| (1.3.6.1.4.1.27630.2.1.1.59 DESC 'osiICardMasterKey' ) |
osiICardMasterKey attribute OID of openosi.schema for X500 / LDAP directory
Notation
This object identifier (OID) describes osiICardMasterKey attribute of openosi.schema .
ASN1 notation: {iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) openosi(27630) identification(2) schema(1) attribute(1) osiICardMasterKey(59)}
URN notation: urn:oid:1.3.6.1.4.1.27630.2.1.1.59
IETF DOT notation: 1.3.6.1.4.1.27630.2.1.1.59
BNF notation (RFC822 Backus-Naur form): ( 1.3.6.1.4.1.27630.2.1.1.59 DESC 'osiICardMasterKey' )
Description: osiICardMasterKey attribute OID of openosi.schema for X500 / LDAP directory
Definition
osiICardMasterKey attribute is a container for attributes types conforming with RFC4512 specification
.
DESC 'sha256(base64binary(ICard Master key))'
Each self-issued information card contains a random secret, called the "master key" that is used as the secret entropy for computing the token-signing key (up to 512 bits in length).
This required element contains the base64-encoded "master key" (or secret entropy) for a card from which the token-signing RSA key pair is generated for a relying party. If the card is PIN-protected, this element contains the master key encrypted with the PIN (see osiICardPinDigest). The osiICardMasterKey is used for computation of the osiPrivatePersonalID.
This element MUST contain a base64-encoded byte array comprising the encryption parameters and the encrypted master key serialized as per the structure summarized in the following table.
| Field |
Offset |
Size (bytes) |
| Version (for internal use) |
0 |
1 |
| Salt used for key-derivation method |
1 |
16 |
| Iteration count used for key-derivation method |
17 |
4 |
| Initialization Vector (IV) used for encryption |
21 |
16 |
| Encrypted master key |
37 |
Master key length |
Syntax
attributetype (1.3.6.1.4.1.27630.2.1.1.59
NAME ( 'osiICardMasterKey' 'icMasterKey' )
DESC 'sha256(base64binary(ICard Master key))'
EQUALITY octetStringMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.40
SINGLE-VALUE )
Usage
It is mentionned by the following objectclasse:
XML
<ic:RoamingStore>
<ic:RoamingInformationCard>
<ic:InformationCardMetaData>
...
</ic:InformationCardMetaData>
<ic:InformationCardPrivateData>
<ic:MasterKey> xs:base64Binary </ic:MasterKey>
...
<ic:InformationCardPrivateData>
</ic:RoamingInformationCard>
</ic:RoamingStore>
For quick OID check (when registered) go to oid-info and use the following syntax:
www.oid-info.com/get/<OID number>
OID XML format
<oid>
<asn1-notation>{iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) openosi(27630) identification(2) schema(1) attribute(1) osiICardMasterKey(59)}</asn1-notation>
<description>osiICardMasterKey attributeOID of info card for openosi.schema for X500 / LDAP directory</description>
<information>More <i>information</i> can be found in <a href="http://openosi.org/osi/display/oid/1.3.6.1.4.1.27630.2.1.1.59">osiICardMasterKey attributeOID of info card for openosi.schema for X500 / LDAP directory</a> </information>
</oid>
