Format of CMS Signed Data

Version = “1” or “3”

Set of Per-Signer Info Values

Digest Algorithm ID

Encapsulated Content Info

. . .

Set of Digest Algorithms

Signer Information

CMS Signed-Data Object

Certificates (optional)

. . .

CRLs (optional)

• Digest algorithm IDs precede signed content — and per-signer fields follow signed content — so that recipient UA may process signed data in one pass

• May have one signer

• May have two or more

• May have no signers!

  • Why none? Details will follow.

Previous slide

Next slide

Back to first slide

View graphic version