|
UDIF: Universal Digital Identification Framework 1.0.0.0a (A1)
A quantum-secure cryptographic identification
|
Serialized token container with optional envelope protection. More...
#include <udif.h>
Data Fields | |
| uint8_t | signature [UDIF_ASYMMETRIC_SIGNATURE_SIZE] |
| uint8_t | payload [UDIF_CAPABILITY_TOKEN_MAX_SIZE] |
| uint8_t | chash [UDIF_CRYPTO_HASH_SIZE] |
| udif_token_header | head |
| udif_identity_id | subject |
| udif_capability_mask | caps |
| udif_permission_mask | perms |
| uint32_t | paylen |
Serialized token container with optional envelope protection.
If kem != udif_kem_none, the payload is a KEM-enveloped blob; otherwise it is plaintext with a signature/MAC, depending on policy.
| udif_capability_mask caps |
Capabilities conveyed (if applicable)
| uint8_t chash[UDIF_CRYPTO_HASH_SIZE] |
Canonical token hash
| udif_token_header head |
Common token header
| uint32_t paylen |
Payload length in bytes
| uint8_t payload[UDIF_CAPABILITY_TOKEN_MAX_SIZE] |
Serialized payload (claims subset, attestations, etc.)
| udif_permission_mask perms |
Permissions conveyed (if applicable)
| uint8_t signature[UDIF_ASYMMETRIC_SIGNATURE_SIZE] |
Issuer signature over token
| udif_identity_id subject |
Subject to whom the token applies