Normative · Part
References
Normative
Section titled “Normative”- [RFC 2119] — Bradner, S. “Key words for use in RFCs to Indicate Requirement Levels.” BCP 14, RFC 2119.
- [RFC 8174] — Leiba, B. “Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words.” BCP 14, RFC 8174.
- [RFC 8949] — Bormann, C., Hoffman, P. “Concise Binary Object Representation (CBOR).” STD 94, RFC 8949. Section 4.2.1 supplies the deterministic encoding.
- [RFC 9052] — Schaad, J. “CBOR Object Signing and Encryption (COSE): Structures and Process.” STD 96, RFC 9052.
- [RFC 9053] — Schaad, J. “CBOR Object Signing and Encryption (COSE): Initial Algorithms.” RFC 9053. Defines
ES256and its fixed-width signature encoding. - [RFC 6979] — Pornin, T. “Deterministic Usage of the Digital Signature Algorithm (DSA) and Elliptic Curve Digital Signature Algorithm (ECDSA).” RFC 6979. Required of software signers by the substrate signature profile; a secure element cannot be held to it, which is why event identity is a signing-instance identifier.
- [SEC 1] — Standards for Efficient Cryptography Group. “SEC 1: Elliptic Curve Cryptography.” Version 2.0. Supplies the 33-byte compressed point encoding every node root public key is pinned to.
- [SP 800-186] — Chen, L., Moody, D., Regenscheid, A., Robinson, A., Randall, K. “Recommendations for Discrete Logarithm-based Cryptography: Elliptic Curve Domain Parameters.” NIST SP 800-186. Defines the P-256 curve.
- [RFC 8032] — Josefsson, S., Liusvaara, I. “Edwards-Curve Digital Signature Algorithm (EdDSA).” RFC 8032. Retained for the Ed25519 channel keys of the default binding profile only; node root signatures are ES256.
- [RFC 7748] — Langley, A., Hamburg, M., Turner, S. “Elliptic Curves for Security.” RFC 7748.
- [RFC 5869] — Krawczyk, H., Eronen, P. “HMAC-based Extract-and-Expand Key Derivation Function (HKDF).” RFC 5869.
- [RFC 6234] — Eastlake, D., Hansen, T. “US Secure Hash Algorithms (SHA and SHA-based HMAC and HKDF).” RFC 6234. Referenced via HKDF-SHA256.
- BLAKE3 — O’Connor, J., Aumasson, J-P., Neves, S., Wilcox-O’Hearn, Z. “BLAKE3: One function, fast everywhere.”
Informative
Section titled “Informative”- [RFC 9420] — Barnes, R., et al. “The Messaging Layer Security (MLS) Protocol.” RFC 9420. Relevant where SOP/1 is deployed.
- [RFC 9750] — Beurdouche, B., et al. “The Messaging Layer Security (MLS) Architecture.” RFC 9750. The Delivery Service abstraction that the mailbox contract aligns with.
- [RFC 7250] — Wouters, P., et al. “Using Raw Public Keys in Transport Layer Security (TLS).” RFC 7250. The authentication shape of the default binding profile.
- [SOP/1] — The Sovereign Object Plane, the layer above this one.