1 -- http://www.itu.int/ITU-T/asn1/database/itu-t/x/x420/1999/index.html
2 -- Module IPMSSecurityExtensions (X.420:06/1999)
3 IPMSSecurityExtensions {joint-iso-itu-t mhs(6) ipms(1) modules(0)
4 ipm-security-extensions(14) version-1999(1)} DEFINITIONS IMPLICIT TAGS ::=
10 -- MTS Abstract Service
11 --Certificates,-- Content, ContentIntegrityCheck, ExtendedCertificates,
12 EXTENSION, MessageOriginAuthenticationCheck, MessageToken, EncryptionKey
14 FROM MTSAbstractService {joint-iso-itu-t mhs(6) mts(3) modules(0)
15 mts-abstract-service(1) version-1999(1)}
16 --WS: asn2wrs can't import a type through a intermediate module - so we import directly
19 FROM AuthenticationFramework {joint-iso-itu-t ds(5) module(1)
20 authenticationFramework(7) 3}
21 -- IPMS Information Objects
22 IPMS-EXTENSION, BodyPartNumber
24 FROM IPMSInformationObjects {joint-iso-itu-t mhs(6) ipms(1) modules(0)
25 information-objects(2) version-1999(1)}
26 -- IPMS Heading Extensions
29 -- FROM IPMSHeadingExtensions {joint-iso-itu-t mhs(6) ipms(1) modules(0)
30 -- heading-extensions(6) version-1999(1)}
31 -- Directory Authentication Framework
32 AlgorithmIdentifier, ENCRYPTED{}
34 FROM AuthenticationFramework {joint-iso-itu-t ds(5) module(1)
35 authenticationFramework(7) 3}
36 -- Directory Certificate Extensions
39 FROM CertificateExtensions {joint-iso-itu-t ds(5) module(1)
40 certificateExtensions(26) 0}
41 -- IPMS Object Identifiers
42 id-sec-ipm-security-request, id-sec-security-common-fields
44 FROM IPMSObjectIdentifiers {joint-iso-itu-t mhs(6) ipms(1) modules(0)
45 object-identifiers(0) version-1999(1)};
47 -- Recipient Security Request
48 recipient-security-request IPMS-EXTENSION ::= {
49 VALUE RecipientSecurityRequest,
50 IDENTIFIED BY id-sec-ipm-security-request
53 RecipientSecurityRequest ::= BIT STRING {
54 content-non-repudiation(0), content-proof(1), ipn-non-repudiation(2),
57 -- IPN Security Response
58 ipn-security-response IPMS-EXTENSION ::= {
59 VALUE IpnSecurityResponse,
60 IDENTIFIED BY id-sec-security-common-fields
63 IpnSecurityResponse ::= SET {
65 CHOICE {original-content OriginalContent,
66 original-security-arguments
67 SET {original-content-integrity-check
68 [0] OriginalContentIntegrityCheck OPTIONAL,
69 original-message-origin-authentication-check
70 [1] OriginalMessageOriginAuthenticationCheck OPTIONAL,
71 original-message-token
72 [2] OriginalMessageToken OPTIONAL}},
73 security-diagnostic-code SecurityDiagnosticCode OPTIONAL
76 -- MTS security fields
77 OriginalContent ::= Content
79 OriginalContentIntegrityCheck ::= ContentIntegrityCheck
81 OriginalMessageOriginAuthenticationCheck ::= MessageOriginAuthenticationCheck
83 OriginalMessageToken ::= MessageToken
85 -- Security Diagnostic Codes
86 SecurityDiagnosticCode ::= INTEGER {
87 integrity-failure-on-subject-message(0),
88 integrity-failure-on-forwarded-message(1),
89 moac-failure-on-subject-message(2), unsupported-security-policy(3),
90 unsupported-algorithm-identifier(4), decryption-failed(5), token-error(6),
91 unable-to-sign-notification(7), unable-to-sign-message-receipt(8),
92 authentication-failure-on-subject-message(9),
93 security-context-failure-message(10), message-sequence-failure(11),
94 message-security-labelling-failure(12), repudiation-failure-of-message(13),
95 failure-of-proof-of-message(14), signature-key-unobtainable(15),
96 decryption-key-unobtainable(16), key-failure(17),
97 unsupported-request-for-security-service(18),
98 inconsistent-request-for-security-service(19),
99 ipn-non-repudiation-provided-instead-of-content-proof(20),
100 token-decryption-failed(21), double-enveloping-message-restoring-failure(22),
101 unauthorised-dl-member(23), reception-security-failure(24),
102 unsuitable-alternate-recipient(25), security-services-refusal(26),
103 unauthorised-recipient(27), unknown-certification-authority-name(28),
104 unknown-dl-name(29), unknown-originator-name(30), unknown-recipient-name(31),
105 security-policy-violation(32)}
107 -- Security Envelope Extensions
108 body-part-encryption-token EXTENSION ::= {
110 RECOMMENDED CRITICALITY {for-delivery},
111 IDENTIFIED BY standard-extension:43
116 SET {body-part-number BodyPartNumber,
118 CHOICE {encryption-token EncryptionToken,
119 message-or-content-body-part [0] BodyPartTokens}
122 EncryptionToken ::= SET {
123 encryption-algorithm-identifier AlgorithmIdentifier,
124 encrypted-key --ENCRYPTED{EncryptionKey}-- BIT STRING,
125 recipient-certificate-selector [0] CertificateAssertion OPTIONAL,
126 recipient-certificate [1] Certificates OPTIONAL,
127 originator-certificate-selector [2] CertificateAssertion OPTIONAL,
128 originator-certificates [3] ExtendedCertificates OPTIONAL,
132 forwarded-content-token EXTENSION ::= {
133 ForwardedContentToken,
134 RECOMMENDED CRITICALITY {for-delivery},
135 IDENTIFIED BY standard-extension:44
138 ForwardedContentToken ::=
140 SET {body-part-number BodyPartNumber,
142 CHOICE {forwarding-token MessageToken,
143 message-or-content-body-part ForwardedContentToken
146 END -- of IPMSSecurityExtensions
148 -- Generated by Asnp, the ASN.1 pretty-printer of France Telecom R&D