +---------------------------------------------+------------------+-----------------+ |