## Digitally sign PSKC data

PSKC files can be integrity protected and authenticated using XML Digital Signatures. We support using a X.509 end-entity certificate together with a private key. To verify the signature, you will need to supply the issuer of the end-entity certificate as a trusted root. To illustrate this, we first show how to generate example root and end-entity private keys and certificates using GnuTLS. First generate the root private key and certificate:

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    45
    46
    47
    48
    49
    50
    51
    52
    53
    54
    55
    56
    57
    58
    59
    60
    61
    62
    63
    64
    65
    66
    67
    68
    69
    70
    71
    72
    73
    74
    75
    76
    77
    78
    79
    80
    81
    82
    jas@latte:~$ certtool --generate-privkey --outfile pskc-root-key.pem
    Generating a 2432 bit RSA private key...
    jas@latte:~$ certtool --generate-self-signed --load-privkey pskc-root-key.pem --outfile pskc-root-crt.pem
    Generating a self signed certificate...
    Please enter the details of the certificate's distinguished name. Just press enter to ignore a field.
    Country name (2 chars):
    Organization name:
    Organizational unit name:
    Locality name:
    State or province name:
    Common name: My PSKC root
    UID:
    This field should not be used in new certificates.
    E-mail:
    Enter the certificate's serial number in decimal (default: 1350939670):

    Activation/Expiration time.
    The certificate will expire in (days): 100

    Extensions.
    Does the certificate belong to an authority? (y/N): y
    Path length constraint (decimal, -1 for no constraint):
    Is this a TLS web client certificate? (y/N):
    Will the certificate be used for IPsec IKE operations? (y/N):
    Is this also a TLS web server certificate? (y/N):
    Enter the e-mail of the subject of the certificate:
    Will the certificate be used to sign other certificates? (y/N): y
    Will the certificate be used to sign CRLs? (y/N):
    Will the certificate be used to sign code? (y/N):
    Will the certificate be used to sign OCSP requests? (y/N):
    Will the certificate be used for time stamping? (y/N):
    Enter the URI of the CRL distribution point:
    X.509 Certificate Information:
    	Version: 3
    	Serial Number (hex): 5085b416
    	Validity:
    		Not Before: Mon Oct 22 21:01:11 UTC 2012
    		Not After: Wed Jan 30 21:01:13 UTC 2013
    	Subject: CN=My PSKC root
    	Subject Public Key Algorithm: RSA
    	Certificate Security Level: Normal
    		Modulus (bits 2432):
    			00:d3:cf:07:f9:75:df:61:91:a4:a9:e2:a6:54:fa:48
    			b1:70:8c:a1:83:4e:ce:fa:01:d7:01:96:7a:5f:57:27
    			1a:5a:fb:02:f4:50:b5:40:b6:67:8a:63:e3:60:8f:ed
    			6e:9d:40:df:46:0d:8c:42:31:d9:74:08:f9:7d:48:fc
    			e2:21:2e:fe:fd:e1:02:55:54:b5:6e:57:f8:5f:a0:8c
    			81:5e:ca:5c:bd:64:41:5d:71:b5:81:84:1b:dc:36:75
    			cc:19:62:19:f1:36:ed:00:98:13:5c:ce:3b:8c:ba:f9
    			7f:9f:21:20:c2:0d:08:4e:e5:08:ad:5c:83:4e:c3:7c
    			2a:4d:e0:7c:45:d2:b6:b9:42:8b:de:48:5f:60:2d:2e
    			18:a7:f5:da:81:cf:24:d6:de:6d:31:07:63:20:d9:5e
    			7c:ba:88:fa:1b:d8:98:3c:ab:05:4e:ca:a8:60:8d:6e
    			9c:13:35:01:23:82:53:36:5b:e1:01:62:7f:ce:41:d1
    			74:67:1b:f8:60:4b:87:e4:2c:52:6a:0a:67:4c:0d:27
    			80:2d:6d:f7:2e:6f:2e:12:fb:d2:09:dc:d9:11:b1:b8
    			c0:a4:34:00:3b:a0:87:c7:f2:2f:7f:30:6a:b6:c7:f1
    			96:fc:6f:de:df:40:ac:2b:1a:d7:24:18:ae:1a:d7:8a
    			4b:6b:a8:93:36:af:72:0e:93:15:30:47:fa:58:8a:4e
    			97:86:14:a0:ef:84:46:5f:b4:a1:cd:98:d5:eb:97:fb
    			4e:94:10:08:ba:c6:3f:57:0d:ef:1b:1b:21:af:4a:bd
    			e7
    		Exponent (bits 24):
    			01:00:01
    	Extensions:
    		Basic Constraints (critical):
    			Certificate Authority (CA): TRUE
    		Key Usage (critical):
    			Certificate signing.
    		Subject Key Identifier (not critical):
    			1f2507c525358817404c90b7f36e3b97dbbec098
    Other Information:
    	Public Key Id:
    		1f2507c525358817404c90b7f36e3b97dbbec098

    Is the above information ok? (y/N): y

    Signing certificate...
    jas@latte:~$

Next we generate a private key and certificate for the end-entity that will sign the PSKC data.

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    45
    46
    47
    48
    49
    50
    51
    52
    53
    54
    55
    56
    57
    58
    59
    60
    61
    62
    63
    64
    65
    66
    67
    68
    69
    70
    71
    72
    73
    74
    75
    76
    77
    78
    79
    jas@latte:~$ certtool --generate-privkey --outfile pskc-ee-key.pem
    Generating a 2432 bit RSA private key...
    jas@latte:~$ certtool --generate-certificate --load-ca-privkey pskc-root-key.pem --load-ca-certificate pskc-root-crt.pem --load-privkey pskc-ee-key.pem --outfile pskc-ee-crt.pem
    Generating a signed certificate...
    Please enter the details of the certificate's distinguished name. Just press enter to ignore a field.
    Country name (2 chars):
    Organization name:
    Organizational unit name:
    Locality name:
    State or province name:
    Common name: My PSKC end entity
    UID:
    This field should not be used in new certificates.
    E-mail:
    Enter the certificate's serial number in decimal (default: 1350939833):

    Activation/Expiration time.
    The certificate will expire in (days): 50

    Extensions.
    Does the certificate belong to an authority? (y/N):
    Is this a TLS web client certificate? (y/N):
    Will the certificate be used for IPsec IKE operations? (y/N):
    Is this also a TLS web server certificate? (y/N):
    Enter the e-mail of the subject of the certificate:
    Will the certificate be used for signing (required for TLS)? (y/N): y
    Will the certificate be used for encryption (not required for TLS)? (y/N):
    X.509 Certificate Information:
    	Version: 3
    	Serial Number (hex): 5085b4b9
    	Validity:
    		Not Before: Mon Oct 22 21:03:54 UTC 2012
    		Not After: Tue Dec 11 21:03:57 UTC 2012
    	Subject: CN=My PSKC end entity
    	Subject Public Key Algorithm: RSA
    	Certificate Security Level: Normal
    		Modulus (bits 2432):
    			00:c4:4c:2b:8d:33:29:14:0f:4b:49:f5:8e:0c:f6:5b
    			9f:0f:e3:17:aa:c5:77:8d:d4:64:16:c4:d4:4d:7d:04
    			2d:0d:14:78:77:ba:4c:3c:bd:5c:46:9e:d0:24:b9:bb
    			3d:92:2c:21:29:c3:e6:ea:5f:4e:e7:2e:60:c6:0e:0e
    			fe:a3:ac:94:e9:0e:bf:84:8f:3b:db:97:45:2b:72:58
    			07:0b:1f:5a:4e:b3:c6:e4:99:32:8a:56:a7:40:6e:a5
    			93:62:99:9d:eb:5e:64:20:8a:bc:de:4d:9e:e3:62:22
    			b4:6f:c8:50:c1:09:42:a8:90:c1:76:75:57:05:ab:b0
    			f9:f6:e8:26:73:23:45:c4:3e:31:2b:3a:d0:23:db:42
    			d7:1b:d2:57:be:16:cc:71:4d:2b:b1:4f:59:88:0f:29
    			9f:ff:b8:05:4a:f7:8f:c6:c4:cb:a0:77:6d:0b:35:5b
    			35:7a:ad:d3:d7:1b:b4:dd:dc:d8:a0:8d:ab:fb:c0:ab
    			ec:1b:37:47:0b:06:d9:14:1f:f2:fc:bb:3d:ed:2d:5e
    			b4:a5:cb:ec:4e:ab:ba:52:02:40:21:a6:8e:3e:3b:78
    			0f:a7:73:62:30:4b:05:72:2a:71:1a:81:31:d5:e4:c4
    			12:e9:7e:95:a2:9c:1f:53:2f:bb:f0:33:ce:37:c4:58
    			fc:da:35:2b:09:18:3c:94:21:d3:7d:d9:d9:b0:ce:d0
    			b9:c8:77:b5:e1:ce:9b:83:7c:e5:84:7d:4e:64:5f:c0
    			2b:db:1a:0e:06:47:e4:24:44:ed:14:05:49:6f:17:78
    			e3
    		Exponent (bits 24):
    			01:00:01
    	Extensions:
    		Basic Constraints (critical):
    			Certificate Authority (CA): FALSE
    		Key Usage (critical):
    			Digital signature.
    		Subject Key Identifier (not critical):
    			0d8aed9f4ed4e2c3e12f7ca45fc6e8c8f56bb9c2
    		Authority Key Identifier (not critical):
    			1f2507c525358817404c90b7f36e3b97dbbec098
    Other Information:
    	Public Key Id:
    		0d8aed9f4ed4e2c3e12f7ca45fc6e8c8f56bb9c2

    Is the above information ok? (y/N): y

    Signing certificate...
    jas@latte:~$

At this point, we have the following files:

- "pskc-root-key.pem" root private key;

- "pskc-root-crt.pem" root certificate;

- "pskc-ee-key.pem" end entity private key;

- "pskc-ee-crt.pem" end entity certificate.

Let's use these files to digitally sign the following PSKC data, stored in a file "pskc-hotp.xml".

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    <?xml version="1.0" encoding="UTF-8"?>
    <KeyContainer Version="1.0"
    	      xmlns="urn:ietf:params:xml:ns:keyprov:pskc">
      <KeyPackage>
        <DeviceInfo>
          <Manufacturer>Manufacturer</Manufacturer>
          <SerialNo>987654321</SerialNo>
        </DeviceInfo>
        <Key Id="12345678"
             Algorithm="urn:ietf:params:xml:ns:keyprov:pskc:hotp">
          <AlgorithmParameters>
            <ResponseFormat Length="8" Encoding="DECIMAL"/>
          </AlgorithmParameters>
          <Data>
            <Secret>
              <PlainValue>MTIzNDU2Nzg5MDEyMzQ1Njc4OTA=
              </PlainValue>
            </Secret>
            <Counter>
              <PlainValue>0</PlainValue>
            </Counter>
          </Data>
        </Key>
      </KeyPackage>
    </KeyContainer>

The --sign mode flag requires the --sign-key and --sign-crt which specify the private key and certificate to use for signing.

    1
    2
    $ pskctool --sign --sign-key pskc-ee-key.pem --sign-crt pskc-ee-crt.pem pskc-hotp.xml > pskc-hotp-signed.xml
    $

Below is the signed XML output. As you can see, due to the signature it becomes rather unreadable. You may use "pskctool --info" to analyse it, or "pskctool --info --verbose --quiet" to print indented XML (however that will invalidate signature).

    1
    2
    3
    4
    5
    6
    7
    8
    9
    10
    11
    12
    13
    14
    15
    16
    17
    18
    19
    20
    21
    22
    23
    24
    25
    26
    27
    28
    29
    30
    31
    32
    33
    34
    35
    36
    37
    38
    39
    40
    41
    42
    43
    44
    <?xml version="1.0"?>
    <KeyContainer xmlns="urn:ietf:params:xml:ns:keyprov:pskc" Version="1.0"><KeyPackage><DeviceInfo><Manufacturer>Manufacturer</Manufacturer><SerialNo>987654321</SerialNo></DeviceInfo><Key Id="12345678" Algorithm="urn:ietf:params:xml:ns:keyprov:pskc:hotp"><AlgorithmParameters><ResponseFormat Encoding="DECIMAL" Length="8"/></AlgorithmParameters><Data><Secret><PlainValue>MTIzNDU2Nzg5MDEyMzQ1Njc4OTA=</PlainValue></Secret><Counter><PlainValue>0</PlainValue></Counter></Data></Key></KeyPackage><Signature xmlns="http://www.w3.org/2000/09/xmldsig#">
    <SignedInfo>
    <CanonicalizationMethod Algorithm="http://www.w3.org/2001/10/xml-exc-c14n#"/>
    <SignatureMethod Algorithm="http://www.w3.org/2000/09/xmldsig#rsa-sha1"/>
    <Reference>
    <Transforms>
    <Transform Algorithm="http://www.w3.org/2000/09/xmldsig#enveloped-signature"/>
    </Transforms>
    <DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha1"/>
    <DigestValue>scw48LN8ec/vu7/f7F1AGcfjDpI=</DigestValue>
    </Reference>
    </SignedInfo>
    <SignatureValue>HYDZFC205862s+zoas+Ny6h0ckDJmqDGz81lEPjvjGcN1AYzT7PATsIUVure0QNl
    Kvt2TxdSDgnYlWwAJWjAtmp0UHRzF6hsmDl7WiHpeCkfxpwvdz8K469rbLPUwB6I
    Zyfx/msTwJGbycPek9SFoaEqn8G7oNU59UH1HjDO0ERyKXhkiIrRaIWfGdqy4v0z
    xYbPnAvzdHcEBdVOVQ3d+zeR/3nWGINjmxPnYGiCrY4YoktKm/VPNw3yuo3CNTIs
    N4Vs4rjNVr7NcplFKLOmBBsQwKRg3JXnVW7kQu9ZonJyJEeDoNXdrG8uCa7EYT+s
    eh6486o/Wvb7oUVbUN3JW5VRTnVK8YNOwAnxB1fTa92pJwffLB+knBlzVNteWCyA
    BciIcboYbMdxLVmNKcF5pA==</SignatureValue>
    <KeyInfo>
    <X509Data>
    <X509Certificate>MIIDdzCCAi+gAwIBAgIEUOYFHTANBgkqhkiG9w0BAQsFADAXMRUwEwYDVQQDEwxN
    eSBQU0tDIHJvb3QwIhgPMjAxMzAxMDMyMjI0MzBaGA8yMjg2MTAxOTIyMjQzMlow
    HTEbMBkGA1UEAxMSTXkgUFNLQyBlbmQgZW50aXR5MIIBUjANBgkqhkiG9w0BAQEF
    AAOCAT8AMIIBOgKCATEAxEwrjTMpFA9LSfWODPZbnw/jF6rFd43UZBbE1E19BC0N
    FHh3ukw8vVxGntAkubs9kiwhKcPm6l9O5y5gxg4O/qOslOkOv4SPO9uXRStyWAcL
    H1pOs8bkmTKKVqdAbqWTYpmd615kIIq83k2e42IitG/IUMEJQqiQwXZ1VwWrsPn2
    6CZzI0XEPjErOtAj20LXG9JXvhbMcU0rsU9ZiA8pn/+4BUr3j8bEy6B3bQs1WzV6
    rdPXG7Td3Nigjav7wKvsGzdHCwbZFB/y/Ls97S1etKXL7E6rulICQCGmjj47eA+n
    c2IwSwVyKnEagTHV5MQS6X6VopwfUy+78DPON8RY/No1KwkYPJQh033Z2bDO0LnI
    d7XhzpuDfOWEfU5kX8Ar2xoOBkfkJETtFAVJbxd44wIDAQABo2EwXzAMBgNVHRMB
    Af8EAjAAMA8GA1UdDwEB/wQFAwMHgAAwHQYDVR0OBBYEFHYGbZIa17d44czfdCkT
    Mn+rWSBNMB8GA1UdIwQYMBaAFNLIhrjU/J0jWFX4rjsfsUkz1PQcMA0GCSqGSIb3
    DQEBCwUAA4IBMQCxI1JOMqwgi/mj9KNutqGbTHdgKptt9lBylilwjMaNaY2lZe8S
    5XNg9SoupGr1xBbMsDwWLILSuwPiedbn50fBpAAUW31WKKio6xRCJVmWeo0iY0Cr
    rIXbwqKhnBP943U4Ch31oEbZtbo+XRbiq11wv6dLNsi76TNGDqsjTKgEcSIYI6Vd
    rMxnil6ChoIBvSSPGHhJuj1bW1EPW92JtIa6byrAj1m4RwSviQy2i65YoIdtrhRt
    CWekj2zuL/0szv5rZMCCvxioOCA8znqELEPMfs0Aa/cACD2MZcC4gGXehNCvzYJr
    TmB6lFpxP6f0g6eO7PVcqYN9NCwECxb5Cvx2j2uNlereY35/9oPR6YJx+V7sL+DB
    n6F0mN8OUAFxDamepKdGRApU8uZ35624o/I4</X509Certificate>
    </X509Data>
    </KeyInfo>
    </Signature></KeyContainer>