H235-SECURITY-MESSAGES DEFINITIONS AUTOMATIC TAGS ::=
BEGIN

-- EXPORTS All
-- tokenOID shall be set to the value
				-- {itu-t (0) recommendation (0) h (8) 235 version (0) 2}

ChallengeString	::= OCTET STRING (SIZE(8..128))
TimeStamp			::= INTEGER(1..4294967295) -- seconds since 00:00 1/1/1970 UTC
RandomVal			::= INTEGER -- 32-bit Integer
Password				::= BMPString (SIZE (1..128))
Identifier			::= BMPString (SIZE (1..128))
KeyMaterial			::= BIT STRING(SIZE(1..2048))

NonStandardParameterH235 ::= SEQUENCE
{
	nonStandardIdentifier	OBJECT IDENTIFIER,
	data			OCTET STRING
}

-- if local octet representations of these bit strings are used they shall 
-- utilize standard Network Octet ordering (e.g. Big Endian)
DHset ::= SEQUENCE  
{
	halfkey		BIT STRING (SIZE(0..2048)), -- = g^x mod n
	modSize		BIT STRING (SIZE(0..2048)), --  n
	generator	BIT STRING (SIZE(0..2048)), -- g
	...
}

ECKASDH::= CHOICE -- parameters for elliptic curve key agreement scheme Diffie-Hellman
{
	eckasdhp SEQUENCE -- parameters for elliptic curves of prime field
	{
		public-key		BIT STRING (SIZE(0..511)), -- This field contains octet string representation of
			-- the compressed ECKAS-DHp public key value. This field contains the initiator's compressed
			-- ECKAS-DHp public key value (aP) when this information element is sent from originator to
			-- receiver. This field contains the responder's compressed ECKAS-DHp public key value (bP)
			-- when this information element is sent back from receiver to originator.
		modulus		BIT STRING (SIZE(0..511)), -- This field contains octet string representation of
			-- the ECKAS-DHp public modulus value (p).
		base			BIT STRING (SIZE(0..511)), -- This field contains octet string representation of
			-- the compressed ECKAS-DHp public base (P).
		weierstrassA		BIT STRING (SIZE(0..511)), --This field contains octet string representation of
			-- the ECKAS-DHp Weierstrass coefficient (a).
		weierstrassB		BIT STRING (SIZE(0..511)) --This field contains octet string representation of
			-- the ECKAS-DHp Weierstrass coefficient (b).
	},

	eckasdh2 SEQUENCE -- parameters for elliptic curves of characteristic 2 
	{
		public-key		BIT STRING (SIZE(0..511)), -- This field contains octet string representation of
			-- the compressed ECKAS-DH2 public key value. This field contains the initiator's compressed
			-- ECKAS-DH2 public key value (aP) when this information element is sent from originator to
			-- receiver. This field contains the responder's compressed ECKAS-DH2 public key value (bP)
			-- when this information element is sent back from receiver to originator.
		fieldSize		BIT STRING (SIZE(0..511)), -- This field contains octet string representation of
			-- the ECKAS-DH2 field size value (m).
		base			BIT STRING (SIZE(0..511)), -- This field contains octet string representation of
			-- the compressed ECKAS-DH2 public base (P).
		weierstrassA		BIT STRING (SIZE(0..511)), --This field contains octet string representation of
			-- the ECKAS-DH2 Weierstrass coefficient (a).
		weierstrassB		BIT STRING (SIZE(0..511)) --This field contains octet string representation of
			-- the ECKAS-DH2 Weierstrass coefficient (b).
	},
	...
}

ECDSAlikeSignature::= SEQUENCE -- parameters for elliptic curve digital signature algorithm
{
	r		BIT STRING (SIZE(0..511)), -- This field contains the octet string representation of the
				-- r component of the ECDSA-like digital signature.
	s		BIT STRING (SIZE(0..511)) -- This field contains the octet string representation of the
				-- s component of the ECDSA-like digital signature.
}

TypedCertificate ::= SEQUENCE
{
	type			OBJECT IDENTIFIER,
	certificate	OCTET STRING,
	...
}

AuthenticationBES ::= CHOICE
{
	default	NULL, -- encrypted ClearToken
	radius		NULL, -- RADIUS-challenge/response
	...
}
AuthenticationMechanism	 ::= CHOICE 
{
	dhExch     		NULL, -- Diffe-Hellman
	pwdSymEnc		NULL, -- password with symmetric encryption
	pwdHash		NULL, -- password with hashing
	certSign		NULL, -- Certificate with signature
	ipsec			NULL, -- IPSEC based connection
	tls			NULL,
	nonStandard 	NonStandardParameterH235, -- something else.
	...,
	authenticationBES	AuthenticationBES -- user authentication for BES
}

ClearToken		::= SEQUENCE  -- a "token" may contain multiple value types.
{	
	tokenOID  	OBJECT IDENTIFIER, 
	timeStamp		TimeStamp OPTIONAL,
	password		Password OPTIONAL,
	dhkey			DHset OPTIONAL,
	challenge		ChallengeString OPTIONAL,
	random			RandomVal OPTIONAL,
	certificate		TypedCertificate OPTIONAL,
	generalID		Identifier OPTIONAL,
	nonStandard 		NonStandardParameterH235 OPTIONAL,
	...
	eckasdhkey		ECKASDH OPTIONAL, -- elliptic curve Key Agreement Scheme-Diffie
							         -- Hellman Analogue (ECKAS-DH)
	sendersID		Identifier OPTIONAL
}
-- ALGORITHM-IDENTIFIER ::= TYPE-IDENTIFIER
--	An object identifier should be placed in the tokenOID field when a
--	ClearToken is included directly in a message (as opposed to being
--	encrypted).  In all other cases, an application should use the
--	object identifier { 0 0 } to indicate that the tokenOID value is not present.

--
-- Start all the cryptographic parameterized types here....
--

ENCRYPTED ::= SEQUENCE {
   algorithmOID  	OBJECT IDENTIFIER, 
	paramS			Params,	-- any "runtime" parameters
   encryptedData  	OCTET STRING
} 

HASHED ::= SEQUENCE {
   algorithmOID  	OBJECT IDENTIFIER, 
	paramS			Params,	-- any "runtime" parameters
   hash				BIT STRING
} 

IV8 ::= OCTET STRING (SIZE(8))
IV16 ::= OCTET STRING (SIZE(16)) -- initial value for 128-bit block ciphers

-- signing algorithm used must select one of these types of parameters 
-- needed by receiving end of signature.

Params ::= SEQUENCE {
	null		NULL,	-- no value needed
	ranInt	INTEGER OPTIONAL, -- some integer value
	iv8		IV8 OPTIONAL,	-- 8 octet initialization vector
	...
	iv16			IV16 OPTIONAL	-- 16 octet initialization vector
}

EncodedGeneralToken ::= TYPE-IDENTIFIER.&Type (ClearToken -- general usage token -- )
PwdCertToken ::= SEQUENCE  -- a `token' may contain multiple value types.
{	
	tokenOID	OBJECT IDENTIFIER,
	timeStamp	TimeStamp OPTIONAL,
	password	Password OPTIONAL,
	dhkey		DHset OPTIONAL,
	challenge	ChallengeString OPTIONAL,
	random		RandomVal OPTIONAL,
	certificate	TypedCertificate OPTIONAL,
	generalID	Identifier OPTIONAL,
	nonStandard 	NonStandardParameterH235 OPTIONAL,
	...,
	eckasdhkey		ECKASDH OPTIONAL, -- elliptic curve Key Agreement Scheme-Diffie
							         -- Hellman Analogue (ECKAS-DH)
	sendersID		Identifier OPTIONAL

}

EncodedPwdCertToken ::= TYPE-IDENTIFIER.&Type (PwdCertToken) 

CryptoToken::= CHOICE
{

	cryptoEncryptedToken SEQUENCE -- General purpose/application specific token
	{
		tokenOID  	OBJECT IDENTIFIER, 
		token 		ENCRYPTED
	},
	cryptoSignedToken  SEQUENCE -- General purpose/application specific token
	{
		tokenOID  OBJECT IDENTIFIER, 
		token 		SEQUENCE {
				   toBeSigned  	EncodedGeneralToken,
				   algorithmOID OBJECT IDENTIFIER, 
				   paramS 	Params,	-- any 'runtime' parameters
				   signature   	BIT STRING
				}
	},
	cryptoHashedToken SEQUENCE -- General purpose/application specific token
	{
		tokenOID  		OBJECT IDENTIFIER, 
		hashedVals		ClearToken,
		token HASHED 
	},
	cryptoPwdEncr 	ENCRYPTED ,
	...
}

-- These allow the passing of session keys within the H.245 OLC structure.
-- They are encoded as standalone ASN.1 and based as an OCTET STRING within H.245
H235Key	::=CHOICE  -- this is used with the H.245 "h235Key" field
{
	secureChannel	KeyMaterial,
	sharedSecret		ENCRYPTED ,
	certProtectedKey	SEQUENCE {
				   toBeSigned  	EncodedKeySignedMaterial,
				   algorithmOID OBJECT IDENTIFIER, 
				   paramS 	Params,	-- any 'runtime' parameters
				   signature   	BIT STRING
				},
	...
}

KeySignedMaterial ::= SEQUENCE {
	generalId		Identifier, -- slave's alias
	mrandom	RandomVal, -- master's random value
	srandom	RandomVal OPTIONAL, -- slave's random value
	timeStamp		TimeStamp OPTIONAL, -- master's timestamp for unsolicited EU
	encrptval	ENCRYPTED 
}
EncodedKeySignedMaterial ::= TYPE-IDENTIFIER.&Type (KeySignedMaterial)

H235CertificateSignature	::=SEQUENCE
{
	certificate			TypedCertificate,
	responseRandom		RandomVal,
	requesterRandom	RandomVal OPTIONAL,
	signature			SEQUENCE {
				   toBeSigned  	EncodedReturnSig,
				   algorithmOID OBJECT IDENTIFIER, 
				   paramS 	Params,	-- any 'runtime' parameters
				   signature   	BIT STRING
			},
	...
}

ReturnSig ::= SEQUENCE {
	generalId			Identifier, -- slave's alias
 	responseRandom 	RandomVal,
 	requestRandom 		RandomVal OPTIONAL,
 	certificate  		TypedCertificate OPTIONAL -- requested certificate
}

EncodedReturnSig ::= TYPE-IDENTIFIER.&Type (ReturnSig)
KeySyncMaterial	::= SEQUENCE
{
	generalID		Identifier,
	keyMaterial 		KeyMaterial,
	...
}
EncodedKeySyncMaterial	::=TYPE-IDENTIFIER.&Type (KeySyncMaterial)


END	-- End of H235-SECURITY-MESSAGES DEFINITIONS