BT4PT-HSMTraceV1-0

Module Info

Reference: BT4PT-HSMTraceV1-0
Numeric OID: 1.3.6.1.4.1.17218.1.2.6.1.0

Exports

This module explicitly exports the following symbols:

HSMTrace hsmTraceData

Imports

From BT4PT-GeneralElementsV1-0

DATA-ELEMENT cuperEncoding

Assignments

HSMTrace

SEQUENCE

This sequence contains the following fields:

hsmId: An opaque random ID assigned to the HSM at personalisation.

OCTET STRING
This type is constrained in the following way:

Size

The length of the value must exactly: 8
keySlot: ID of the key slot of the HSM that was used to generate the signature.

INTEGER
This type is constrained in the following way:

Range

The value must be greater than or equal to: 0

The value must be less than or equal to: 255
signatureCounter: Monotonically increasing global counter of signatures performed by the HSM, encoded as a big-endian integer. Wrap-around is not permitted; once the counter reaches its limit, the HSM is considered spent. The sequence need not be contiguous; gaps are permitted between values, as long as the counter does not go backwards.

OCTET STRING
This type is constrained in the following way:

Size

The length of the value must exactly: 4

hsmTraceData

OBJECT

This is an object of the class: DATA-ELEMENT

This object has the following field values:

&id: HSM1
&Type: HSMTrace
&encoding: cuperEncoding
&Constraints: NULL

/**
* A record to include in the BT4PT barcode header IssuerSignedData to allow for tracing which HSM generated a signature.
*/
BT4PT-HSMTraceV1-0 {
    iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) uic(17218) fcb(1) bt4pt(2) hsm(6) v1(1) 0
} DEFINITIONS ::= BEGIN

EXPORTS HSMTrace, hsmTraceData;

IMPORTS DATA-ELEMENT, cuperEncoding
 FROM BT4PT-GeneralElementsV1-0 { iso(1) identified-organization(3) dod(6) internet(1) private(4) enterprise(1) uic(17218) fcb(1) bt4pt(2) general(1) v1(1) 0 };

HSMTrace ::= SEQUENCE {
    /**
    * An opaque random ID assigned to the HSM at personalisation.
    */
    hsmId               OCTET STRING (SIZE(8)),
    /**
    * ID of the key slot of the HSM that was used to generate the signature.
    */
    keySlot             INTEGER (0..255),
    /**
    * Monotonically increasing global counter of signatures performed by the HSM, encoded as a big-endian integer.
    * Wrap-around is not permitted; once the counter reaches its limit, the HSM is considered spent.
    * The sequence need not be contiguous; gaps are permitted between values, as long as the counter does not go backwards.
    */
    signatureCounter    OCTET STRING (SIZE(4))
}

hsmTraceData DATA-ELEMENT ::= { HSMTrace IDENTIFIED BY "HSM1" ENCODED WITH cuperEncoding CONSTRAINED BY NULL }

END