The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
{
"cases" : [
{
"draws" : [
{
"hex" : "4ac572f0da468da3d8d79c10898d04e7cad4b3e241dac31f6b9d0aab810056d2" ,
"n" : 32
} ,
{
"hex" : "5b0482aff309bd4164bd0e1cecd77d0c" ,
"n" : 16
} ,
{
"hex" : "74f807b7f943304778e2e152cbad64d15287df938003901f9553d9348dc35d86" ,
"n" : 32
} ,
{
"hex" : "6f74cfcefef21a87cb4dc897ab8756d3" ,
"n" : 16
} ,
{
"hex" : "9363730807b18201f44844dd8395e727" ,
"n" : 16
} ,
{
"hex" : "e85968ffb40674e9d46ecb3724ee267d" ,
"n" : 16
} ,
{
"hex" : "59505b7c3a6a568c873ab62b0bff6205" ,
"n" : 16
} ,
{
"hex" : "a8e351aaad44aaf1cb0e8b6cc2987cc4" ,
"n" : 16
} ,
{
"hex" : "64195a9b33a7c777d12a9c0413e7fe73" ,
"n" : 16
} ,
{
"hex" : "1408e5fd4feafb6c7587bc122644f249" ,
"n" : 16
} ,
{
"hex" : "4f523120045e660ebbb05fc31a463561" ,
"n" : 16
} ,
{
"hex" : "db5f6ebfbcd29668d929642b3f31d1ee" ,
"n" : 16
} ,
{
"hex" : "00e6fd48a6fe79f992dc5f32d32163acdf459a8bb9312131fb17da02b90048d0" ,
"n" : 32
} ,
{
"hex" : "b1393d97c7d367b3b43ebfda9e98f8ca" ,
"n" : 16
}
] ,
"hooks" : {
"author_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a623530396333613664373031633136623838636166646336333863363634343463336263316436356566626436373237303136366631623034666364366363390a" ,
"author_public" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"author_signature" : "fe0151cf40957c528692b9042767c199a2f11b91bbda35ab88552645b0d1023c87720e022896ea3daa958a93c529b142af3fc3d0bc6bbe8df348616cfa4dbe02"
} ,
"opened" : {
"area_len" : 32768 ,
"author_key" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"files" : [
{
"path" : "fotos/año 2026.txt" ,
"sha256" : "008bcdd384dfa24ec241d63408bd854ac9bdedd42e26b48fdfda1a6c43ecc386" ,
"size" : 29
} ,
{
"path" : "nota.txt" ,
"sha256" : "0397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"size" : 6
}
] ,
"head" : "a6006d646174656b6579732d6865616401010258204ac572f0da468da3d8d79c10898d04e7cad4b3e241dac31f6b9d0aab810056d203754669726d61646f20636f6e206d6920636c6176652e046a416e61204cc3b370657a0582a50073666f746f732f61c3b16f20323032362e74787401181d020003181d045820008bcdd384dfa24ec241d63408bd854ac9bdedd42e26b48fdfda1a6c43ecc386a500686e6f74612e747874010602181d0318230458200397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"length" : 33024 ,
"lines" : [
"Firmado con la clave dkauthor1pdrcy0n3p9watxl83tp8r3tkauuflpakg4s6kp70nf8te5pdypqszvracp. No prueba quién la tiene."
] ,
"result" : "ok" ,
"verdicts" : [
"F4" ,
"S0"
]
} ,
"opened_saved" : {
"area_len" : 32768 ,
"author_key" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"files" : [
{
"path" : "fotos/año 2026.txt" ,
"sha256" : "008bcdd384dfa24ec241d63408bd854ac9bdedd42e26b48fdfda1a6c43ecc386" ,
"size" : 29
} ,
{
"path" : "nota.txt" ,
"sha256" : "0397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"size" : 6
}
] ,
"head" : "a6006d646174656b6579732d6865616401010258204ac572f0da468da3d8d79c10898d04e7cad4b3e241dac31f6b9d0aab810056d203754669726d61646f20636f6e206d6920636c6176652e046a416e61204cc3b370657a0582a50073666f746f732f61c3b16f20323032362e74787401181d020003181d045820008bcdd384dfa24ec241d63408bd854ac9bdedd42e26b48fdfda1a6c43ecc386a500686e6f74612e747874010602181d0318230458200397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"length" : 33024 ,
"lines" : [
"Firmado con la clave que guardaste como mi clave de 2026."
] ,
"result" : "ok" ,
"verdicts" : [
"F3" ,
"S0"
]
} ,
"recipe" : {
"name" : "alg 1" ,
"seed" : "signing alg 1" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"comment" : "Firmado con mi clave." ,
"author" : "Ana López" ,
"author_key" : {
"seed" : "a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0"
}
} ,
"written" : {
"body_length" : 33024 ,
"capsule_id" : "5b0482aff309bd4164bd0e1cecd77d0c" ,
"length" : 35611 ,
"sha256" : "bb1c5667ab389ae10009c0f28158f4a471fe96f379cf17fbe5f0fb9b4c5a6f71"
}
} ,
{
"draws" : [
{
"hex" : "ee5c65c322cb0d938145cfd46500a378c5d5206a9f9fef75e3760a8fe80eb30d" ,
"n" : 32
} ,
{
"hex" : "df1565489bbd8d7334907295ae616b25" ,
"n" : 16
} ,
{
"hex" : "897c8b7d4987a04a32f0bd315d755284ea162e8b4ae71c88b5674883c72c408d" ,
"n" : 32
} ,
{
"hex" : "493ac0213e02074ce1d9eb163a74cc33" ,
"n" : 16
} ,
{
"hex" : "6fb54794c805c6fd0c1b3f7e676a2c67" ,
"n" : 16
} ,
{
"hex" : "e9a05451d5b45bfb056fe4c7233e9e49" ,
"n" : 16
} ,
{
"hex" : "188b8bef81c4e944fa1c6051221f2452" ,
"n" : 16
} ,
{
"hex" : "b447a2a3b6dd52217f26539c7a59e38d" ,
"n" : 16
} ,
{
"hex" : "39a2dddd97a59781895345e2e40c87e6" ,
"n" : 16
} ,
{
"hex" : "f43c3e2bd217eb5186ba8e0877f1b6c7" ,
"n" : 16
} ,
{
"hex" : "3fc245297d6a2c5c3a4d0bd8a31ff665" ,
"n" : 16
} ,
{
"hex" : "7d5237526b70a44a77e467fbe77f651f" ,
"n" : 16
} ,
{
"hex" : "7a3feb342b641c1949dc1205d7f584aff904ad9e6d194abbf6fc3cda444f3333" ,
"n" : 32
} ,
{
"hex" : "995c65068983522bc306567c6fb29ba3" ,
"n" : 16
}
] ,
"hooks" : {
"author_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a643636303261616661346238393338336363396638333237323462373633653038303539333766333462633865326664383865623630393539306230343536370a" ,
"author_public" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"author_signature" : "0a7b73331c5f3473ebffc0861dafcb32d12fc49247b8f4aaeded563a50938dca88fadfad46a1077aee985f618ef946809398b7630ccd1f8b3a145ec07453aa0b" ,
"seal_subject" : "c34bdfe9be5f616099af03551691d8df20ac7a44d88c0d8a003cf114a706d8d2" ,
"seal_token" : "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"
} ,
"opened" : {
"area_len" : 32768 ,
"author_key" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"files" : [
{
"path" : "fotos/año 2026.txt" ,
"sha256" : "008bcdd384dfa24ec241d63408bd854ac9bdedd42e26b48fdfda1a6c43ecc386" ,
"size" : 29
} ,
{
"path" : "nota.txt" ,
"sha256" : "0397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"size" : 6
}
] ,
"head" : "a4006d646174656b6579732d686561640101025820ee5c65c322cb0d938145cfd46500a378c5d5206a9f9fef75e3760a8fe80eb30d0582a50073666f746f732f61c3b16f20323032362e74787401181d020003181d045820008bcdd384dfa24ec241d63408bd854ac9bdedd42e26b48fdfda1a6c43ecc386a500686e6f74612e747874010602181d0318230458200397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"length" : 32989 ,
"lines" : [
"Firmado con la clave dkauthor1pdrcy0n3p9watxl83tp8r3tkauuflpakg4s6kp70nf8te5pdypqszvracp. No prueba quién la tiene." ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
] ,
"result" : "ok" ,
"verdicts" : [
"F4" ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"S5"
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
]
} ,
"opened_saved" : {
"area_len" : 32768 ,
"author_key" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"files" : [
{
"path" : "fotos/año 2026.txt" ,
"sha256" : "008bcdd384dfa24ec241d63408bd854ac9bdedd42e26b48fdfda1a6c43ecc386" ,
"size" : 29
} ,
{
"path" : "nota.txt" ,
"sha256" : "0397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"size" : 6
}
] ,
"head" : "a4006d646174656b6579732d686561640101025820ee5c65c322cb0d938145cfd46500a378c5d5206a9f9fef75e3760a8fe80eb30d0582a50073666f746f732f61c3b16f20323032362e74787401181d020003181d045820008bcdd384dfa24ec241d63408bd854ac9bdedd42e26b48fdfda1a6c43ecc386a500686e6f74612e747874010602181d0318230458200397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"length" : 32989 ,
"lines" : [
"Firmado con la clave que guardaste como mi clave de 2026." ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
] ,
"result" : "ok" ,
"verdicts" : [
"F3" ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"S5"
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
]
} ,
"recipe" : {
"name" : "alg 1 and a seal" ,
"seed" : "signing alg 1 and a seal" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"author_key" : {
"seed" : "a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0"
} ,
"sealer" : { }
} ,
"written" : {
"body_length" : 32989 ,
"capsule_id" : "df1565489bbd8d7334907295ae616b25" ,
"length" : 35611 ,
"sha256" : "55e4e4abab2c387332dcb8cbfd0d48b15f104420babfa139d9903721b51962fe"
}
} ,
{
"draws" : [
{
"hex" : "c944701abb1663d609faca5377e5409ef4e9db9837745f3a2549cf00fb33bb92" ,
"n" : 32
} ,
{
"hex" : "4608ced88c11bc22abfe9ad3ee5c9553" ,
"n" : 16
} ,
{
"hex" : "f2ac920e5862ec3bb72f8aadb307ff872678b31be611a1232494da33d3692e19" ,
"n" : 32
} ,
{
"hex" : "c194fb503b48019baecc97620d83c492" ,
"n" : 16
} ,
{
"hex" : "92568f55c5d76fcc4f70a936274e1ceb" ,
"n" : 16
} ,
{
"hex" : "aaf14a7189fb4f0ab96fa5063da6f66f" ,
"n" : 16
} ,
{
"hex" : "1be3e11078a650554928aa27a6bae19a" ,
"n" : 16
} ,
{
"hex" : "67b96c2e96bfc928e1c942b90e52090a" ,
"n" : 16
} ,
{
"hex" : "c9bd38011c6657e3933058a0ac002b3a" ,
"n" : 16
} ,
{
"hex" : "5f422925c37aea87e35736d00afbc013" ,
"n" : 16
} ,
{
"hex" : "a4aa7116db465af5dbdc0d9392113232" ,
"n" : 16
} ,
{
"hex" : "cb2f07ccfbc32b7a07f96094e75705c9" ,
"n" : 16
} ,
{
"hex" : "b5ef2a889337ab916acdbb287de7760e68a8e47c46f2b9254a54d853d389d7e1" ,
"n" : 32
} ,
{
"hex" : "4a82a74e5b01867e0f2caed4b83d2d20" ,
"n" : 16
}
] ,
"hooks" : {
"seal_subject" : "b4e6f99420f6e54ebc8ee31be678485cc1b88246a9b2c4e2f6f2d5c0eff8f56f" ,
"seal_token" : "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"
} ,
"opened" : {
"area_len" : 32768 ,
"files" : [
{
"path" : "nota.txt" ,
"sha256" : "0397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"size" : 6
}
] ,
"head" : "a4006d646174656b6579732d686561640101025820c944701abb1663d609faca5377e5409ef4e9db9837745f3a2549cf00fb33bb920581a500686e6f74612e7478740106020003060458200397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"length" : 32893 ,
"lines" : [
"Sin firma de autor." ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
] ,
"result" : "ok" ,
"verdicts" : [
"F0" ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"S5"
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
]
} ,
"recipe" : {
"name" : "a seal alone" ,
"seed" : "signing a seal alone" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
}
] ,
"sealer" : { }
} ,
"written" : {
"body_length" : 32893 ,
"capsule_id" : "4608ced88c11bc22abfe9ad3ee5c9553" ,
"length" : 35611 ,
"sha256" : "df8daebf52452e654f0c08f1c5313ed97688824268d26dfd9aea0c67efd846c4"
}
} ,
{
"draws" : [
{
"hex" : "7403a02db82138f4debe81c7deb69d1a9ec2a6694a74a96c940e99c794cb0fc0" ,
"n" : 32
} ,
{
"hex" : "80fb6269593ef4651325368e5ff6a312" ,
"n" : 16
} ,
{
"hex" : "83c0fe102c16d2e17010c061a8080d5756b936a9128e9984859959921390f2e9" ,
"n" : 32
} ,
{
"hex" : "f1a828a20dbd61f4893828441665c263" ,
"n" : 16
} ,
{
"hex" : "219a7a9c23844f695cc00c115f8c3070" ,
"n" : 16
} ,
{
"hex" : "8518b38a434e1f2044b5dcef85f82d14" ,
"n" : 16
} ,
{
"hex" : "e11442e7ed42c122ccb306245126e4e9" ,
"n" : 16
} ,
{
"hex" : "31e0d8befbe9d5ebeee0e7e8b1acc450" ,
"n" : 16
} ,
{
"hex" : "6d7d89742c3a26de0ada2d5f724c18d9" ,
"n" : 16
} ,
{
"hex" : "345efd9d133e0de9f298a8a661d1b26f" ,
"n" : 16
} ,
{
"hex" : "0854927592d8590e37eb762f9e1dce42" ,
"n" : 16
} ,
{
"hex" : "14413bb48ea67bd28ae257ebd6ee857f" ,
"n" : 16
} ,
{
"hex" : "7bcc02dd199aa3140cd8d264917c48a9f1acc36ac48bdf75f482bf192ea9d156" ,
"n" : 32
} ,
{
"hex" : "b528840cff1a8510e036e7059f455eff" ,
"n" : 16
}
] ,
"hooks" : {
"cms_der" : " 30820e8206092 a 864886 f 70 d 0 10702 a 0 820e7330820 e 6 f 0 20101310 d 300 b 0 609608648016503040201300 b 0 6092 a 864886 f 70 d 0 10701 a 0 820485308201773082011 d a 0 0 302010202080 a 2 d 17 d 0 344 c 4223300 a 0 6082 a 8648 c e 3 d 0 40302302 d 31163014060355040 a 130 d 446174654 b 65797320746573743113301106035504030 c 0 a 416e61204 c c 3 b 370657 a 301e170 d 3230303130313030303030305 a 170 d 3430303130313030303030305 a 302 d 31163014060355040 a 130 d 446174654 b 65797320746573743113301106035504030 c 0 a 416e61204 c c 3 b 370657 a 3059301306072 a 8648 c e 3 d 0 20106082 a 8648 c e 3 d 0 30107034200045 d 675 b b e b 635e0726 c 75605 f 78e67 a 0 a 252 c 3 c 79 f 27 b 2 f 8 e d 9933 f d a e 98893 e c b e 0 a 8970 f 8 e f d 6 a d f b 897 f 98 c f 2 b 493 b 3 f 8 d b b 4 d 50 b a 5 c 5e2 d 5 f a 65 e d a 82 b c 7 c a 3273025300e0603551 d 0 f 0 101 f f 0 4040302078030130603551 d 0e040 c 0 40 a 416e61204 c c 3 b 370657 a 300 a 0 6082 a 8648 c e 3 d 0 40302034800304502202 b 6 d 1 a 4052 c 0 4638 c d 70 f 7 c b f 1 c a e 6272 c e b a 5 b 44 e b 936 a d c 3514 a a c 5e0210 d b 0 22100 b f c 3 b a f 1635 d e c 527 a c d 3469 c 46 d f 24 c e 66 b 3e5 e 10e4 e f d 5 b 66 f 31250 b d 79e9130820306308201 e e a 0 0 302010202080 a d 0 0 4 b 9634 c e 59e300 d 0 6092 a 864886 f 70 d 0 1010 b 0 500302e31163014060355040 a 130 d 446174654 b 65797320746573743114301206035504030 c 0 b 4 c 7569732047 c 3 b 36 d 657 a 301e170 d 3230303130313030303030305 a 170 d 3430303130313030303030305 a 302e31163014060355040 a 130 d 446174654 b 65797320746573743114301206035504030 c 0 b 4 c 7569732047 c 3 b 36 d 657 a 30820122300 d 0 6092 a 864886 f 70 d 0 1010105000382010 f 0 0 3082010 a 0 282010100 c d 0 98 b e f 678864 c 7241 a 3139 b 9615 d 0 d c 67 c 7116757 b 230 d d 46496 b b 2 a e 79 a 6 b 8 b a 575 f b 0 d a 9e7176 c 8 e e 87 d 58 c e 45 b f b 81 c 81 a 7 b a e e c 70868 f d 7 e e a e a 8 b 3014 f 97 d 32 b b d d 17866 d 456 b 55 b 64 d 7852406e7 e 36 c 17375865e075 b e d d a 9 f f 6 d 9154376 e a c 17864 a e 346 c e b c 17 d 152 a 5955 a 97 c f 460520 d 92384 c 2467e2 a 56 a f 74e1 d e 182 b 99 c 12 f 6 a b f b 8662654 a a 62807 d a 1488 d 203 a 18 b 9265552 f 4 b 2 a f 4 d 3 f e a 499 d 0 3 d c a 4220 a 2e9 b a 3578 f 60 b 249e00 b 1720314 f 2 b d 3 c 1e3 b e 6649 c c 77 f 235 b f 2 d a b 2081e71 a 0 f 7352 a d 14113947 c a 52722 f 7 a 489 f 40 b 5 e f 440 f f 9 c 60566638 b 9 b 190 b 7 c 5 d 242 b f 433 c b 75 b 2 c d 7 e b 1e2 e b f 0 b c 1 b f 59 d 6 c 684639 a a 6 c 626810203010001 a 3283026300e0603551 d 0 f 0 101 f f 0 4040302078030140603551 d 0e040 d 0 40 b 4 c 7569732047 c 3 b 36 d 657 a 300 d 0 6092 a 864886 f 70 d 0 1010 b 0 5000382010100 a a 2 b a 12 d c 3 b 1 f 785 f 3 a 90 d 2665805216607 f 2218 d 8 c d e e d 5606 c 4 d a 2 c f 3546 a e 5609 b 28014 b a b 3 e b 89 a 2 c 7 b e e a 84 b 4 f 302 c 731 c d 8 f 5 c 1550 a 9e6 f 564 c 3 a c 9 a 26 d 4318 d e c a 828 b 664 c 0 8221 a 9 a c 84 a 8054766 f e 149 b d d 1 b 6315739 d 356 f 5 a 9589040116 c f f 0 8 d b c a f 7670 f 7 b d 0 d 11 f b 573 c 0 0 3261 d b b f c 33 c 0 e a 562 c a 1 d 19 c e e b 498270 c 2 f b 1669 c 37 a 5 c 1 c 0 b e 2046 f 571873078 f f 75 f 0 8 a 37474 a d a a c 31 a b e f 97179 d 356493 a 0 a d 5 b 9709046 a 69 d f c 0 99 c 9 d 55011 c 0 b 6 b 177 e f 2 d a f 8426544441 b b 10 b f b c c a b 4 d 46 a c 949 a 5 d 0 c 76 e c 95 a 71121277 d 888 e c 6e9 f 1 c 841 f 2 c f e c 449653 b 92168428 c 3461 b b 3 f 96266 c 383 b 7 f a 3922639 a 6 f 62 e b 9 e a f 7902 d e f e e c e 318209 c 33082047 f 0 201013039302 d 31163014060355040 a 130 d 446174654 b 65797320746573743113301106035504030 c 0 a 416e61204 c c 3 b 370657 a 0 2080 a 2 d 17 d 0 344 c 4223300 b 0 609608648016503040201 a 0 8184301806092 a 864886 f 70 d 0 10903310 b 0 6092 a 864886 f 70 d 0 10701302 f 0 6092 a 864886 f 70 d 0 1090431220420692 f d e 7 e f 9e77 c 5 f 3 d 2 a b 5 b 5420407 a 75 c d 8 a 4 c 36 a d 90949 e b 447 a 92e0 b a 768 f 3037060 b 2 a 864886 f 70 d 0 10910022 f 3128302630243022042018 c 0 b 89 a 0 b 811 c f 49 d 8 a e 0 b f 0 b 978 c 6e408 c 0 b a f c 0 5 f 2 c e b 1e0 c c 6 d 39 f 746 c 57300 a 0 6082 a 8648 c e 3 d 0 4030204483046022100 b 1 c 3377 a 29 b e 27 b b 2961 d 0 91 d 28e46 a 8 b 90e8 a 3 a 8 a 0 c b 3 c 1 f d d e 72 f f f 4 f 0 52 d 7022100 c 3 f 6199 f 1 b f 3368 d b 36 b 134 a 7 a 66 c c 1 a a b d a 2 b 5 d 0 80 d 10306e4414 c 392803 c a c a 18203533082034 f 0 60 b 2 a 864886 f 70 d 0 10910020e3182033 e 3082033 a 0 6092 a 864886 f 70 d 0 10702 a 0 82032 b 30820327020101310 d 300 b 0 6096086480165030402013065060 b 2 a 864886 f 70 d 0 109100104 a 0 560454305202010106032 a 0 304302 f 300 b 0 60960864801650304020104202 a b f b 8669 c 8486195292 d b 3 a 2819840 a 78 a 4 d b f 3 d 8e1 e 3869732 f 932 f b 7 a 916302012 a 180 f 32303233303832333135303932375 a 3003020101 a 0 8201833082017 f 30820126 a 0 0 302010202082622 f 848525703 b 5300 a 0 6082 a 8648 c e 3 d 0 40302303031163014060355040 a 130 d 446174654 b 6579732074657374311630140603550403130 d 54534120646520707275656261301e170 d 3230303130313030303030305 a 170 d 3430303130313030303030305 a 303031163014060355040 a 130 d 446174654 b 6579732074657374311630140603550403130 d 545341206465207072756562613059301306072 a 8648 c e 3 d 0 20106082 a 8648 c e 3 d 0 30107034200046 e f 0 b c 1 e f 2 b 58337 a d 784 b 0 0 97970 a e 832 c 2141 e a 6 d 989368530 d 88 d 42 d 817e384 f 3 a a f a 0 89 f 4 c 7 c 2e2 d a b f 8 d 521 b 0 b 85e91951 d 93428 c 10 b 1935 a 53693771 c d a 32 a 3028300e0603551 d 0 f 0 101 f f 0 4040302078030160603551 d 0e040 f 0 40 d 54534120646520707275656261300 a 0 6082 a 8648 c e 3 d 0 40302034700304402206 d 7 f e 9402077e246 b 91120 b 105 f 4 b e c 4 a b c 344 b 8 f e 6e0 d 9 a b f 310
"cms_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a386438306638336166306538306630636462313433303538653239366239326366393635356264366635623135373864363134326233663133386531346338640a" ,
"cms_signers" : [
"18c0b89a0b811cf49d8ae0bf0b978c6e408c0bafc05f2ceb1e0cc6d39f746c57" ,
"dd8dad5bfb2e4f8bacaa054ebfba5542d7b95fe4b82eba383b8cc1e7af03d18a"
]
} ,
"opened" : {
"area_len" : 32768 ,
"files" : [
{
"path" : "fotos/año 2026.txt" ,
"sha256" : "008bcdd384dfa24ec241d63408bd854ac9bdedd42e26b48fdfda1a6c43ecc386" ,
"size" : 29
} ,
{
"path" : "nota.txt" ,
"sha256" : "0397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"size" : 6
}
] ,
"head" : "a5006d646174656b6579732d6865616401010258207403a02db82138f4debe81c7deb69d1a9ec2a6694a74a96c940e99c794cb0fc003744669726d61646f20706f72206c6f7320646f732e0582a50073666f746f732f61c3b16f20323032362e74787401181d020003181d045820008bcdd384dfa24ec241d63408bd854ac9bdedd42e26b48fdfda1a6c43ecc386a500686e6f74612e747874010602181d0318230458200397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"length" : 33011 ,
"lines" : [
"Firmado con un certificado a nombre de «Ana López», «Luis Gómez». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial." ,
" «Ana López» (emisor según su certificado: «Ana López»), sellado por «TSA de prueba» el 2023-08-23T15:09:27Z, antes de la fecha de apertura." ,
" «Luis Gómez» (emisor según su certificado: «Luis Gómez»), sellado por «TSA de prueba» el 2023-08-23T15:09:27Z, antes de la fecha de apertura." ,
" DateKeys no comprueba quién emitió los sellos."
] ,
"result" : "ok" ,
"verdicts" : [
"F6" ,
"S0"
]
} ,
"recipe" : {
"name" : "alg 2, two signers, sealed" ,
"seed" : "signing alg 2, two signers, sealed" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"comment" : "Firmado por los dos." ,
"cms" : {
"signers" : [
"Ana López" ,
"Luis Gómez"
]
}
} ,
"written" : {
"body_length" : 33011 ,
"capsule_id" : "80fb6269593ef4651325368e5ff6a312" ,
"length" : 35611 ,
"sha256" : "1fd032d068a4716051788e39cbba1555471ff088b842de3cba5e09ff594faeac"
}
} ,
{
"draws" : [
{
"hex" : "f6ba3bc0e85d8057d5ad51ae7105a7145ca336b4660c436d5f76518fff9d6288" ,
"n" : 32
} ,
{
"hex" : "8a48277f7cedc6f3ff1535444d51613c" ,
"n" : 16
} ,
{
"hex" : "a27ad61245257a5632e1bb3655df77cb792d283ef12b3a9f2afb8794a0929058" ,
"n" : 32
} ,
{
"hex" : "800c3ac1ee1a3e149c3973c2c192c47c" ,
"n" : 16
} ,
{
"hex" : "b382e39b3b26bf7ade1bf39b11a753f6" ,
"n" : 16
} ,
{
"hex" : "0c01000cfd0ff073e43b691f641b4318" ,
"n" : 16
} ,
{
"hex" : "93afd143b9af30d261a861207febdc1b" ,
"n" : 16
} ,
{
"hex" : "f662c8746ae60f35ae3eeb7bdcfa98f7" ,
"n" : 16
} ,
{
"hex" : "c57369d8ccf94945c4018f1d79718fc3" ,
"n" : 16
} ,
{
"hex" : "1b3f5ff6a8c102ea1f1b86cb61cde14e" ,
"n" : 16
} ,
{
"hex" : "9dc4db8a64e0dfd1c1dea3313bd0b047" ,
"n" : 16
} ,
{
"hex" : "b758f69e342eff99ebab8eb43fddbdcf" ,
"n" : 16
} ,
{
"hex" : "4c02691c36764d38771daf3d38175ade4f2029ca73bcc5cf4cf5d856de23b65f" ,
"n" : 32
} ,
{
"hex" : "488ecfc51115aeb93d6b4a20f58ed0b6" ,
"n" : 16
}
] ,
"hooks" : {
"cms_der" : " 3082 a 28806092 a 864886 f 70 d 0 10702 a 0 82 a 2793082 a 275020101310 d 300 b 0 609608648016503040201300 b 0 6092 a 864886 f 70 d 0 10701 a 0 82017 b 308201773082011 d a 0 0 302010202080 a 2 d 17 d 0 344 c 4223300 a 0 6082 a 8648 c e 3 d 0 40302302 d 31163014060355040 a 130 d 446174654 b 65797320746573743113301106035504030 c 0 a 416e61204 c c 3 b 370657 a 301e170 d 3230303130313030303030305 a 170 d 3430303130313030303030305 a 302 d 31163014060355040 a 130 d 446174654 b 65797320746573743113301106035504030 c 0 a 416e61204 c c 3 b 370657 a 3059301306072 a 8648 c e 3 d 0 20106082 a 8648 c e 3 d 0 30107034200045 d 675 b b e b 635e0726 c 75605 f 78e67 a 0 a 252 c 3 c 79 f 27 b 2 f 8 e d 9933 f d a e 98893 e c b e 0 a 8970 f 8 e f d 6 a d f b 897 f 98 c f 2 b 493 b 3 f 8 d b b 4 d 50 b a 5 c 5e2 d 5 f a 65 e d a 82 b c 7 c a 3273025300e0603551 d 0 f 0 101 f f 0 4040302078030130603551 d 0e040 c 0 40 a 416e61204 c c 3 b 370657 a 300 a 0 6082 a 8648 c e 3 d 0 40302034800304502202 b 6 d 1 a 4052 c 0 4638 c d 70 f 7 c b f 1 c a e 6272 c e b a 5 b 44 e b 936 a d c 3514 a a c 5e0210 d b 0 22100 b f c 3 b a f 1635 d e c 527 a c d 3469 c 46 d f 24 c e 66 b 3e5 e 10e4 e f d 5 b 66 f 31250 b d 79e913182 a 0 d 33082 a 0 c f 0 201013039302 d 31163014060355040 a 130 d 446174654 b 65797320746573743113301106035504030 c 0 a 416e61204 c c 3 b 370657 a 0 2080 a 2 d 17 d 0 344 c 4223300 b 0 609608648016503040201 a 0 8184301806092 a 864886 f 70 d 0 10903310 b 0 6092 a 864886 f 70 d 0 10701302 f 0 6092 a 864886 f 70 d 0 109043122042043 a f d a 0 484 e f 594 a 1 f 0 25585 e a e a c 25659 e b c 0e3 c 96362 b 1e5 f 0 8 d 91 b b c 25 c 3e3037060 b 2 a 864886 f 70 d 0 10910022 f 3128302630243022042018 c 0 b 89 a 0 b 811 c f 49 d 8 a e 0 b f 0 b 978 c 6e408 c 0 b a f c 0 5 f 2 c e b 1e0 c c 6 d 39 f 746 c 57300 a 0 6082 a 8648 c e 3 d 0 4030204473045022076794229 d 0 60414914 b 238 a 69325 f 3 a 702199 c 90 a f 4374 f 74 d 608 f e 635 f f 3 d b 2022100 a d c a 0 d 8 d 3 f b 5694 a 688 d 59729 b a d 30 f 320e99 c e e e e 70060815 f 867 f 68 f 1 b c 2 d e a 1829 f a 43082034e060 b 2 a 864886 f 70 d 0 10910020e3182033 d 3082033906092 a 864886 f 70 d 0 10702 a 0 82032 a 30820326020101310 d 300 b 0 6096086480165030402013065060 b 2 a 864886 f 70 d 0 109100104 a 0 560454305202010106032 a 0 304302 f 300 b 0 609608648016503040201042060 b 5 c 52 b 1 d c 3 d c e 6 d a 85626 a 4 b b f 5 c 487 d 5 b 9 c b 74360e49 f 0 9 c f c 0 86649e934 c 0 2012 a 180 f 32303233303832333135303932375 a 3003020101 a 0 8201833082017 f 30820126 a 0 0 302010202082622 f 848525703 b 5300 a 0 6082 a 8648 c e 3 d 0 40302303031163014060355040 a 130 d 446174654 b 6579732074657374311630140603550403130 d 54534120646520707275656261301e170 d 3230303130313030303030305 a 170 d 3430303130313030303030305 a 303031163014060355040 a 130 d 446174654 b 6579732074657374311630140603550403130 d 545341206465207072756562613059301306072 a 8648 c e 3 d 0 20106082 a 8648 c e 3 d 0 30107034200046 e f 0 b c 1 e f 2 b 58337 a d 784 b 0 0 97970 a e 832 c 2141 e a 6 d 989368530 d 88 d 42 d 817e384 f 3 a a f a 0 89 f 4 c 7 c 2e2 d a b f 8 d 521 b 0 b 85e91951 d 93428 c 10 b 1935 a 53693771 c d a 32 a 3028300e0603551 d 0 f 0 101 f f 0 4040302078030160603551 d 0e040 f 0 40 d 54534120646520707275656261300 a 0 6082 a 8648 c e 3 d 0 40302034700304402206 d 7 f e 9402077e246 b 91120 b 105 f 4 b e c 4 a b c 344 b 8 f e 6e0 d 9 a b f 310 c 363048 c 471022006 d 6 f 93 c 781 a 22 b 6 f d 0 78116 b 5 d 6611 b 0 c 8 f 0 663e0 d 50 f 1 a 8 c 437 b f 23 f 8067e4318201223082011 e 0 20101303 c 303031163014060355040 a 130 d 446174654 b 6579732074657374311630140603550403130 d 5453412064652070727565626102082622 f 848525703 b 5300 b 0 609608648016503040201 a 0 7 a 301 a 0 6092 a 864886 f 70 d 0 10903310 d 0 60 b 2 a 864886 f 70 d 0 109100104302 b 0 60 b 2 a 864886 f 70 d 0 10910020 c 311 c 301 a 301830160414 c 7 f 2 c 3 d 3 a b c 329906 f 17 b 8e81 a c e 26 f 285 d 9 d e f 7302 f 0 6092 a 864886 f 70 d 0 10904312204200510 b a b 62 a e 329 d 9 c 15 f b f a b b c 998330 d 8812026 e a 3 b 17 c d 4 c 581e643 a a d c a 50300 a 0 6082 a 8648 c e 3 d 0 4030204463044022051 d 28 f 0 72 c 5184 a b 93 c 97 d 8 b 31 a a a 22 a 2594589 a 0 c a 7 d b c 2 f e 179 b b 5e3 f 33947022005 b c a e 3 a c d e f 89159 b b 4 d 3 c d 1 f 3726e74 a f 60818 f b 8 b 9 f 7121 d b c 90976 f e b 51430829 c 4e06042 a 0 3040531829 c 4404829 c 40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
"cms_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a376433643535626333323433373136336435636662326566656238393862626537323937626134633631616235313534363034396263653030383132616438660a" ,
"cms_signers" : [
"18c0b89a0b811cf49d8ae0bf0b978c6e408c0bafc05f2ceb1e0cc6d39f746c57"
]
} ,
"opened" : {
"area_len" : 65536 ,
"files" : [
{
"path" : "nota.txt" ,
"sha256" : "0397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"size" : 6
}
] ,
"head" : "a4006d646174656b6579732d686561640101025820f6ba3bc0e85d8057d5ad51ae7105a7145ca336b4660c436d5f76518fff9d62880581a500686e6f74612e7478740106020003060458200397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"length" : 65661 ,
"lines" : [
"Firmado con un certificado a nombre de «Ana López». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial." ,
" «Ana López» (emisor según su certificado: «Ana López»), sellado por «TSA de prueba» el 2023-08-23T15:09:27Z, antes de la fecha de apertura." ,
" DateKeys no comprueba quién emitió los sellos."
] ,
"result" : "ok" ,
"verdicts" : [
"F6" ,
"S0"
]
} ,
"recipe" : {
"name" : "alg 2, a large area" ,
"seed" : "signing alg 2, a large area" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
}
] ,
"cms" : {
"signers" : [
"Ana López"
] ,
"junk" : 40000
} ,
"large_area" : true
} ,
"written" : {
"body_length" : 65661 ,
"capsule_id" : "8a48277f7cedc6f3ff1535444d51613c" ,
"length" : 68395 ,
"sha256" : "3f112abe79c7783f68b62ea4ff359234e9708be4819662fc592eab5a9d40918a"
}
} ,
{
"draws" : [
{
"hex" : "2fce274ff8f07b8540e4cc39d7919904c6a313f7df54a01986d35b94c55a6b19" ,
"n" : 32
} ,
{
"hex" : "f8c36fdeb6bdbfec4aab322fe38fe929" ,
"n" : 16
} ,
{
"hex" : "e5669dcb07a0da5d0f95703a7e61e37bb13011aa4f66be298ac99f31f73ee529" ,
"n" : 32
} ,
{
"hex" : "a9ec139bdf528201d83cbf83e0625ee9" ,
"n" : 16
} ,
{
"hex" : "1be9bbef452eb178b860fde4fbc95ae8" ,
"n" : 16
} ,
{
"hex" : "c4f52c6034260d5ea32b1703f0e0a645" ,
"n" : 16
} ,
{
"hex" : "0d2c523a78527a1724adea4d853932c8" ,
"n" : 16
} ,
{
"hex" : "ac286ad391b14a4a0589d15d63759dd9" ,
"n" : 16
} ,
{
"hex" : "ca94af55854450db39264c840dc063fb" ,
"n" : 16
} ,
{
"hex" : "49bf82177cacaf740a991e692ca554b3" ,
"n" : 16
} ,
{
"hex" : "e0ca4162b35a888c73dddf20db245ece" ,
"n" : 16
} ,
{
"hex" : "72aab9487bb6a2034989a7464d228105" ,
"n" : 16
} ,
{
"hex" : "647a3e97b90f4d4d7b1be2f81bfd9fa5d35dbcda50365e28e97a29aff86741de" ,
"n" : 32
} ,
{
"hex" : "5b7689e4f51982fd83cf98b5ad4d24c0" ,
"n" : 16
}
] ,
"hooks" : {
"author_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a653030666338363530336435356662666332326136336535363566323362333731626166343639613761306663393064336332313166326239373838313864390a" ,
"author_public" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"author_signature" : "190635b040ed348900f82868ce74f7d030143b7f312673b91a386d611f34bd039e5beeb09e2424b15497fdc273a10a76afe5b20a9f634931253797053a12d80a"
} ,
"opened" : {
"area_len" : 32768 ,
"author_key" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"files" : [ ] ,
"head" : "a4006d646174656b6579732d6865616401010258202fce274ff8f07b8540e4cc39d7919904c6a313f7df54a01986d35b94c55a6b190373536f6c6f20756e20636f6d656e746172696f2e" ,
"length" : 32854 ,
"lines" : [
"Firmado con la clave dkauthor1pdrcy0n3p9watxl83tp8r3tkauuflpakg4s6kp70nf8te5pdypqszvracp. No prueba quién la tiene."
] ,
"result" : "ok" ,
"verdicts" : [
"F4" ,
"S0"
]
} ,
"opened_saved" : {
"area_len" : 32768 ,
"author_key" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"files" : [ ] ,
"head" : "a4006d646174656b6579732d6865616401010258202fce274ff8f07b8540e4cc39d7919904c6a313f7df54a01986d35b94c55a6b190373536f6c6f20756e20636f6d656e746172696f2e" ,
"length" : 32854 ,
"lines" : [
"Firmado con la clave que guardaste como mi clave de 2026."
] ,
"result" : "ok" ,
"verdicts" : [
"F3" ,
"S0"
]
} ,
"recipe" : {
"name" : "alg 1, a large area that does not widen" ,
"seed" : "signing alg 1, a large area that does not widen" ,
"comment" : "Solo un comentario." ,
"author_key" : {
"seed" : "a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0"
} ,
"large_area" : true
} ,
"written" : {
"body_length" : 32854 ,
"capsule_id" : "f8c36fdeb6bdbfec4aab322fe38fe929" ,
"length" : 35611 ,
"sha256" : "cd62143f36098d4cf8e2819ef8fa60a59f3b8f16580e97b562dc495b6a84cd0a"
}
} ,
{
"draws" : [
{
"hex" : "d4b4d75eee410ce8183858c4b10a19ee68492d23651140195918efeb3ebf4d9a" ,
"n" : 32
} ,
{
"hex" : "d68177d224997289d94a896b87f1e637" ,
"n" : 16
} ,
{
"hex" : "15d5887d7420b827f7bbb371c210202117417c6be6a2d07bc19e090bc0a4b1b7" ,
"n" : 32
} ,
{
"hex" : "74eabb04b8caa8f6dd91702fcbf78842" ,
"n" : 16
} ,
{
"hex" : "a7e4b93ccb1d331de916af32fe31b790" ,
"n" : 16
} ,
{
"hex" : "8a96bed982312d2c888291cce46d9d93" ,
"n" : 16
} ,
{
"hex" : "aa2a71f92a781833479aef3815e794c4" ,
"n" : 16
} ,
{
"hex" : "f2055c210a22d61666e43510d95806d3" ,
"n" : 16
} ,
{
"hex" : "0dcd36e85aa74ba9fe92214426c06df4" ,
"n" : 16
} ,
{
"hex" : "175fbec1e3c7314c3aa04e6bbd42cf1e" ,
"n" : 16
} ,
{
"hex" : "a7b1d4e745e73b255b62483666126c30" ,
"n" : 16
} ,
{
"hex" : "a305aee5e0578d8b6096c2887561bf40" ,
"n" : 16
} ,
{
"hex" : "a0ebfff35cce9307c155ba8411daa539e4f21a7e2a193de5c9c604af08633f59" ,
"n" : 32
} ,
{
"hex" : "9d42c81f21c08ee646d0347cc38a4684" ,
"n" : 16
}
] ,
"hooks" : {
"author_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a313632623666653637623564316164366334313535333433396435306635633036646333616436656336353830393466313062643931396461376366373831390a" ,
"author_public" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"author_signature" : "b4d0a60837fef93d2112bea03dc65f042541cf1c131c1461cddc1da55a68fbaa00d191865372fbe8ee5fa6dae9e2190bf4780a98d6a8c0d5c281e087233d8b0f"
} ,
"opened" : {
"area_len" : 512 ,
"author_key" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"files" : [
{
"path" : "nota.txt" ,
"sha256" : "0397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"size" : 6
}
] ,
"head" : "a4006d646174656b6579732d686561640101025820d4b4d75eee410ce8183858c4b10a19ee68492d23651140195918efeb3ebf4d9a0581a500686e6f74612e7478740106020003060458200397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"length" : 637 ,
"lines" : [
"Firmado con la clave dkauthor1pdrcy0n3p9watxl83tp8r3tkauuflpakg4s6kp70nf8te5pdypqszvracp. No prueba quién la tiene."
] ,
"result" : "ok" ,
"verdicts" : [
"F4" ,
"S0"
]
} ,
"opened_saved" : {
"area_len" : 512 ,
"author_key" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"files" : [
{
"path" : "nota.txt" ,
"sha256" : "0397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"size" : 6
}
] ,
"head" : "a4006d646174656b6579732d686561640101025820d4b4d75eee410ce8183858c4b10a19ee68492d23651140195918efeb3ebf4d9a0581a500686e6f74612e7478740106020003060458200397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"length" : 637 ,
"lines" : [
"Firmado con la clave que guardaste como mi clave de 2026."
] ,
"result" : "ok" ,
"verdicts" : [
"F3" ,
"S0"
]
} ,
"recipe" : {
"name" : "alg 1, an area of 512" ,
"seed" : "signing alg 1, an area of 512" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
}
] ,
"author_key" : {
"seed" : "a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0"
} ,
"test_area_len" : 512
} ,
"written" : {
"body_length" : 637 ,
"capsule_id" : "d68177d224997289d94a896b87f1e637" ,
"length" : 1563 ,
"sha256" : "8d48857ddbdd7baec825ec55f2d0b6b100d9bed1fe86b53dde38eb4a8913b193"
}
} ,
{
"draws" : [
{
"hex" : "d1704d1c04c10f26587a0d5ea4916c1491a1b10fe70b1bf87058bebc4f1b08e1" ,
"n" : 32
} ,
{
"hex" : "cd3dea98a8d3a37498417d62e423a09e" ,
"n" : 16
} ,
{
"hex" : "9675a99eb7f200a69971f40eba6bd9f6173ae5b36d82ef7c1b3879047358406d" ,
"n" : 32
} ,
{
"hex" : "480bddeb176feb68619c629c2acf9ec2" ,
"n" : 16
} ,
{
"hex" : "f0fe87e867033f46d3d2846cd7396eb1" ,
"n" : 16
} ,
{
"hex" : "a55fb46df43fdf14f80dcdb71afc427a" ,
"n" : 16
} ,
{
"hex" : "01a1beb7e5f63b097b1ae5012a77b860" ,
"n" : 16
} ,
{
"hex" : "48ab35b778b4bcfac0b208b9726885a9" ,
"n" : 16
} ,
{
"hex" : "9dac3b1faeeee47966e42f1be9af6c00" ,
"n" : 16
} ,
{
"hex" : "56a713cb1f4f62bdac733685a5b29387" ,
"n" : 16
} ,
{
"hex" : "a9464ca921fc0350e6cfd0ea01430784" ,
"n" : 16
} ,
{
"hex" : "4214cb40b2bbd8691d8978cd86f4baf2" ,
"n" : 16
} ,
{
"hex" : "127e1c0f2194fb02fa679c9a03c816213352c3354d7e8d4386e641ca4eb99c70" ,
"n" : 32
} ,
{
"hex" : "e4d7348f6ed54de6bc967aa25396fa78" ,
"n" : 16
}
] ,
"hooks" : {
"author_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a333637323437356339646161646364306334363132643132383833336537306131366334333565666430636562363635383432376137613361613434336662360a" ,
"author_public" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"author_signature" : "0b636a90f614a0d3620b345fd6408b6dccf184bb1c67f48ad231ec8864c3fa21b53044b08b064393d8c640e5c3fda2c4f944e45e5803bab28f08e1b06dd9e603" ,
"seal_subject" : "f15aad139108a62780fa3ac6eda0dde3f87b389f056f847ecf82f6f3f586f385" ,
"seal_token" : "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"
} ,
"opened" : {
"area_len" : 32768 ,
"author_key" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"files" : [
{
"path" : "nota.txt" ,
"sha256" : "0397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"size" : 6
}
] ,
"head" : "a4006d646174656b6579732d686561640101025820d1704d1c04c10f26587a0d5ea4916c1491a1b10fe70b1bf87058bebc4f1b08e10581a500686e6f74612e7478740106020003060458200397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"length" : 32893 ,
"lines" : [
"Firmado con la clave dkauthor1pdrcy0n3p9watxl83tp8r3tkauuflpakg4s6kp70nf8te5pdypqszvracp. No prueba quién la tiene." ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"No acredita que se sellara antes de la fecha de apertura: se selló después de esa fecha o demasiado cerca de ella."
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
] ,
"result" : "ok" ,
"verdicts" : [
"F4" ,
"S5"
]
} ,
"opened_saved" : {
"area_len" : 32768 ,
"author_key" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"files" : [
{
"path" : "nota.txt" ,
"sha256" : "0397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"size" : 6
}
] ,
"head" : "a4006d646174656b6579732d686561640101025820d1704d1c04c10f26587a0d5ea4916c1491a1b10fe70b1bf87058bebc4f1b08e10581a500686e6f74612e7478740106020003060458200397fe19bf28bbbef703f292f55d0cc96e9f535b6db7944504bde08c3709d685" ,
"length" : 32893 ,
"lines" : [
"Firmado con la clave que guardaste como mi clave de 2026." ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"No acredita que se sellara antes de la fecha de apertura: se selló después de esa fecha o demasiado cerca de ella."
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
] ,
"result" : "ok" ,
"verdicts" : [
"F3" ,
"S5"
]
} ,
"recipe" : {
"name" : "a seal after the date" ,
"seed" : "signing a seal after the date" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
}
] ,
"author_key" : {
"seed" : "a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0"
} ,
"sealer" : {
"late" : true
}
} ,
"written" : {
"body_length" : 32893 ,
"capsule_id" : "cd3dea98a8d3a37498417d62e423a09e" ,
"length" : 35611 ,
"sha256" : "48c4326afee645881dfe525ccd3b967339d0c7641d61428b68ae70ae41c339c6"
}
} ,
{
"draws" : [ ] ,
"error" : "capsule: AuthorKey and CMSSigner are exclusive: a capsule has one signature" ,
"recipe" : {
"name" : "AuthorKey and CMSSigner" ,
"seed" : "signing AuthorKey and CMSSigner" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"author_key" : {
"seed" : "a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0"
} ,
"cms" : {
"signers" : [
"Ana López"
]
}
}
} ,
{
"draws" : [ ] ,
"error" : "capsule: with CMSSigner the seal goes inside each signature (spec §29.10): Sealer must be nil" ,
"recipe" : {
"name" : "CMSSigner and Sealer" ,
"seed" : "signing CMSSigner and Sealer" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"cms" : {
"signers" : [
"Ana López"
]
} ,
"sealer" : { }
}
} ,
{
"draws" : [ ] ,
"error" : "capsule: a test area of 512 bytes: a multiple of 512 up to 65536, without LargeArea" ,
"recipe" : {
"name" : "a test area and LargeArea" ,
"seed" : "signing a test area and LargeArea" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"author_key" : {
"seed" : "a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0"
} ,
"large_area" : true ,
"test_area_len" : 512
}
} ,
{
"draws" : [
{
"hex" : "d6a2be42e390c6ffbee3ba846253344347f56029c3f74b7285b2f74486b0ff24" ,
"n" : 32
} ,
{
"hex" : "96004327a6ca035f29d11eed8699facb" ,
"n" : 16
} ,
{
"hex" : "9acb274c3bd894fc702b444f73c5fbc0af0aabb00bcbe38ebaa5bc8e0885dca0" ,
"n" : 32
} ,
{
"hex" : "8e0fc115a45fde2cd67479f49d0bd9c2" ,
"n" : 16
} ,
{
"hex" : "c3c09dead1651a66eeffe94e459c9ed7" ,
"n" : 16
} ,
{
"hex" : "93cd87bf1f7ca49c3089d69b9ea80d90" ,
"n" : 16
} ,
{
"hex" : "1b3ef520b9f3ea8c0adab52d865c23ed" ,
"n" : 16
}
] ,
"error" : "capsule: the author key is 31 bytes, not 32" ,
"hooks" : {
"author_public" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d20"
} ,
"recipe" : {
"name" : "an author key of 31 bytes" ,
"seed" : "signing an author key of 31 bytes" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"author_key" : {
"seed" : "a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0" ,
"bad" : "short_key"
}
}
} ,
{
"draws" : [
{
"hex" : "a34e427d9b5295028a38e9af063a75f71f2a6101033c5c57ef78c53c27df5078" ,
"n" : 32
} ,
{
"hex" : "331eff1e052cef2b9639bdd53ab1a4de" ,
"n" : 16
} ,
{
"hex" : "e8d2cc322cdc51a8fe40e12ca59d4162d6961057c41274a8a1f909f846a276e6" ,
"n" : 32
} ,
{
"hex" : "56a0ec5d1862a102c8c61c60d75e7233" ,
"n" : 16
} ,
{
"hex" : "d958bbb29f6b9b5691ad9cf9e59c26c1" ,
"n" : 16
} ,
{
"hex" : "0465ab139b776d1c2309ead75d7215fc" ,
"n" : 16
} ,
{
"hex" : "5ff2220411043fef614325ffe5151cf8" ,
"n" : 16
}
] ,
"error" : "capsule: self-check: the reader finds the verdicts F2 and S0 in this security area, not F4 and S0" ,
"hooks" : {
"author_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a323465316438396163363763343937396438396530663063643737633430363336386537646637363637393061336630613665396331613832643936636439330a" ,
"author_public" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"author_signature" : "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"
} ,
"recipe" : {
"name" : "a signature of zeros" ,
"seed" : "signing a signature of zeros" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"author_key" : {
"seed" : "a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0" ,
"bad" : "zero_signature"
}
}
} ,
{
"draws" : [
{
"hex" : "92c805c421c0e486b888112ac6f77763120d1a444d857005938aee13619205fd" ,
"n" : 32
} ,
{
"hex" : "d17848d05ebd856923eae90e69e6b5be" ,
"n" : 16
} ,
{
"hex" : "275c2aee5d63a6ded2c38b47130b0e7b7ca7c7027c32569be8c591f53d0300e9" ,
"n" : 32
} ,
{
"hex" : "5166ccaf30efaf9077212ec57080a9bd" ,
"n" : 16
} ,
{
"hex" : "5e5ffb3320e8e02c44a435084b250a9c" ,
"n" : 16
} ,
{
"hex" : "19cf4677f57514eaaa5e1c3cbfab650d" ,
"n" : 16
} ,
{
"hex" : "b5d4dd81cd7c781531cb56beafdf6745" ,
"n" : 16
}
] ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"error" : "capsule: self-check: the reader finds the verdicts F2 and S5 in this security area, not F4 and S4" ,
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
"hooks" : {
"author_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a303730376433653332303735303339653232633637333430626431643439326234343365666461663935656236633339356630313330636162363033386631630a" ,
"author_public" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"author_signature" : "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000" ,
"seal_subject" : "bd83ea07634f10df5d21f1097417c76138e7afba63412d30e43ffb2f2b2a4883" ,
"seal_token" : "3082033606092a864886f70d010702a082032730820323020101310d300b06096086480165030402013060060b2a864886f70d0109100104a051044f304d02010106032a0304302f300b06096086480165030402010420d14cd820cb5434b6af69513b4191bb15447e043e6cbf0781d87c88785f148ab202012a180f32303233303832333135303932375aa08201833082017f30820126a00302010202082622f848525703b5300a06082a8648ce3d040302303031163014060355040a130d446174654b6579732074657374311630140603550403130d54534120646520707275656261301e170d3230303130313030303030305a170d3430303130313030303030305a303031163014060355040a130d446174654b6579732074657374311630140603550403130d545341206465207072756562613059301306072a8648ce3d020106082a8648ce3d030107034200046ef0bc1ef2b58337ad784b0097970ae832c2141ea6d989368530d88d42d817e384f3aafa089f4c7c2e2dabf8d521b0b85e91951d93428c10b1935a53693771cda32a3028300e0603551d0f0101ff04040302078030160603551d0e040f040d54534120646520707275656261300a06082a8648ce3d040302034700304402206d7fe9402077e246b91120b105f4bec4abc344b8fe6e0d9abf310c363048c471022006d6f93c781a22b6fd078116b5d6611b0c8f0663e0d50f1a8c437bf23f8067e43182012430820120020101303c303031163014060355040a130d446174654b6579732074657374311630140603550403130d5453412064652070727565626102082622f848525703b5300b0609608648016503040201a07a301a06092a864886f70d010903310d060b2a864886f70d0109100104302b060b2a864886f70d010910020c311c301a301830160414c7f2c3d3abc329906f17b8e81ace26f285d9def7302f06092a864886f70d01090431220420951ca7f3b98713c0ec0304aaebb5d309d52d918adf1c9267ede16cdc5b596ed8300a06082a8648ce3d04030204483046022100f5b3f8c02de7dd4beab8fe4c239b94d316f547df0867fe51ee78a55ad9434eb6022100ba8dae1d3adf99d0964421b3958241572e5b67166091992a025b84f64b03f01c"
} ,
"recipe" : {
"name" : "a signature of zeros and a seal" ,
"seed" : "signing a signature of zeros and a seal" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"author_key" : {
"seed" : "a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0" ,
"bad" : "zero_signature"
} ,
"sealer" : { }
}
} ,
{
"draws" : [
{
"hex" : "5a64ffc30e95ad457560b9142c0f621dcb5d6deb97481005f4dd5066ff156461" ,
"n" : 32
} ,
{
"hex" : "5fa119acfcaae8485bf821fdb693c893" ,
"n" : 16
} ,
{
"hex" : "88785eaa29d4b0aabde07bedf6dd899023417c035e199ac687edb0b4ae69f837" ,
"n" : 32
} ,
{
"hex" : "3e7583aee14d5336ba457dc4b8b95262" ,
"n" : 16
} ,
{
"hex" : "bcbac6ea1b8fa3f0cf89146f41462b80" ,
"n" : 16
} ,
{
"hex" : "ad5df92f6f80516490ed549df29a2202" ,
"n" : 16
} ,
{
"hex" : "587d4c80cbd105a0ddc739823edbe863" ,
"n" : 16
}
] ,
"error" : "capsule: SECURITY_CBOR of 41683 bytes does not fit in the area of 32768 bytes: LargeArea lets the writer widen it to 65536" ,
"hooks" : {
"cms_der" : " 3082 a 28806092 a 864886 f 70 d 0 10702 a 0 82 a 2793082 a 275020101310 d 300 b 0 609608648016503040201300 b 0 6092 a 864886 f 70 d 0 10701 a 0 82017 b 308201773082011 d a 0 0 302010202080 a 2 d 17 d 0 344 c 4223300 a 0 6082 a 8648 c e 3 d 0 40302302 d 31163014060355040 a 130 d 446174654 b 65797320746573743113301106035504030 c 0 a 416e61204 c c 3 b 370657 a 301e170 d 3230303130313030303030305 a 170 d 3430303130313030303030305 a 302 d 31163014060355040 a 130 d 446174654 b 65797320746573743113301106035504030 c 0 a 416e61204 c c 3 b 370657 a 3059301306072 a 8648 c e 3 d 0 20106082 a 8648 c e 3 d 0 30107034200045 d 675 b b e b 635e0726 c 75605 f 78e67 a 0 a 252 c 3 c 79 f 27 b 2 f 8 e d 9933 f d a e 98893 e c b e 0 a 8970 f 8 e f d 6 a d f b 897 f 98 c f 2 b 493 b 3 f 8 d b b 4 d 50 b a 5 c 5e2 d 5 f a 65 e d a 82 b c 7 c a 3273025300e0603551 d 0 f 0 101 f f 0 4040302078030130603551 d 0e040 c 0 40 a 416e61204 c c 3 b 370657 a 300 a 0 6082 a 8648 c e 3 d 0 40302034800304502202 b 6 d 1 a 4052 c 0 4638 c d 70 f 7 c b f 1 c a e 6272 c e b a 5 b 44 e b 936 a d c 3514 a a c 5e0210 d b 0 22100 b f c 3 b a f 1635 d e c 527 a c d 3469 c 46 d f 24 c e 66 b 3e5 e 10e4 e f d 5 b 66 f 31250 b d 79e913182 a 0 d 33082 a 0 c f 0 201013039302 d 31163014060355040 a 130 d 446174654 b 65797320746573743113301106035504030 c 0 a 416e61204 c c 3 b 370657 a 0 2080 a 2 d 17 d 0 344 c 4223300 b 0 609608648016503040201 a 0 8184301806092 a 864886 f 70 d 0 10903310 b 0 6092 a 864886 f 70 d 0 10701302 f 0 6092 a 864886 f 70 d 0 1090431220420 f 0 48 e a d 9e270278 a 6245 f b a 20 a a 7 c 4 c f 34044 b b 0 912 a e 31 c f 98 c 0 8 a 2 d 4e891 b 53037060 b 2 a 864886 f 70 d 0 10910022 f 3128302630243022042018 c 0 b 89 a 0 b 811 c f 49 d 8 a e 0 b f 0 b 978 c 6e408 c 0 b a f c 0 5 f 2 c e b 1e0 c c 6 d 39 f 746 c 57300 a 0 6082 a 8648 c e 3 d 0 403020446304402203 f 81 f 24 d 33 f c 2 b 8 f f 3 f c f 68995 c 8290757638 c 32 f 6604519 a e 942961 a 5 a d 45 d 302200 a 673020 a 1 d e a 816826 a 836995 d 937975329 f e 5 b 17 d 1 b a 5 f 2 d 23 d 42 f e e 2 d 8131 a 1829 f a 53082034 f 0 60 b 2 a 864886 f 70 d 0 10910020e3182033 e 3082033 a 0 6092 a 864886 f 70 d 0 10702 a 0 82032 b 30820327020101310 d 300 b 0 6096086480165030402013065060 b 2 a 864886 f 70 d 0 109100104 a 0 560454305202010106032 a 0 304302 f 300 b 0 6096086480165030402010420 e f 570 b f c 7 b 479 e e 8 c c c 9452147 c 3 b 4 b 3 c 7 d 993471 f 126 a a a 873626216 b 9 f e 0 0 402012 a 180 f 32303233303832333135303932375 a 3003020101 a 0 8201833082017 f 30820126 a 0 0 302010202082622 f 848525703 b 5300 a 0 6082 a 8648 c e 3 d 0 40302303031163014060355040 a 130 d 446174654 b 6579732074657374311630140603550403130 d 54534120646520707275656261301e170 d 3230303130313030303030305 a 170 d 3430303130313030303030305 a 303031163014060355040 a 130 d 446174654 b 6579732074657374311630140603550403130 d 545341206465207072756562613059301306072 a 8648 c e 3 d 0 20106082 a 8648 c e 3 d 0 30107034200046 e f 0 b c 1 e f 2 b 58337 a d 784 b 0 0 97970 a e 832 c 2141 e a 6 d 989368530 d 88 d 42 d 817e384 f 3 a a f a 0 89 f 4 c 7 c 2e2 d a b f 8 d 521 b 0 b 85e91951 d 93428 c 10 b 1935 a 53693771 c d a 32 a 3028300e0603551 d 0 f 0 101 f f 0 4040302078030160603551 d 0e040 f 0 40 d 54534120646520707275656261300 a 0 6082 a 8648 c e 3 d 0 40302034700304402206 d 7 f e 9402077e246 b 91120 b 105 f 4 b e c 4 a b c 344 b 8 f e 6e0 d 9 a b f 310 c 363048 c 471022006 d 6 f 93 c 781 a 22 b 6 f d 0 78116 b 5 d 6611 b 0 c 8 f 0 663e0 d 50 f 1 a 8 c 437 b f 23 f 8067e4318201233082011 f 0 20101303 c 303031163014060355040 a 130 d 446174654 b 6579732074657374311630140603550403130 d 5453412064652070727565626102082622 f 848525703 b 5300 b 0 609608648016503040201 a 0 7 a 301 a 0 6092 a 864886 f 70 d 0 10903310 d 0 60 b 2 a 864886 f 70 d 0 109100104302 b 0 60 b 2 a 864886 f 70 d 0 10910020 c 311 c 301 a 301830160414 c 7 f 2 c 3 d 3 a b c 329906 f 17 b 8e81 a c e 26 f 285 d 9 d e f 7302 f 0 6092 a 864886 f 70 d 0 10904312204200157 f e 5279891 a 7 c f 861e3 e b 172 a f 35 f b 3315 f 371602 f f 3137 f 73 c f 1 e b 51 a b 61300 a 0 6082 a 8648 c e 3 d 0 4030204473045022100 b 78 f 6 a 30 c 1155 b 6 f 8191 f 0 2513 a b 5 a a 5 f b 72 f 0 6211460 c b 5 d c 2532 f 0 1 f 6974430220324 e a 0 d d 97181e59020969576 e 5171 b c a 76 a 585 e b 472826777 d 3 a 8230e1414 f 830829 c 4e06042 a 0 3040531829 c 4404829 c 40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
"cms_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a613361383230363366333063303430663562656566326134633736303332623137353238353832336438336133383864646431643535666134393135356630320a" ,
"cms_signers" : [
"18c0b89a0b811cf49d8ae0bf0b978c6e408c0bafc05f2ceb1e0cc6d39f746c57"
]
} ,
"recipe" : {
"name" : "alg 2 that does not fit" ,
"seed" : "signing alg 2 that does not fit" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"cms" : {
"signers" : [
"Ana López"
] ,
"junk" : 40000
}
}
} ,
{
"draws" : [
{
"hex" : "66c8963e7ce6daa083ffb06565954cb2918751516f69e946786e2af042e23bc2" ,
"n" : 32
} ,
{
"hex" : "dfd6d1f07af702576856f7a07a350266" ,
"n" : 16
} ,
{
"hex" : "32ba6edd5ea9bb2231dd3ff16fe3d4dcf7da0779ab95d1090764e9c791761bb6" ,
"n" : 32
} ,
{
"hex" : "92676da921d3578af542d54e39421bb5" ,
"n" : 16
} ,
{
"hex" : "484851bb8f9752fd2bbacba3bd0e9c1c" ,
"n" : 16
} ,
{
"hex" : "d501a54e77b060190be4529994ccd045" ,
"n" : 16
} ,
{
"hex" : "41a7e5946057a98287a7f8cc0a4d20e9" ,
"n" : 16
}
] ,
"error" : "capsule: signing: la persona canceló la firma" ,
"hooks" : {
"cms_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a343936636231363063656430373136653661613932313437376563663265326665643430353933373262656136313832356436333334393263373031623364630a" ,
"cms_signers" : [
"18c0b89a0b811cf49d8ae0bf0b978c6e408c0bafc05f2ceb1e0cc6d39f746c57"
]
} ,
"recipe" : {
"name" : "the signing application fails" ,
"seed" : "signing the signing application fails" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"cms" : {
"signers" : [
"Ana López"
] ,
"error" : "la persona canceló la firma"
}
}
} ,
{
"draws" : [
{
"hex" : "50dcb612af63c4a09ce333555bb6179441658aa40af92eda50f7c0ad6a52c4f3" ,
"n" : 32
} ,
{
"hex" : "01dfa447971c86b085298a4f5a1ce469" ,
"n" : 16
} ,
{
"hex" : "7f573351a2508178ea6c5fa85ce703f85f679a703e8d08d8df4f385a964de177" ,
"n" : 32
} ,
{
"hex" : "580e791f741820a4ef2a9487a82bff76" ,
"n" : 16
} ,
{
"hex" : "e5cea15489363e52e984982fca9e08be" ,
"n" : 16
} ,
{
"hex" : "4da7865d2eba2c0e1ad46fe826ec2774" ,
"n" : 16
} ,
{
"hex" : "80023a6fb5a13103ff252f232351c95f" ,
"n" : 16
}
] ,
"error" : "capsule: sealing: the authority does not answer" ,
"hooks" : {
"author_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a343337663861323036326133376637376263323366393966343930323832623637343233326134373237353132613434353030643534626563666631613238660a" ,
"author_public" : "0b47823e71095dd59be78ac271c576ef389f87b64561ab07cf9a4ebcd02d2041" ,
"author_signature" : "1611fcdbb162b17aee1be16216e9f9394dfe72b26149ac7e6225fef0897246afac915a151376abe6c6e30517fc834e94798fb270a3522e5462fb72b29eaeee07" ,
"seal_subject" : "0fbaf10d255e6c081e37d585c6ac172b140f74ebde40419f0295d86f863d2d04"
} ,
"recipe" : {
"name" : "the authority fails" ,
"seed" : "signing the authority fails" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"author_key" : {
"seed" : "a1a2a3a4a5a6a7a8a9aaabacadaeafb0b1b2b3b4b5b6b7b8b9babbbcbdbebfc0"
} ,
"sealer" : {
"error" : "the authority does not answer"
}
}
} ,
{
"draws" : [
{
"hex" : "f28e93dca9effa1853702ae1f79791b02030884622a936584a1b096fd9dc23f0" ,
"n" : 32
} ,
{
"hex" : "5d03a65b405425ee97fcacdeb573e167" ,
"n" : 16
} ,
{
"hex" : "772db02a407e31b923eadcb7420cf5909fcdb19497dcf24732b0257133e49b11" ,
"n" : 32
} ,
{
"hex" : "99279eafb569831f48772121d50c89ec" ,
"n" : 16
} ,
{
"hex" : "0e93574066e87963aa8a744c2ed694b2" ,
"n" : 16
} ,
{
"hex" : "374f12af4e4e3ddc0763fb7efed8fdb8" ,
"n" : 16
} ,
{
"hex" : "e57cc34c77cda64b08043e4fa9cd911d" ,
"n" : 16
}
] ,
"error" : "capsule: self-check: the reader finds the verdicts F5 and S0 in this security area, not F6 and S0 (dd8dad5bfb2e4f8bacaa054ebfba5542d7b95fe4b82eba383b8cc1e7af03d18a: absent)" ,
"hooks" : {
"cms_der" : "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" ,
"cms_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a396462663136376138636232646338623635313063666365616465303265323633333164653433653932346161633137633839626265663232616365373936320a" ,
"cms_signers" : [
"18c0b89a0b811cf49d8ae0bf0b978c6e408c0bafc05f2ceb1e0cc6d39f746c57" ,
"dd8dad5bfb2e4f8bacaa054ebfba5542d7b95fe4b82eba383b8cc1e7af03d18a"
]
} ,
"recipe" : {
"name" : "alg 2 without a required signer" ,
"seed" : "signing alg 2 without a required signer" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"cms" : {
"signers" : [
"Ana López"
] ,
"extra" : "Luis Gómez"
}
}
} ,
{
"draws" : [
{
"hex" : "bf770c71ddc7b041e00a4efa30f04c21f8332b809a7446229f26c0a884289f28" ,
"n" : 32
} ,
{
"hex" : "5bff44633fb364e11bec508889a401ca" ,
"n" : 16
} ,
{
"hex" : "137ec19bbd381b387d6bdda6dde481f45c1d29dc176096c1051911e1aa9efd9c" ,
"n" : 32
} ,
{
"hex" : "dc9a6817c36e9bcf17666053b333ea30" ,
"n" : 16
} ,
{
"hex" : "c894bc7b1f95f8e155ddd1b15e73dafa" ,
"n" : 16
} ,
{
"hex" : "93feeade89bd990b7a76c435cc62cd1b" ,
"n" : 16
} ,
{
"hex" : "222270db7e7300dedfa0666d8ba0384e" ,
"n" : 16
}
] ,
"error" : "capsule: self-check: the reader finds the verdicts F5 and S0 in this security area, not F6 and S0 (Luis Gómez: without seal)" ,
"hooks" : {
"cms_der" : "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" ,
"cms_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a666135376265323238646633656665303761306435663433316165643131306533373030626533326437633434613462346130356234356361613734366436350a" ,
"cms_signers" : [
"dd8dad5bfb2e4f8bacaa054ebfba5542d7b95fe4b82eba383b8cc1e7af03d18a"
]
} ,
"recipe" : {
"name" : "alg 2 without seals" ,
"seed" : "signing alg 2 without seals" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"cms" : {
"signers" : [
"Luis Gómez"
] ,
"unsealed" : true
}
}
} ,
{
"draws" : [
{
"hex" : "aa9fd313beaa4554e37252aec93afbff2968b0139ee3167ff9e088ed1d56d091" ,
"n" : 32
} ,
{
"hex" : "ec55e7549b59a20d39583f8cee030cd3" ,
"n" : 16
} ,
{
"hex" : "eff15b68aea4085d6e3ec2d5ab59474201862dfea66e28a2a12bca1b0f8e6b35" ,
"n" : 32
} ,
{
"hex" : "c367f34a301927564e414157c8e78cea" ,
"n" : 16
} ,
{
"hex" : "7c5a357cf93d914f9559e855e5507d06" ,
"n" : 16
} ,
{
"hex" : "472920e6d68afb93ffa6176807088ea8" ,
"n" : 16
} ,
{
"hex" : "3b7afe3197d420a6e681b1febb12a670" ,
"n" : 16
}
] ,
"error" : "capsule: self-check: the reader finds the verdicts F1 and S0 in this security area, not F6 and S0" ,
"hooks" : {
"cms_der" : "6e6f742061207369676e6174757265" ,
"cms_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a643733663866636564333964383566393931626339643664353263643563646335333062333661343432646538646637646662626461646538336139303438620a" ,
"cms_signers" : [
"18c0b89a0b811cf49d8ae0bf0b978c6e408c0bafc05f2ceb1e0cc6d39f746c57"
]
} ,
"recipe" : {
"name" : "alg 2 that is not a signature" ,
"seed" : "signing alg 2 that is not a signature" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"cms" : {
"signers" : [
"Ana López"
] ,
"garbage" : true
}
}
} ,
{
"draws" : [
{
"hex" : "98e07769751b8c04501562882693e19fc950ac578b5b55df4f545aa90c5597ee" ,
"n" : 32
} ,
{
"hex" : "9808b1d4e3c0ba59eca769fb7f12c0eb" ,
"n" : 16
} ,
{
"hex" : "39fd1d69f8d497ba056f3fbef500325cf120e4bc1de9a028398b82d8822f2e56" ,
"n" : 32
} ,
{
"hex" : "c04083ee6a49bca79e50d1ea956ad692" ,
"n" : 16
} ,
{
"hex" : "827f8af97e8094fdc74a4d60780f7116" ,
"n" : 16
} ,
{
"hex" : "1945db433314e152bd08bc220a4263f0" ,
"n" : 16
} ,
{
"hex" : "d719915db153b655795782f2b38642cc" ,
"n" : 16
}
] ,
"error" : "capsule: SIGNERS holds from 1 to 16 certificates" ,
"hooks" : {
"cms_signers" : [ ]
} ,
"recipe" : {
"name" : "SIGNERS empty" ,
"seed" : "signing SIGNERS empty" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"cms" : {
"signers" : null
}
}
} ,
{
"draws" : [
{
"hex" : "fcefc5bbfcea77fe240c6c96459678d62e47ae85ad5ba7daa1d0ad05c0bafa6e" ,
"n" : 32
} ,
{
"hex" : "58ff80d7345243283845b14b638f1e62" ,
"n" : 16
} ,
{
"hex" : "d80c97c2a4c04ed7c656df3f680f73a9e92e540e181a9577cec6a0459615a8f6" ,
"n" : 32
} ,
{
"hex" : "0fc85e6ac7ea0310c8ac7ca9ff1f539c" ,
"n" : 16
} ,
{
"hex" : "82fac16dff61cbb0bb192deae3f8ea62" ,
"n" : 16
} ,
{
"hex" : "8d0349c736e6c17eb20c4b22fbba659f" ,
"n" : 16
} ,
{
"hex" : "ffd971b1734880fc169a0d7fa8e9bdd5" ,
"n" : 16
}
] ,
"error" : "capsule: SIGNERS names a certificate twice" ,
"hooks" : {
"cms_signers" : [
"18c0b89a0b811cf49d8ae0bf0b978c6e408c0bafc05f2ceb1e0cc6d39f746c57" ,
"18c0b89a0b811cf49d8ae0bf0b978c6e408c0bafc05f2ceb1e0cc6d39f746c57"
]
} ,
"recipe" : {
"name" : "SIGNERS twice" ,
"seed" : "signing SIGNERS twice" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
} ,
{
"path" : "fotos/año 2026.txt" ,
"text" : "Una foto que no es una foto.\n"
}
] ,
"cms" : {
"signers" : [
"Ana López" ,
"Ana López"
]
}
}
} ,
{
"draws" : [
{
"hex" : "35dde73f707fca13bec8b03a287de0aa2b611176838ba98d2d341d0a75a89eb5" ,
"n" : 32
} ,
{
"hex" : "f4c0f00d687a317470a1888726590243" ,
"n" : 16
} ,
{
"hex" : "999031da8a915056ebee4629fc0db0dd424d23f1a8b72dc6cc13c26950523275" ,
"n" : 32
} ,
{
"hex" : "88c6d4ca4bda53c3adfc1a6f6b1566ce" ,
"n" : 16
} ,
{
"hex" : "0116a6433f7d2ce28852f63d8fea8cde" ,
"n" : 16
} ,
{
"hex" : "de781149c1c848ff50088f78f23abaab" ,
"n" : 16
} ,
{
"hex" : "b0b8a9a17d42315a66ca27b1e0430a48" ,
"n" : 16
}
] ,
"error" : "capsule: SECURITY_CBOR of 65561 bytes does not fit in the area of 65536 bytes, the largest" ,
"hooks" : {
"cms_der" : " 3082 f f c e 0 6092 a 864886 f 70 d 0 10702 a 0 82 f f b f 3082 f f b b 0 20101310 d 300 b 0 609608648016503040201300 b 0 6092 a 864886 f 70 d 0 10701 a 0 82017 b 308201773082011 d a 0 0 302010202080 a 2 d 17 d 0 344 c 4223300 a 0 6082 a 8648 c e 3 d 0 40302302 d 31163014060355040 a 130 d 446174654 b 65797320746573743113301106035504030 c 0 a 416e61204 c c 3 b 370657 a 301e170 d 3230303130313030303030305 a 170 d 3430303130313030303030305 a 302 d 31163014060355040 a 130 d 446174654 b 65797320746573743113301106035504030 c 0 a 416e61204 c c 3 b 370657 a 3059301306072 a 8648 c e 3 d 0 20106082 a 8648 c e 3 d 0 30107034200045 d 675 b b e b 635e0726 c 75605 f 78e67 a 0 a 252 c 3 c 79 f 27 b 2 f 8 e d 9933 f d a e 98893 e c b e 0 a 8970 f 8 e f d 6 a d f b 897 f 98 c f 2 b 493 b 3 f 8 d b b 4 d 50 b a 5 c 5e2 d 5 f a 65 e d a 82 b c 7 c a 3273025300e0603551 d 0 f 0 101 f f 0 4040302078030130603551 d 0e040 c 0 40 a 416e61204 c c 3 b 370657 a 300 a 0 6082 a 8648 c e 3 d 0 40302034800304502202 b 6 d 1 a 4052 c 0 4638 c d 70 f 7 c b f 1 c a e 6272 c e b a 5 b 44 e b 936 a d c 3514 a a c 5e0210 d b 0 22100 b f c 3 b a f 1635 d e c 527 a c d 3469 c 46 d f 24 c e 66 b 3e5 e 10e4 e f d 5 b 66 f 31250 b d 79e913182 f e 193082 f e 150201013039302 d 31163014060355040 a 130 d 446174654 b 65797320746573743113301106035504030 c 0 a 416e61204 c c 3 b 370657 a 0 2080 a 2 d 17 d 0 344 c 4223300 b 0 609608648016503040201 a 0 8184301806092 a 864886 f 70 d 0 10903310 b 0 6092 a 864886 f 70 d 0 10701302 f 0 6092 a 864886 f 70 d 0 1090431220420 b 74 b 0 d f 5 c 3 d e d 4 a c c c 1214 a 11852 a 9e343 d 82732 a 6e4 b 423486 b b b f c a 904 d 2 a f 3037060 b 2 a 864886 f 70 d 0 10910022 f 3128302630243022042018 c 0 b 89 a 0 b 811 c f 49 d 8 a e 0 b f 0 b 978 c 6e408 c 0 b a f c 0 5 f 2 c e b 1e0 c c 6 d 39 f 746 c 57300 a 0 6082 a 8648 c e 3 d 0 403020446304402206 a a 2 b 25328610 a f 0 17 b 0 7300e777 f 44 f f 5 a 1 a 9 b 52 f 0 0 a 9333e7 d 12 d d b e 3 e f 0 2 f 0 220688 d 717173315 a a d 2340 c a 5 d 59619 f 9 a f a 9 b 0 359 c 0 59 f 1907e02 c f b f 0 42 c f 481 a 182 f c e b 3082034 f 0 60 b 2 a 864886 f 70 d 0 10910020e3182033 e 3082033 a 0 6092 a 864886 f 70 d 0 10702 a 0 82032 b 30820327020101310 d 300 b 0 6096086480165030402013065060 b 2 a 864886 f 70 d 0 109100104 a 0 560454305202010106032 a 0 304302 f 300 b 0 6096086480165030402010420 a f a c 0 d d 657 d 0 5 d 4348 f 1506 d 41109901 f 5e2 c 11272 f 70 d 2 e e e 82e2 f 6 e f 599 a f d 0 2012 a 180 f 32303233303832333135303932375 a 3003020101 a 0 8201833082017 f 30820126 a 0 0 302010202082622 f 848525703 b 5300 a 0 6082 a 8648 c e 3 d 0 40302303031163014060355040 a 130 d 446174654 b 6579732074657374311630140603550403130 d 54534120646520707275656261301e170 d 3230303130313030303030305 a 170 d 3430303130313030303030305 a 303031163014060355040 a 130 d 446174654 b 6579732074657374311630140603550403130 d 545341206465207072756562613059301306072 a 8648 c e 3 d 0 20106082 a 8648 c e 3 d 0 30107034200046 e f 0 b c 1 e f 2 b 58337 a d 784 b 0 0 97970 a e 832 c 2141 e a 6 d 989368530 d 88 d 42 d 817e384 f 3 a a f a 0 89 f 4 c 7 c 2e2 d a b f 8 d 521 b 0 b 85e91951 d 93428 c 10 b 1935 a 53693771 c d a 32 a 3028300e0603551 d 0 f 0 101 f f 0 4040302078030160603551 d 0e040 f 0 40 d 54534120646520707275656261300 a 0 6082 a 8648 c e 3 d 0 40302034700304402206 d 7 f e 9402077e246 b 91120 b 105 f 4 b e c 4 a b c 344 b 8 f e 6e0 d 9 a b f 310 c 363048 c 471022006 d 6 f 93 c 781 a 22 b 6 f d 0 78116 b 5 d 6611 b 0 c 8 f 0 663e0 d 50 f 1 a 8 c 437 b f 23 f 8067e4318201233082011 f 0 20101303 c 303031163014060355040 a 130 d 446174654 b 6579732074657374311630140603550403130 d 5453412064652070727565626102082622 f 848525703 b 5300 b 0 609608648016503040201 a 0 7 a 301 a 0 6092 a 864886 f 70 d 0 10903310 d 0 60 b 2 a 864886 f 70 d 0 109100104302 b 0 60 b 2 a 864886 f 70 d 0 10910020 c 311 c 301 a 301830160414 c 7 f 2 c 3 d 3 a b c 329906 f 17 b 8e81 a c e 26 f 285 d 9 d e f 7302 f 0 6092 a 864886 f 70 d 0 1090431220420 b c 1 d 36 d b 0 14 b b f f 4 b 6813 b a d 4 c b 367e02 e b f 9415335 b 4639 e f 1588 a 29 a 281 e e 3300 a 0 6082 a 8648 c e 3 d 0 403020447304502201 e a 88 d f 142 a 0 894 a 3552 e a 5280083079895e50596 a c b f 956e6 f 8981 b a d b b 2 d c f 0 22100 a 9 f 0 b e 6 e b c 172 d 2 e c d f f 3 a 2982e2 c 95 d 6 c 180 c c 397 c d 0 d 4127934027 e b c 85 a 493082 f 99406042 a 0 304053182 f 98 a 0 482 f 986000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
"cms_message" : "646174656b6579733a646b63333a617574686f722d7369676e61747572653a76310a343864666662396639303931393830313239373361653038666535363434343032326565336436383433626134626138366439306133316230646464633462370a" ,
"cms_signers" : [
"18c0b89a0b811cf49d8ae0bf0b978c6e408c0bafc05f2ceb1e0cc6d39f746c57"
]
} ,
"recipe" : {
"name" : "alg 2 too large for any area" ,
"seed" : "signing alg 2 too large for any area" ,
"files" : [
{
"path" : "nota.txt" ,
"text" : "Hola.\n"
}
] ,
"cms" : {
"signers" : [
"Ana López"
] ,
"junk" : -1
} ,
"large_area" : true
}
}
] ,
"description" : "What capsule.EncryptFiles of datekeys-go writes when it signs and seals, for each recipe, while crypto/rand reads the keystream of ChaCha20 under SHA-256(seed) with a zero nonce, with each draw and what each hook was given and returned, and how capsule.Open reads it; the text of each error; and how capsule.Open reads the samples that encryptFiles of datekeys-ts wrote (scripts/signing-go-vectors_test.go). The capsules are time_only for round 1000 of Quicknet, written at its genesis." ,
"go" : "go1.26.8" ,
"release" : "b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39" ,
"samples" : [
{
"author_keys" : {
"dkauthor1xes558a6zzqw4urrz8c80u33znlv2yzc9t9f5ywa8a0c8ysq9atqt2k706" : "la clave de prueba"
} ,
"dkc" : " 444 b 43310300000000000079000001 c a a 5006 a 646174656 b 657963617001010250 f b d 7 b 0 28025192 b d 0 6 c f e 77 d c c 6 f 255 a 0 37853646 b 315 f 65794 a 325 a 584 a 7 a 61573975496 a 6 f 784 c 434 a 755 a 58523362334 a 72496 a 6 f 695 a 4746305 a 57746 c 65584 d 3663585670593274755 a 585136646 a 45694 c 434 a 79623356755 a 4349364 d 5441774 d 483004006167652 d 656e6372797074696 f 6e2 e 6 f 72672 f 76310 a 2 d 3e20746 c 6 f 636 b 203130303020353264623962613730653063633066366561663738303364643037343437613166353437373733356664336636363137393262613934363030633834653937310 a 75667144596756764 f 4862654 b 4e6549666 f 37746 c 6e5454714753547431646 e 61795367776 a 77764 d 54643834717675574 b 7 a 347 a 7174323358716868742 f 6 c 0 a 47432 b 4 a 6 c 70575 a 4 a 7745384 c 6 d 614 b 4e354 c 644 f 356 c 656e5838494 b 6 b 36676838744 c 66736 a 2 b 38636 d 4 a 415477303065376 c 4 b 6e6 b 7 a 35793037644565380 a 666 f 6 a 456 a 36536e2 b 77706679712 f 6 b 557355622 b 7 a 6871557 a 4e366567597161724763322 b 2 f 614 f 58770 a 2 d 2 d 2 d 2061366 b 456e494 a 72726 a 5551366 b 616877506 a 7076504 b 53377078744 f 4 b 6 d 737 a 51735453536 c 68446e450 a f b 4 d 4 a 3459 a 132 b 53148 c 44 d 1477 f 2 a 24 b f 93 b 6 e c 872633 f f 60 b d 1 c b d 3e2 b 0 0 e d 28 b 8 f c 107 b f 2 a c 5 c f 849 b d 405692 c f 0 8 b 170 a 8 a 3 c 0 421357188 f c d 6 c 68e1256 c c 247 c 30e8429625 d 2674 c 66 d d 5e3 a d 7 b 7 e a b 629 d 1034 a 58 c 34 d 0 7 f b 5e06 d a 78765 b 4 c d 1 c 9 a 69 d 767 f 4846491079 c 48981364 d a 293 b a 3110179 f 1 a 40 a 0 b c a 41760 f 72 a 55e6 b c 9 c 6167652 d 656e6372797074696 f 6e2 e 6 f 72672 f 76310 a 2 d 3e20583235353139203946324 f 35366 f 5235766 b 4 c 314 b 4432614 b 44456 c 2 f 6132327143657648514e7058534 b 47567 a 5378566 b 0 a 7478364e44677653686 f 51492 f 6 b 49745644484970572 b 656e7331565436474 c 4 d 5466426 c 4 c 363254794 d 0 a 2 d 2 d 2 d 204 f 2 b 744263474459476854306 f 537651645231386867783854616255346e676 e 624e3847744345595 a 67550 a 921898 a 28 f 2 d 406 d 0 3 a 0 d 70 c b f 13264 c a f 3 e e f a 8 c 94 b c 2 c c f 6 b 46 e a b 542279 e d e 91214 b 15 f b 3 f 3 a 9775 d 590 c e 600533 d 6 d b 4 a e 4183 f 812 a 31 e f 0 f 3 b 9 c 9 c d 4e7319 c a a 87 a 620 c b 6 f e 92 b d 28111 b 38989 f 0 91 d 5 a 9e0 c 886 d b e 7 b 62 a 10e166089 b 0 3 b 15 c a a 23e6 e 3 c e e 17 c 284613 d 1 a 47674 c 80 c 791 a f 773 a 355 e c 863 f e 0 18370753 f 13 b 50 d a e 2515 a f 994 c 700e847 e a b 79006 d e 9 d a 4 f 3728 a 0 86452923 a 4 b c a 4377 c 3 c d e 7 b 7 a 91 c 10676 f 21472 b 8 b 70 d 9 f 0 7 c 2 a 4 e e a 205 d f 80018 a 8471e345075803 e 8 c 0 c e a 4 c 980 c 2 a e 3 c c 6075 b a b b e 0 6821 d 9760 d 12 f d 3103 c 98 c 0 0 484 c 9e19 f c 0 8148 c a 99 a 525 f 91e327 c 142 d e a c 9 a 47300 a e 3 a c 6 c 0 b d b 10 b e 722 c 9 d 2 b c 732 f e e 169 a a 75174 f 795 a 41e50781108 d 84 b 7 c b 113e1 f 46 f e e 276e1 d 45665530731 c 4 b 39 c c 0 9e71 c 1e59 b 9 a 7 b 848 e a c 55 b d 5 a f 776 c e 75 b 62 a b d 756 d 2 f d 9 f 876 f c 84 b 55 c 16 e a 3 f b 77 a f 391 b 0 6023 c 6 a 529 e b 82 c 1862e86 b 3 a 13 d 354 c a 81 d 3 a 4 b a 3 d 2 f 9e3 b b d 1 a f 24218 c 263555 f 663 a 6748 b 68 c a f 5 a 1740078 f b d 63065e704 f 59 a 26 f a 7 c c c b f 967 c 0 448 c a b 1 d 2 c b 3 d c 91 d c c 2 d e 120220 d 2 e b 9 e d 8 c b d 870 f 357 f 2e0 c 52 a c 45 c b 73 d 264 f a d 59 b e 1027 c 423611135424 a 476 b 2 c 59507144 f 6 d 5899 e b c b 1 e e 11 d 315 f c 1096794 c c a e 9 a 68889e0 e b 3603 f f d 81 d 9 d 0 49 a 3 d 743926 e b a 1378 f 17 c 0 88 c c 78190e3 f e 74 c 8e6 d 1 c 67 c 0 4 e e 0 12 c 82287e0 d 310e5 b 86638 a 59431999e13 b a 2 f 5 f 51e4 f a e 283 b c 7 f 534 c 83 d 0 f 4 a 6 a 819 a b 32 f f 2258 e c d b 9869 d c d 0 297 b 5 a 5681687507 a 5 a c b b 8e660 b 9 d 100708 b e 17 f 2177072 b 1 a d 7 c a 66 a 837 b 5622 f 1 d 0 27 f 0e5 e 65476 e e 0 71623 b 0 0e391 f f 991 a f 864 b e 3 b 8778 e b 7 b 0 0 b 651 e c 34 c b c e e 85458 c 3 d 64 c a b d 68 d b 3013 e d b a 12 a 3 f f 5 d 85 c 0 10518 a a 4 c e d 0 b 75282 d 7 c c 90 b 2 f 49017 c f b c d 1 d 3 c c d b 43 d 4 a 3825604 d a d 4 a d 5 c 7 d e a d d e 8 a f e 0 f 9576 b d 4 a 3e57 a 919966 a c 49 b b c 357 c 2751 c 77 b 47 e f c 5 a a f a 64e6561 a 472703 c 9191762704 a d 16 d 0 0 225e01309 f 3 f 477295e2 d a 18 a 89 c 297 b 9 a 4 a d 72 b c 0 c e 94 d 1 a a 18419 f b 29939e257 b 335 f 7 d e 81 f f b 585 d b d a 2 d 47 f b 61 f e b 161 b a 4 d 0 d e 0 538 c 75 d 8 a 0 908037 c a d f 36832 b 265 f 9896 f 0 3 e b b 9 d 1 a d 24792e4 b f 73207 f d 8 c 88 c 0 c 80 a 6 f d 9 a 30 f 5 d 6 d 52 b 3 e a 50 b 45 f b 19 c c d 59115 d 3 b 3 b 3 d b 69298 f a a d b 16 a 50 b 356741 a c a e 20322 f 578 f b f 4 a 0 b 5 d 5 c d d 6 b 0 c 33 e a 777563e189242915413 f 2 a f a d e b 6e0 d 73 b e 5 f 774 a d 0 352 e d c e c 25 a c e 16657 a 68 d 114 e f 0 a 5e420 d 7 a 68 b 879 c e 868 d 0 51 b 7 a 1 f 98996 d f e 881 c b f 0 c 82 f b f f 44 b c 0 7893 c 0 131 b d a 2735206 a 6 a 3 c 7175328 d 2 b e 88019888 f b 3611 b 0 375 a c a 2 f 11 a 93 a a a 8 c 69 b 95 b 18 b 50 e e 8 b 31 f c 58 d d 3323 e f b 5237 f 32652 f 78 d f 45 c 82 c 0 9 b 987697 f c 7 a 9 b 892 a a a 76043 d a e e 8 a 9 c 44 a 0 7 b 31 c 33 b a 7 a f 9e017 b c 0 d a 87064 f 57e8 c 2e122 f 1e868 c a 997 f 4 f 46274518 c 4 f f f 648 f 189e46 f b 7 b c 768 a 69 d 6 e b f 9 a f a 5 f 5363 d 7563 f 2 b f 68 b e 62 b 7 a d 6269 f 155 f a d d a b 78960 c 249 b 6864 a 83 d c 1533 c d b 53 c f 5 f 0 6129 d 80211323 a d 0 1 b 51 d d 14 f b 989 d c 65787 c 3019e52 b 3 f 99 d 598e435049 b 8 b 471411229 c d 52 f d 1 d c 7 b 0 b b 60e20 e e 11 f a a 2 f 0 99 d b d f 8369 f b 42464 a d 12 f 0 75659 b 1 b b d 6 f a 1760299 f f 0 1004 a 3463 a 6 b 8 f 86 c 2230 f 454 b 0 34592 c 9 b 779300 b 748 c 21 b c 1 c 26 c 81 c e e c d 1 f a d c 63 d 85 b 0 c 97 b 1 d 5 c 2058 b e b 530 a f a a 289278 d a 71 c f f 7 a 7544365e9772 f e 5 c a 84202 a d b f 0 9152 c 1 f b 7 f 7 f 936e16 d 0 847e2933 a 5 b 4 d 48959 b 8 d 48e2 d 104 b a 72e32 c b a e b 17 b 87e23372 e f b e 0 0 9940e662337 c 77 c 7 f 8 d e 80917 c 0 0 b d 82 b d 6 f b c 417108e6 a 4 f 1
"name" : "alg 1" ,
"opened" : {
"area_len" : 32768 ,
"author_key" : "36614a1fba1080eaf06311f077f23114fec510582aca9a11dd3f5f8392002f56" ,
"files" : [
{
"path" : "carta.txt" ,
"sha256" : "03099b51191207a3859384cf7ffb2c715e325cec6c019c6e735c22e1ca69e8a3" ,
"size" : 13
} ,
{
"path" : "docs/año 2026/acta.txt" ,
"sha256" : "877c16d3221cc9231c966dd50d0976c93d5de695d3e3d19ec9c23ea68f29806a" ,
"size" : 21
}
] ,
"head" : "a5006d646174656b6579732d68656164010102582057d4a40ff84250ec392aefe5132e5837480aad335a1191842161bba9faac00cc03684669726d61646f2e0582a5006963617274612e747874010d0200030d04582003099b51191207a3859384cf7ffb2c715e325cec6c019c6e735c22e1ca69e8a3a50077646f63732f61c3b16f20323032362f616374612e7478740115020d031822045820877c16d3221cc9231c966dd50d0976c93d5de695d3e3d19ec9c23ea68f29806a" ,
"length" : 33000 ,
"lines" : [
"Firmado con la clave dkauthor1xes558a6zzqw4urrz8c80u33znlv2yzc9t9f5ywa8a0c8ysq9atqt2k706. No prueba quién la tiene."
] ,
"result" : "ok" ,
"verdicts" : [
"F4" ,
"S0"
]
} ,
"opened_saved" : {
"area_len" : 32768 ,
"author_key" : "36614a1fba1080eaf06311f077f23114fec510582aca9a11dd3f5f8392002f56" ,
"files" : [
{
"path" : "carta.txt" ,
"sha256" : "03099b51191207a3859384cf7ffb2c715e325cec6c019c6e735c22e1ca69e8a3" ,
"size" : 13
} ,
{
"path" : "docs/año 2026/acta.txt" ,
"sha256" : "877c16d3221cc9231c966dd50d0976c93d5de695d3e3d19ec9c23ea68f29806a" ,
"size" : 21
}
] ,
"head" : "a5006d646174656b6579732d68656164010102582057d4a40ff84250ec392aefe5132e5837480aad335a1191842161bba9faac00cc03684669726d61646f2e0582a5006963617274612e747874010d0200030d04582003099b51191207a3859384cf7ffb2c715e325cec6c019c6e735c22e1ca69e8a3a50077646f63732f61c3b16f20323032362f616374612e7478740115020d031822045820877c16d3221cc9231c966dd50d0976c93d5de695d3e3d19ec9c23ea68f29806a" ,
"length" : 33000 ,
"lines" : [
"Firmado con la clave que guardaste como la clave de prueba."
] ,
"result" : "ok" ,
"verdicts" : [
"F3" ,
"S0"
]
} ,
"ts" : {
"area_len" : 32768 ,
"lines" : [
"Firmado con la clave que guardaste como la clave de prueba."
] ,
"verdicts" : [
"F3" ,
"S0"
]
}
} ,
{
"author_keys" : {
"dkauthor1xes558a6zzqw4urrz8c80u33znlv2yzc9t9f5ywa8a0c8ysq9atqt2k706" : "la clave de prueba"
} ,
"dkc" : " 444 b 43310300000000000079000001 c a a 5006 a 646174656 b 657963617001010250 b 0 d 73887868 f f 62095513 d 43840 b 6826037853646 b 315 f 65794 a 325 a 584 a 7 a 61573975496 a 6 f 784 c 434 a 755 a 58523362334 a 72496 a 6 f 695 a 4746305 a 57746 c 65584 d 3663585670593274755 a 585136646 a 45694 c 434 a 79623356755 a 4349364 d 5441774 d 483004006167652 d 656e6372797074696 f 6e2 e 6 f 72672 f 76310 a 2 d 3e20746 c 6 f 636 b 203130303020353264623962613730653063633066366561663738303364643037343437613166353437373733356664336636363137393262613934363030633834653937310 a 6 f 76585874776 d 6 d 75392 f 5733596e65316 a 6 c 3076362 b 686 c 6 f 582 b 57485167324e47423264516 a 557733514151633968524 c 65597 a 68573478374 c 6 a 7649350 a 446 b 574 a 344 b 35342 b 66315057432 b 73635965314555675 a 74504731367778774e4 d 57384 a 494e39466361647 a 55442 b 545558784 b 486 b 6745693438596 a 67420 a 2 b 586 c 705954384756364 d 4 b 556132753133756 d 4e767 a 354 b 73617667614132336672754 a 3258362 f 2 b 590 a 2 d 2 d 2 d 204258376 f 354 d 55464e4333655961434 f 6 b 546 b 644 d 7770356e594368727444694671765850484736567 a 380 a 95 b 5 f d a b 284 f 2 c 912 d 3 c c 7 f a 5220 b b 8 f b 17735 d 48 a a a f 178 b 445531 d 2 b 9174010 d a 6 f 170 f 6 f 0 0e5 a 6 d e d b 30100941854 b 97777 c 8491851 d 8 c 858 c 67 b 0 0 4 b 0 c 9 d 95 b 8e4 d e 0 d 26715919 f 88728941 d 107e5 e f f 2e25 d e e 286 f 66 c 10 f 0 116 d 146 f e 7 e b b a e b 5 f 623e2 f 0 0 c 636 b d e 966562 c b 3511 a 46 b e 2 d c b 4 b 87 c e f 9596 b c 244 d 9546 a f 1 d 0 805 f c 9766167652 d 656e6372797074696 f 6e2 e 6 f 72672 f 76310 a 2 d 3e205832353531392074334 c 376 c 7452485367614547355050642 f 395 a 2 b 4 f 36515657334 c 696770744 d 5366544 f 4365426557450 a 4 f 716337796e5177564 f 7936437 a 4 c 77554 d 2 b 796 c 52437042756 d 394 c 6 c 384 f 4e646 a 384 a 63397035676 b 0 a 2 d 2 d 2 d 20586 d 4 f 50556347446548646443465034727036466 d 4 f 506 f 49336e526744476 b 3567746 b 2 b 37492 b 44686 b 0 a 717 e e 95e409 a d 8 e b 56743 f 91115 a 638195 d a a d 8 a 0 a 21115923 f 987 e e 465268e4 a 24 a 7 b c c 1 d 9 b 0 78764713 f 92 a 99 b 42 b 626 f 1 d 3104e6020 d f 63 b e b 2435 a c 2 f a 502 f c b b f 1151459e9 e c c e 2e0172 f 87 c 273 f 86e37 a 13587 c 843e95 b 908 c e 5 a 47 c 3e08144586 f 7 b 82 d 0 0 d 4 f d 768325 c a 119e970349 a e f c 826 c 4e18 b 76e0 b 3 a b e f 27 b a 5103769 d a 9545 c b f f 2 b b 3 a 8 d 6 f 648e2787 c 6484 d 0 81 f b b 22 a e 99 f 16282 a 5e3 e 9 d 21 e a 9e755059621 b e 30 d a 0 9094 d c 0 d f c c 2 e a b b 58086 e e c c b a 5 d 5e1 d f c c b 36 b 2 b b d 6 a 756 f 48 a e 30 a 30e89 f c 2 d 15 f 6603 f c 8e5 a d d c 6e5 f b 94 d 2 a 2 c 2e1785 f 55523 c 955 c f b b f c b f 57 b c b 2172e24423247 b 1 c 6 d 3 f 8 e a 855 c 1580332968 f 0 19 c 972 d f 66 f b 15 a d 7 c e 239e726 d e 654e59 b 7 d 2 f c 3844049 c 7 a 3e3 f 6 f 292 d 29 a 3 f 90 b f 0e835765980 c f 6 d 0 76e714 a f 76136 d b 1 f f c f f c d d a 239 f 6473 a 0 f 85 d 1 c 5 f 1 f c 5932 c e 2 d 4 a f d 4195 a 50 c 862 c 0 354 d 5e522 e c 9 c c 6 c a 7 c 84 f 258290 d 6 c 478 c 4e26 a b 255 c f f a 3 d 7 d b 1046 d 0 a d 60 b b 4376460 e b 53 c 4803 b d 69 c b 742211281382 d 5875562 c c 441298816 a 509 b 0 0 b 8 c 34 c 21 c 7889 b 65408 c 7 d 8 f 30 b 6 b b d 267 f 60 f e 8 e d 9343 d 6 d b 977 a f c 1 f a 9 f 0 2 b 338 d 1e7 b 6 e a f b 863 b 69614 c 188 c e 3949 f d 22 a 7023550967950 b e 80 b c 1 f 6 b 5 b 0e34 d b c b 79 f 1139e34 b 0 d 0 52 d 1088035 b 883 c 96 f 5 a 2 d 78e4 f 1 b b 55 f 0 b b a d c 6 a a 628614146 b f 52 f 0 9 b e 4 c 59996786748065 a e a 2 c f 5 c 1 d 8 c 3 a 4 a b e d e 840449 d 70 a b 59 c e 38 c 9 b 6 e f 8 c 58739 c b 4e06 d 483012 b 0 22 c 7e7 c e 1 a f e 73 c 0 6 a 9503 d 1666 d b 315 c 34e80 b 9112 a 8099 b a c f 9 f 0 0 32 e c 2408 b 884679 b 854 a c c b 617 f d 6e79 d 986257 f d 22439 b a f f 5 b e 0 58 b 5482 b 91 f 2 b 0 c 414 c 818 c 0 a 340740 b 3964501 f f 1 f 340e6 a f 0 c 6 b 3897 f d e f c 37 a e 39 f e b 80025 a 0 f 525 b d 4 f 35 d 7 f 23 b c 0 1 c 0 d c 3 a f 897 f 4553 d 9 a f 9 a 2 b 25 d a 22e48 b 800 f 6 b a a 8e97582 a e 7 a d 8 a 1 d 2 d 1 a a 6 f 4 f 0 d 0 0 6e18274 e 5 d 26003 c e 8839e36 f a 6 e d f 97 a 62685 c 81 a d f 51 e c c e 8 a a b 52550 e c f 187 f 2 c b 169 c 0 158662254 d 3 b 225 f 900241e9 a 4 a 576 d 6573e2 b b 31 b 0 0 f 3 b a 97 a 2e779 f d 1 e e 1178 e c 54 b 44731 d b 44193 b a 569e71 e 2 a 34 d 7808 e f 5939 b 30 c 0e0 e 14 b 95823094342 d f 15943 b f 141608 c 0 f 5 c 3 a d 56 b b 2 a 7915 c 1 f 7 a 2 c 348 b a 56134 c 81 c 5492 f 1084 f 36 b a 2 e f c 0 58 f d 109 d b b e a 43 f 70 a b a 6 c 3 a 67e479605 e 299928 b f 5 f 6 c 7e378 f 0 6 e f 39 d 63e81 c c 172 b b 6e0185 d 65 d 0 15e9 a 84309 a 69 d e a b a 5266e7 e 7326 b e 1701543051121 e c 33 f c 691821 f e c 2 d f 28 c 555 a 60 d 12 b 2 e b 0 b 4 f 2887 f 87 f d f e 74 b 394 b b 5 a 8 b d f 59728 b 7 b 88 f 0 44844e18 a 127 f 8 a 758 f 2 a c b b e 613 a 8 e c f f f b b 4 b 5 b e 5953555 e c 830518 a 471827 a 162 d f 1 d 1760575 c b e 3 c b 8434 f f a 57 e f b 8 d 5 f b d 9 a a 25 f 5522 a 2691e965 e 16 c 46 c 56 f 3 f b 6 b e b 851e6 c 5 f 98 d 0 f 8 d a 8 a f c b c 493480 b b b 92 c c 6 f 258 b 23 c 2e9 e 5 a d b 0 f 64 e d a a 3436091 b 2e423 d 5 a 38637 a 7633427 b 1 e c 5486610027543399 b f 96 a c d 27 d c 8084 e e 698961 c 80647 c a b 320 c 99 c c 5948 f 4033 d 6557 a d b 207 a e b 0 3 c 27116 d 4 a 904322e373973 c 4 f 48 d c 2 c 71 e f 59 e a f 1 f 57 f 9 c 3529 b e d d b b 1e62 e b d d 1817 b 578 a 0 96e2 c 6060 b a f 2844258116 f 543 d 6 c f 93 b 831187 f 720 f b 26067 d c 546 d 43 f 56 b f b 2 e a b 9 d 98 d b e f 68 a 38 c a 5966 f 86379 c 40 a e f f b b d 88761 c 6 c 3 b e 60214 f 5 a 5688 d b 1 a 7 f 7 d f 2 b 286 f 0 5 a 87 d b 28398 c a 3 d a e 58602 c c f f e f 77540 c 988 d b e c 0 b 6 a 1 d 88119 d a a 22e5 c d 8 d 2 c 878362e04 b e 39583e04829 e c 1 b 58 c 6901e0 d 0 e d 12 d 42415 b 7 e c a f 9234e88 b 362e9 a 5 c 3945841232562511 b 773912 f c b 9231 f 958 a 18 a 96 d d e 439 f 6e9 b e 928 a f 8429 b 7 d
"name" : "alg 1 and a seal" ,
"opened" : {
"area_len" : 32768 ,
"author_key" : "36614a1fba1080eaf06311f077f23114fec510582aca9a11dd3f5f8392002f56" ,
"files" : [
{
"path" : "carta.txt" ,
"sha256" : "03099b51191207a3859384cf7ffb2c715e325cec6c019c6e735c22e1ca69e8a3" ,
"size" : 13
} ,
{
"path" : "docs/año 2026/acta.txt" ,
"sha256" : "877c16d3221cc9231c966dd50d0976c93d5de695d3e3d19ec9c23ea68f29806a" ,
"size" : 21
}
] ,
"head" : "a4006d646174656b6579732d686561640101025820d83020f6577c7107d2acd42c3c87900cd9952e505740e137c246718d5ba00fe50582a5006963617274612e747874010d0200030d04582003099b51191207a3859384cf7ffb2c715e325cec6c019c6e735c22e1ca69e8a3a50077646f63732f61c3b16f20323032362f616374612e7478740115020d031822045820877c16d3221cc9231c966dd50d0976c93d5de695d3e3d19ec9c23ea68f29806a" ,
"length" : 32990 ,
"lines" : [
"Firmado con la clave dkauthor1xes558a6zzqw4urrz8c80u33znlv2yzc9t9f5ywa8a0c8ysq9atqt2k706. No prueba quién la tiene." ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
] ,
"result" : "ok" ,
"verdicts" : [
"F4" ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"S5"
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
]
} ,
"opened_saved" : {
"area_len" : 32768 ,
"author_key" : "36614a1fba1080eaf06311f077f23114fec510582aca9a11dd3f5f8392002f56" ,
"files" : [
{
"path" : "carta.txt" ,
"sha256" : "03099b51191207a3859384cf7ffb2c715e325cec6c019c6e735c22e1ca69e8a3" ,
"size" : 13
} ,
{
"path" : "docs/año 2026/acta.txt" ,
"sha256" : "877c16d3221cc9231c966dd50d0976c93d5de695d3e3d19ec9c23ea68f29806a" ,
"size" : 21
}
] ,
"head" : "a4006d646174656b6579732d686561640101025820d83020f6577c7107d2acd42c3c87900cd9952e505740e137c246718d5ba00fe50582a5006963617274612e747874010d0200030d04582003099b51191207a3859384cf7ffb2c715e325cec6c019c6e735c22e1ca69e8a3a50077646f63732f61c3b16f20323032362f616374612e7478740115020d031822045820877c16d3221cc9231c966dd50d0976c93d5de695d3e3d19ec9c23ea68f29806a" ,
"length" : 32990 ,
"lines" : [
"Firmado con la clave que guardaste como la clave de prueba." ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
] ,
"result" : "ok" ,
"verdicts" : [
"F3" ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"S5"
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
]
} ,
"ts" : {
"area_len" : 32768 ,
"lines" : [
"Firmado con la clave que guardaste como la clave de prueba." ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
] ,
"verdicts" : [
"F3" ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"S5"
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
]
}
} ,
{
"dkc" : " 444 b 43310300000000000079000001 c a a 5006 a 646174656 b 657963617001010250300524 f 9468 b 5 b 9 f 3200 e b 13 f b 9 c f 57e037853646 b 315 f 65794 a 325 a 584 a 7 a 61573975496 a 6 f 784 c 434 a 755 a 58523362334 a 72496 a 6 f 695 a 4746305 a 57746 c 65584 d 3663585670593274755 a 585136646 a 45694 c 434 a 79623356755 a 4349364 d 5441774 d 483004006167652 d 656e6372797074696 f 6e2 e 6 f 72672 f 76310 a 2 d 3e20746 c 6 f 636 b 203130303020353264623962613730653063633066366561663738303364643037343437613166353437373733356664336636363137393262613934363030633834653937310 a 733159565 a 3345334458395 a 737 a 704 c 6150506 d 4965396 c 6e766 a 623961646 d 316 c 39326e544 a 646 a 5 a 77796 c 467362424 d 726 f 4 d 774 d 764237537577656 b 500 a 467 a 576547735857753172666666586279686 d 6 b 7930662 b 5 a 6279657 a 6e5461794 e 71516 c 53566 a 73763337644 b 2 b 55506 f 7 a 37467849436567363376697 a 520 a 494e6 d 6 f 6e6 f 6 a 457 a 47712 f 3749787863466 d 65495958466 a 4 c 717 a 3751476657637 a 504347447 a 35576 f 0 a 2 d 2 d 2 d 20625873706 a 434 f 3577693075633165764 d 73344 a 6868412 f 6e59745666496 e 6431776e485 a 322 f 443250450 a f d 0 9 b 2 f 5 b 1658 f b 5 b 5 a d e 9650 c 93 d d 0 39 d e 46 c e 7173 a 7 b 5 a 36 f d b 4561 c 5635 b 6 c 2266 f b a a 935e9 a 0 c a 4 b d f 6900 f 4 c c 4 c 2994 c 1 f e 57e5 d 4846 b d f 72 b f 21283567739 a 27 c c 49322 c a 7 b a 7296 c 32 d b 326 b d d 0 90 c b c 52 a 3 b f f 0 c 80 f 13 f 8 c 76332 b 9e8 d f 9 d c f 4 f 8 c a 3 e a a 622 d 5161 d 1 c 8 b 480 b 72653e71 a 0 c 24 d a 4 d 406 f a d 79282 f 379 f 8 e e 5753057156167652 d 656e6372797074696 f 6e2 e 6 f 72672 f 76310 a 2 d 3e20583235353139206 e 3448793957747 a 2 b 6837456178482 f 4343623473355444334 a 77664 c 6 d 454e7658724 d 46686 d 4 b 626 b 4 d 0 a 737833796 a 6 f 61376537635 a 4 f 39503959424537566 c 326 a 454 c 4975636 d 4e6759594 e 6 d 494149767641450 a 2 d 2 d 2 d 203176443477683274694 c 734 f 6143694 a 6565763549486771454 a 3073662 f 6 d 4230544673306 d 723072456 f 0 a 2 b 8e8963 b f f 9 c 5 b 3151e669 f c 5 f c 408 b b d f 0 d b c 93 a 0 d 784 c 18 a 94 c b 1 a 25 b 87 e d 6 f 359 e e 15 f 6 b f c f 9261 c 335 d 8e75572 d b 83799 c 2 d 2638 b 7 f c 38767 f b 248 f 2 f c 20 b 1e467 b f c 0 7 a c d 67 c 2 e e 9 d 89 d 965664623e5654 a 3863 d b 5598700 a b 9 d 778 a 1244 f 58 d b 571985 d 214 c 7 a f a 0 a e 580 a f 7567e77 d c 57613 e c 71030 d f 152 a 84 d 89 b b a 8048217 e e 444 e f 96e78605 d f 4e59 d 53 b 8 a c 1741 b 7 e a d 2243e0 b 68 a c 5198 b 2 d e 1 f 9 a 3 c f 0 6e9 c 6 a c e 6 d a 61558 c a 4e45589 e 525 c 0e4419 e 87 b b 497e4 a a 0 1e9 b 24 f 83 f 4299639 c e b 589277738023 c a c 363 c 219203 f a 30e1667 c c c f 62 d 45 b a 27 d b 0 4 c f c 533 d 29 c 6 f f f c 0 48 d c 3466622e7748 a a 35 a 4 e b c a 55 d a 1 c e 46e9 d 184 a 5 c 9 b 4 c 5 d 64248 b b 72 c 8 c f 2427934 d 58864e0 d 8501 c 95 d 19 a e c 6529 b 0 a b a f 9 a 3869e99661630 b c 757049626787524 f a b 46886 d c 9 a 652 f 7e8 c 1919 c 1 d 1 f a 9 d 1284 d b 2 a f 45 d f 56 a f f a 727 b 45 f a 4 a 6 b 8e4 e 282 a 70 a 3145467 b 5 c d 914 b 46 d 1e3 e e 9 a c 25 a 933 c f 4812 f 3 c 0 e d 62 f 9 a f 1723 f 87596 f 71 a 34 c 69e2 f 14 f 7e50 a e 8 b e 5 d 0 8 d 8 d 890476961 a 543 b 7 f 9 a 6 b e 63 d 0e0729 b e d f 27279 f a f 6 c e 91987875 f f 5 f 2 b 48 a 1 f 93 e f 44 b 6 d 766 d a 9 d 7 f a 1 f 2496 f f 7 b 563 b b 0 537 d 757 b f b e 4 c 14e65 b 20 c 6102 f 14 f 3083238 e e b 2669e3856 c a 667 a 33e9 a b 179 c f 0 d 90 b 71 d 8e39 b 5 b d 1 c 5e85602 d e 8 a 0 4e42 d f b f f a f b 57 f f 1 a b 9 f 68 d 286 d c f a e 57e0 e d 24 c e 0 165 d e 9 d e 51 f f 11 d 5 d c 22 f f 769033 f 0 9 b 3 d b e 21 c 6 a 6132 a c 70 b a 4 a d f 0e0726 d 4 b 5 f d b f d 2 c 37 f 24 f b 1 d 96 c 127 b d e a 82 a 79 d 7 a 8 f 5 d 3426 a 93790874 b 0 d 2 c 1235e50 b 1 a a 93 c 6 d 6 d f 370 a 0 1 c 75e49042 d 5 f 55 c 5 f 383 f 5 c e 99178 a 7232 b 984722 d 225e95 c c c 91042941668 a b 1 a 4 c 5163 f 9 c 76 f 73700 f d d 49 c d 8 f 44 f 742 c a 6 b 98511 e e 5 b 0 2 c 8097 f a c 2 d 120778 a 423 d 92315 a 57439569 f 8 f c c f 0 7521 b 73 e d 1575 c c f f 4 a 8 e a 6 b 51 f b b c 8 a 9507261 f 601 c 584 c 0 6e02 a e f e 706139e7 d b d f b c 0 33 c 0 0 83 d f b 1 c f 6 d c b a e 9 f 27 f 75454 f 76 e a d a 16850 a 362 b f 8 f c 91 f c 2 b 3 c a d d c 19 d 9 c 9 f c 6 c 8 d 6 d 993 a 5193 b 645 f d f 799 d 4 c 78 a 6 d 362 d 4 a 44e073 b 5525 d c 163 a b 77 d 20 e d b 4 c 376556 e a 0 b 2016 a 1 b 2 f 41 c c 293 e d 3 b f e 368 e f f 0 54 a 7 b 0e7052 e b f c 6e20 a a 3 c 87 b a c 45 f b 3 b 98 a 76 c 5267e0 e e 3 c b 638 b 77646 b 10 c f b c 860 c 72 c 4 e c 71 f f 4 e b 0 c a b f 5805 c 45 f 481964 b 793 a d 807 d 757 c d e c b 509686 f d 5 d a e 1 d b a 1 f 80053 c 694806 d b 584 a 772068451 f b a c e 6 d b f 7 b a 0 35283 d a 5 b a 32 b b 80 c 121e86 b f 983e4 d 61983998 f 0 b f 502316 d 5 f 0 a 30 b 6892 a c a 4e2 e c b b 9 b 2 f d 173 d d 0 0 478 a f e a d 3 b 15 c f f 73 f c 3430 c 0 45 f 5 b 0 c c 46748 b 54 a 0 569e594 b b 6 d f 3e5 b a c 8 f 0 c e 4 e f c 5198 d e 2 c c d 73 e e 8668 d 62 b 5 f 972 d d 97e9 b c 16 e d 1 d 34 c 82 c 7 a d 4552 c e 4 c 0 f 4690 f d 6e7 d 4 d 205544 b 87 d 50063 f 0 0 0 d d 69015 f d 0 50 d f 4 a 65855 e b b 7 a b f 8 c 1818 b e 0 3 e c c 6 c 83259912037e81 d b 3e8 a 4 a 33 a 37 f 1 d b 9 f 48 c d 17 c 96653 a 20122 b 662 b 3 a 2 d b 26 b 1737 c c b 5 f 1 c 7 c a 4 c 6 a a 68 f a a e 82 f 630 c 8 f 0 941 c 15165e24 d a d 563 f 9 f 8 a 18 d 2 a 995 f 2 b 8 a a 62 e d 2 f d 89 a c 21 a 7 d 0 c b b 4 f 9215e4 f 8675 a 67e3538 a 23e081 b 0 c f e 0 1 e e 63 b d 71 e f 6 b c a 189 a 7 f f 28 a b 5 b 0 14987408 a 37 c 5 d 1 f 14 c 3 c a d e 0 81 f f 9 a a c 6 d 3e46 e 4 f 322 c a 4 b b c 240 a 5229 b a 4 c b 489758707764507 f 493667 c 4 f d d d 39844 f 5 f 95 d 0 0 6 f 7 d d e 1449 f a 67 a 878 d b 68282435 f d b 4 d 378 b 2 b f e 0 3 b f b 7059e4 c 30e10 f 3757891 f 69 c c c 6 c f 0 28 b 2041823141 a 666618 b 8500e59980 f 2875 a 5e6 f e 925 b 3 b d 2 b 7 c e 923 d 21 c 5355 a a d 385 c e b 28276 c 9 c d 654 f d 776e22 f f e 9078 a 4 a 9 c a 46 c d 7 c e 5271 d a 49 a 556 c b f 2 f a c c 5832 b 7 c 4 a
"name" : "a seal alone" ,
"opened" : {
"area_len" : 32768 ,
"files" : [
{
"path" : "carta.txt" ,
"sha256" : "03099b51191207a3859384cf7ffb2c715e325cec6c019c6e735c22e1ca69e8a3" ,
"size" : 13
} ,
{
"path" : "docs/año 2026/acta.txt" ,
"sha256" : "877c16d3221cc9231c966dd50d0976c93d5de695d3e3d19ec9c23ea68f29806a" ,
"size" : 21
}
] ,
"head" : "a4006d646174656b6579732d686561640101025820ceea1f65b9172aef3a2b665f999aec3f1f3b66e13a1802a25d7de4122263d7d40582a5006963617274612e747874010d0200030d04582003099b51191207a3859384cf7ffb2c715e325cec6c019c6e735c22e1ca69e8a3a50077646f63732f61c3b16f20323032362f616374612e7478740115020d031822045820877c16d3221cc9231c966dd50d0976c93d5de695d3e3d19ec9c23ea68f29806a" ,
"length" : 32990 ,
"lines" : [
"Sin firma de autor." ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
] ,
"result" : "ok" ,
"verdicts" : [
"F0" ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"S5"
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
]
} ,
"ts" : {
"area_len" : 32768 ,
"lines" : [
"Sin firma de autor." ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"No acredita que se sellara antes de la fecha de apertura: el sello no dice su precisión."
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
] ,
"verdicts" : [
"F0" ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"S5"
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
]
}
} ,
{
"dkc" : " 444 b 43310300000000000079000001 c a a 5006 a 646174656 b 657963617001010250 c c a 63e8 f 986 c 2 a d 32 f 0 a 83 a 60718 b 35 d 0 37853646 b 315 f 65794 a 325 a 584 a 7 a 61573975496 a 6 f 784 c 434 a 755 a 58523362334 a 72496 a 6 f 695 a 4746305 a 57746 c 65584 d 3663585670593274755 a 585136646 a 45694 c 434 a 79623356755 a 4349364 d 5441774 d 483004006167652 d 656e6372797074696 f 6e2 e 6 f 72672 f 76310 a 2 d 3e20746 c 6 f 636 b 203130303020353264623962613730653063633066366561663738303364643037343437613166353437373733356664336636363137393262613934363030633834653937310 a 6 a 614933622 b 48744263587777376 a 6 d 735 a 415146494 f 685456624 f 46704 c 6 b 532 b 6 d 774 a 4131763242595845576 d 54425236762 b 5759534 f 686 b 4232546 c 770 a 4536494 c 3048394 c 6 f 42576 f 56572 f 6 b 6 c 7341474 f 5 a 472 f 42736e37656774356970514955304 f 4 d 7347505 a 575949363036494 b 4e7753744 c 4 b 672 b 566132360 a 4 f 4552787459515 a 4538424968435552637872714678446864503866723175362 f 6 c 7232723962374e76730 a 2 d 2 d 2 d 2058706 c 497 a 516 c 6 a 57636 d 6 f 655779794666736 f 6 c 62346255757451464633313779392 f 7232436 c 6 c 68340 a b d 58 c d 4 f 570 e d 5 d 5 f f b e 8 b 57 c a a f 2 b b f f 91867 b c a 36 f e 3266137 b 2 e c 881335e57 a 14 d b e b b 1 c 2 f e b 5 c 5 c 0 0 60 c 7 d b 7 d 9508e5 e a 60482844e3403 d c d 35e97456 b 9 d f e 980 a a 93 c 9 a 0 d a 0 7 c 8659662889142 b f b 90e2 c 34 c 1727e7727 d 8490 d e 5 a 4 c 8 a 0 a e 9 f 50922 d 88 b c 73 d 924526 a 0 51801e34 c 5 a d 0 6 a 5e8239 e a 0 c 3 f 5 d e f 18 f 0 8921845 d a 6 c 4 c f 1 c 56167652 d 656e6372797074696 f 6e2 e 6 f 72672 f 76310 a 2 d 3e20583235353139202 f 47436 c 4332335058365854483639796 f 2 f 32517531453968784 c 465270736 f 48324875777052513646380 a 6 d 6 a 4 b 51723477356166626e3776515 a 43797 a 41345 a 4359795 a 5 a 565 a 784539516 b 63535039545 a 3431340 a 2 d 2 d 2 d 2039444e335547756 b 6 f 4 a 346 a 3933416 b 3970424e644 e 6674706e33534354554254787764493147766 c 67490 a 9 d 15021 c 4962 c c 237238 b 7490 d d c 3e149 b 7 c b 3 c 309 d c 3 b e 6e09 d 367 a 84 a 4834189 b d e a 83 c 7 e d a f d f e 45 a 68 b 5 d e 6 a 9 c 19e38561 f d 72 d 5 f 0 92 f 605 d a d 2 d a c d f 58 a b a 4437 e d 9591 f 3 a d 728 c 284 a d 940 f 5 b f e 8 a e b 92 f f d 3 e c 34 b f 0 f 8 a 77 f e 223272 e b 0 3 d 4 a 0 1e2 c 2 c a 9 a 191311 c 12842 c e b 887e8755 f 4 c 5e6014 a 7772 c 464 f 20e1 d 792 a 7e283 a 67256e7 e 5422 a b 73 c 7 f 4 c f 4 d e 61 f 78 a 8 a 0 85360336 c 694e478574 e 873 c 263482241 b 7 a 32903728305 b d 0 f d f 60e8 e 32412 c e 61 b 1 b 6385 a 7 e f 0 73 d 8282 a 45e6 f d c d 9 c 0 9778 d 11 e a e 9 d a c b 5e2709901 f a 0 8 f 5 b e 3 d a 0 6496 a e 21 a 1 f 6069 c f b 931 a 3 b 6 e d b c 13969 a 9 b 3e22 c 0 14 d 51 a c 252 b c f f 30e798 b 0 e f 9e036 a 619231835e9 b 9788140722 a 78718 f 7 c 4 f c 9 d 17 c 3 f 5e262 c 5 d 85524 f 8839731496147 c 78199 a 40e1 d c 5e430 f 2883 f 0 0 a 7 c e 312e3 e f b f 428 d c f 2 c 7 f 1 b 8 f 394 a 0 299 f 791 d 508 d 2 d 9 e e 4 d 9 b 0 e e a 5 e a 328693 f 702 f f a 1 b a b 81 f a 825 c 0 9 c 7755e3 e c 755 b d e 75 f 362 c 1 a a 3 b 95660 c d 39 b f d b b 41 a 426 a e 8289 f c e 769 c 769 a e 1 b 9 f 8e19 a 286 f f b b b d 58 f 4 b a b e a f 1 d 397639 d 794 d 7 f 0 a 345 c 3 c b f 97 a 9 c e 401 f 799 b 8 f 8 f 3178 e e 99229335913 c 4861e328 b 3 a d 5 d 700 c 8 a 688673427 d 8 c 297e8602 b 364 b 8 a 36 a d 6 b 351 b 7399920 d 6 f b 321 b c 0 16 d 8 c 6488 a 8 d 97178698 a f f 62 f 3 f 17 b 2 f 69839093 f 2044 b 9457 a c 6 b 1585 a f a 0 706 b 37210 c 524 a a 5 f d 300 d 92 f 2 f d a 26 f f a f 6 c e 3 c d 231 f 3 f 36 e a 4 e a 82276 f 9441 d 5 e b 86 f 1e320094511 d 89 c 20674 c 8 a 9 b f d f e b 43669 a 790 c c 50089 b 3 f a 5 a 599089 c 29 c 6e37 f 9 d 0 a a 4e6 b 3 e d c 2 b 35630 d 863638 e a b b 29 a 5470 f 1 d 80e6 a 1 f 72 a 75 f 7e573 d 1859 c d 3 a c 0 c b b 4347 f e 768 b a 0 6599 d 1 d 25 f f 575 c 0 53 c e a f e 5 e d 1 f 46244 f c 4 c a 4 f 416 a 4089 d c c 0 76 b 0 8579 c 6 b 0 d 2e66466 d a 573 a e c 4197 b 63498 f b 59 b 2e80 b f 28706 c 94 a 4464371 d 49421 b 3844 f 55625 a 0 b e e 9 c 4 d b 634 d 0 41347 f 78 a c f 71 d 2323e61 a 842 d 63690 a c 32686 f 82e214636786 f f 24581 a b c e d 12 f a f 50 c 382 d 9 a f f 6 e b d e f c a 5 a 486460 b e e 5 e a a e 14 a 851 a c 73 c 8685748 e a 76 a 8e747 a 7828 a 6 b a e 98 d 0 c b b 0 85605531 c 6070 c c e 225 a 272456e24133 c 0 6754 f 3 a 37 d 343452 b 35 f 4 b e 849 a b e 66913e09 f 6e47085 d 216 f d 1 a 2048 d b a e f b 94 a 50 b d f d 4 a 69436 d 0 a e 94 b 9 c e f 3 a 0 d 3e4 d d 7 b 7 f 1 b f 25e12 f 28 f 32 a e e 2300 e e f 5382871 f 8 d 1 c 0 41 a 370 c a 867041 c f d b 11982 d 9 c 95914 f a 925 b f 487 f c f 8 f 775 c a 6 a 6 a 6 e e 7 e e 5 f c 3 d 8 c 96 a 517 a c 59 d 95 c d 9 d 603514 b d 62 e c 8e0 a e 620930576 e b d 281416292 c 68 f c 39541168e880 b e 9341682 d c c d 0 62 f a 6 b c c f 4 a 199888019 b 9 f 2 b 480 f f 8458 c 7724 d 1e462 b c 717 b 88 d 1 f a d 846 a c 517 d 4 b a c e f e 2e16 e 34 e a 22 f 85959 f 5927e54 f a 340 f e c 8723 a 7008e4 a 0 658 d 7800 d 97575 a 0 9e22 c 9 b a e d 66416 b 5e16147567 c 653206 b 47 a 1 f f b f 217583865e1 d 31 f 1272123 f 6 a 0 1257 a 91 f 744 a f 899171e9 a a 7 d 0 0 5 c a 0 0 d 9 b a d 14805 a 0 1 a 2e373 b 12 d 9 a 4 a 142 e a e a 314 f d 963 a 7 c 730e457 f 5670361 e a 0 61 d 98 a b b 5 b 400 b 9 c a b 4 b c b d 50737 c 97 b 8213945e419755539 a d 8 f 2872740 f e 12 d 9 b e 624 c 2 c 22 a c d f 83750 f b 74e888 c 58 c 241 a c 1 a 90 b c 8 e f 2 b 0 24309 b 33 c 0 c b 57 a f 9 b 1 c 9 c 5376 c b 1 f 49 a 0e9 c 45 a 94 d 0 b f b 0 6 c 90 b 80 c f 34 c 98e3 e 8349146 e a c b 131 b 112 f 9296 a 63110 c 7 f f 0 15733 b 3 a 8804170 e b 78 c c 403117 d e e b 3 f 31 a f d 7364 b b b 45 c 2 d e 72519271 d b 6 b 3e7 c 11707 c 58 a 24328 a e b f 543 d 7 f 2 d 209 d e 65543127 c 2 d 6e7 f 939 b d 4 b b d 501005 c 0 6 f b 78924 d a 6171 b 8 c f 45 d 873e2 a 3508 d 4 a 6454 b 59 b a 6 c 49 d 7 a 85 b a a d 4 f 5 a f 0 b e d 386 c 55 c 0 2e4854 e a f 48 b 1985
"name" : "alg 2, two signers, sealed" ,
"opened" : {
"area_len" : 32768 ,
"files" : [
{
"path" : "carta.txt" ,
"sha256" : "03099b51191207a3859384cf7ffb2c715e325cec6c019c6e735c22e1ca69e8a3" ,
"size" : 13
} ,
{
"path" : "docs/año 2026/acta.txt" ,
"sha256" : "877c16d3221cc9231c966dd50d0976c93d5de695d3e3d19ec9c23ea68f29806a" ,
"size" : 21
}
] ,
"head" : "a4006d646174656b6579732d686561640101025820f68703933faf99a6abb5997beb8af8bc58f7aa93dd5a7110c445337c3a6b94310582a5006963617274612e747874010d0200030d04582003099b51191207a3859384cf7ffb2c715e325cec6c019c6e735c22e1ca69e8a3a50077646f63732f61c3b16f20323032362f616374612e7478740115020d031822045820877c16d3221cc9231c966dd50d0976c93d5de695d3e3d19ec9c23ea68f29806a" ,
"length" : 32990 ,
"lines" : [
"Firmado con un certificado a nombre de «Ana Pérez», «Luis Martín». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial." ,
" «Ana Pérez» (emisor según su certificado: «Ana Pérez»), sellado por «Autoridad de sellado de prueba» el 2023-08-23T15:09:27Z, antes de la fecha de apertura." ,
" «Luis Martín» (emisor según su certificado: «Luis Martín»), sellado por «Autoridad de sellado de prueba» el 2023-08-23T15:09:27Z, antes de la fecha de apertura." ,
" DateKeys no comprueba quién emitió los sellos."
] ,
"result" : "ok" ,
"verdicts" : [
"F6" ,
"S0"
]
} ,
"ts" : {
"area_len" : 32768 ,
"lines" : [
"Firmado con un certificado a nombre de «Ana Pérez», «Luis Martín». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial." ,
" «Ana Pérez» (emisor según su certificado: «Ana Pérez»), sellado por «Autoridad de sellado de prueba» el 2023-08-23T15:09:27Z, antes de la fecha de apertura." ,
" «Luis Martín» (emisor según su certificado: «Luis Martín»), sellado por «Autoridad de sellado de prueba» el 2023-08-23T15:09:27Z, antes de la fecha de apertura." ,
" DateKeys no comprueba quién emitió los sellos."
] ,
"verdicts" : [
"F6" ,
"S0"
]
}
} ,
{
"dkc" : " 444 b 43310300000000000079000001 c a a 5006 a 646174656 b 65796361700101025026814219 a 669 f 72 f d 5 b b 551e1 e 55 e e f 2037853646 b 315 f 65794 a 325 a 584 a 7 a 61573975496 a 6 f 784 c 434 a 755 a 58523362334 a 72496 a 6 f 695 a 4746305 a 57746 c 65584 d 3663585670593274755 a 585136646 a 45694 c 434 a 79623356755 a 4349364 d 5441774 d 483004006167652 d 656e6372797074696 f 6e2 e 6 f 72672 f 76310 a 2 d 3e20746 c 6 f 636 b 203130303020353264623962613730653063633066366561663738303364643037343437613166353437373733356664336636363137393262613934363030633834653937310 a 6 a 48412 b 4 f 2 f 4 c 355873314 b 307573737578624 a 6158493958566774526773562 b 366 f 4537415575786 f 7174303973334138436 a 41304 f 3154706 a 797 a 2 f 30690 a 4638634 f 3857336336637136434265335132724954483470486 a 326 d 6467504 c 464 d 6 f 75654 c 5230695864504e546 b 61642 b 36465 a 584e51343650586652665 a 0 a 69757579696 d 3038784 b 455838764663676 c 41795862305333746470553162322 b 58312 b 336 c 7 a 7 a 71414 d 0 a 2 d 2 d 2 d 20664 f 5333356 f 434 d 412 f 6650317657456578796776697341634878556 f 30336e4 f 2 f 49706849336 f 5565380 a 1682 a b 94 f c 0 1740 a 5 d 0 5 c d 788 e a a 6687041 b b 34 f 77 f 602 c b f 5 d a c 29 d 903 e c 0 25 b 3 c f 8371 f 0 0 686326 a 753572148 f d 645683090 b 9 f 0 254e48844 d 26 b 3352 a 1 d 3047 a 0 b a 4689480095 d 4 f b 0 f 92418 d 0 d 845 a a d d 7 a b 25 d 2 c 0 2 b a 62 f 9 b 6 e d 496e74136716 a c 86 b 919330 c 1609e5 d 9e9553 d 5 b f e d 552 a 11 c 56 b 61 c b 92 b 43120 b a 7249 b a 262929e926026167652 d 656e6372797074696 f 6e2 e 6 f 72672 f 76310 a 2 d 3e20583235353139206 b 7 a 6 d 4444526e4 f 684e31436 e 626 a 796e33476 c 4 b 39714 d 56647158346 d 44594 d 536 f 7 a 3156545 a 4930490 a 4 d 34647348416230464e57776 f 6451385177686 a 763548794 a 4 a 476 b 2 f 6965436e4 c 7 a 6178697564612 b 6 f 0 a 2 d 2 d 2 d 204441354261503179532 b 414731645 a 7852672 f 69717155462 b 376 b 35703031447070344 f 72395069756 d 6 f 0 a 806 c 0 246 f 97 a 7707 a 0 c a a 0 4 d d c 3 b c f 7256 d 823 f 358396e6 e 47168 c 97 f c 5279e0179 c b 0 7 f 8731 b a e e c 44 a 5400853301 d 7 f 5414 f 888199 b 0 a f a e d 0 b f e 44 d a d a 55 c 36 e c e 75e3 e 32 a a a 59 b a 8 a 5 d 9 c 850 f 160353 a 207 d 7 b c d 0 f a 207 c 9 a 386 c 5 e c 8e1 a c 2 b 245 b 4 c 4 a 54933e5903 b 6655 f 251374 b 58 a 0 c 31 f c 833e1224235 a 198 d 960 d e 3297e8505 c d c 240 c 320e4577 c 9423 a 367384 d e a 4 a 21 f 65 f e c 14 a f 39 a 4 a b 0 c 99 d 63 a d 595016 b 0 386884 a 1 c 7 b 0 1 d f 96 f 78707 b 5 f 23940 b 0 2670 c 7 a 1 c 7 c 89803602e20174 e d 58 d 83513 a d 92e231 a f 0 7942573 a 7 d 2 f b 503 c 613 d c 7 d d 44 b e 1 e f e 119 f a 6 b 45 e e a 8 d 87163 d 0 1 c 3 a c c 555 b 7889 f 2 a 23 a 621 f a 2027 a b 0 b 55062 b 48 a c c 3 c b f e f 28717 c 0 a e 26 c b 68 c 78e7 d a 0 313e1841197 e 9 d a 130 c 9 b d b 18 c d d d 34 d b f 84611001487 a 3 d e a c 910 e c 7213 d 52 d b 50 c 7 c 558627 f 233e1 d 6 d 0 74 d 4 d d d 84287 c e 0 283221 f e b 5 c 9 f d 61 b 7898 c 0 24 f 2 b 8e11 f d b 5 f 9 d 38 c 2661 c 46e040991 e b f c 7 a 5209 c 8 b 29 f 5614 b f 14 a b 7321 b b 3805304347 c a 210 e a a 50e4312 d 2 e d c 426 b 9 d 40e77350 a 9e3 d 237 b 0 81 b 38 b e e d b 16 c 5e59 d 0 0 e e 599 b c 72 f d 1257 b c 15 e c 347e46 c 3 d 6110388 e e 8 c 8 b 9670 d 2 a 3 d e 9 a 93366 b e 1 a d d b b 833 f 8063 b 9 b 7 c b 53485 c 3 f 52 b 3895 f 8 f 63 f b 74 c 0 9551 b c 827e1363 e a b 7 e d 0 b 13 f b 18 b 22 f b 661e7 e 2 a 5 b b 0 56 a 0 17 c e b c 7 b f 8 a e a c f 55 f 374e92 c 5587 d 715 a c 1 a 30446 f d d 51 f 39 d f b 87 a 0 c c 7 b 759 c d e b c 95307 d 0 3 f 9 c d a f 1 b e 2 d f c b 4 d f c 16 c 953 c 10 a e 3 c 380 f 4805 d f 6 c c 1 f 2131 a 98780242897 a 25 c 730 b 30 a e a b 6 a f 63 d 3 c d 1 a 1 d 225 d 49 c e a 72 c 8135 c 7291 d e 5 b 88218 b 937 b 1 e f f 60 d 26 f 6 b 37 f a c 8 e f 3 b 9197 d 6e5 f 9 a 4 d 382 f c 0 5056 b 4328016720 b a 4 d c f 42 a 871 d 76 b 14 f 260511 a 2 c 61 b 271 b 45 a c e 5 c 4 f e 4 b 0 2 c 41 e e 59 d 64 b 672687 b 6 d 69 c 95 d f 0 8 c 3 e f 50 d c 796 b 2 a d 5 b 1 e a c 582 b a 8 a 0 b a 7 d 63341e57 d 78 a f c 56 b d 5 c 662 b 2 c 43 a 9591 b 868 b e 3 d c 706 f 347974 c 8 a 895561e673408667786 d c 22566297 a 69252 c 4 d d 7 b 9 b a f 1 d c 3 c 769 d 0 a 52 f f a 4804 c c 932995 f 6 a a e d c b d f 84027 c 9e7 b 5560 a 790 d b f 6 f e c c 1 a 722526e8 e 7463 b 7 c 0 c 16995 f 679 b 8573 b d 0 8 a 37430 c a 1 b 7 a 3 d 11e67 d b 9 c 99 f 1 f 1475829 c 95 c 5 d 7 d 5598147 f f 30 a 0 7 f 26505 f 18 d 922e85 d 61 c 322 f 0 e b f d 4 d 2 e f b a f 4 a f 3e918 e b c 52897140317 c d 33064 b b 7 e c b 87 a 315700100290 c d f e 5658 c 6 a 6 c 728 f 8 b 72 a f 3 b 40 a a 67 b c c 8 d 8 c 1 b f b 2 f 274656737 d 2857 d f c 3800e9027 f b f c 51 b 8 a 4 d 4 c a c 3471832 a 82 b b 6 d 3 a 55 a 1 f c d 3 f 77 b c e 15 b 0 d 748349 c d 374 d 5405 a 1 b 597 c d a d 9 a e 3186 d f 487 b 997 f a 5102 d d d a 138035 c d 4 e c 0e6 c 14e1 f f 5976 d b c 0 4 b 57 d 4 b d b 846102547 f f 2826848997 c b c e 111980 f 6e58 e 8 a 291743 c f 1 b b c 27612 b f 436120754292556 d e b 4 a 94 b e 66 c 0 28e21047 e 6 d d 62873 c 4 f 0 150 d 0 d e 15 b f 0 92 d 0 d 15 c 14 b 8117e519 a 56 a 743 f b b d c 5 c 63 d 47266786 a b 127 c 819659 f 3 a 775227 a 1 c 9 d e a 52 f 28411 a 6 b b 7 a e 1 c 17 d 13 a 2592725 f 6431743558 c 1 e d b e d 0 5 b e 4 a 5279 c e a a 6531235 d 2 d 1 a 33892 c 584 d f c 7866 c 0 e e a 1 d e 97 a 73e482 c f f c 8 a f a 94809 a 627 c c 5 a 3588 c 5 d e 127 e a e f f 47 f 7756 f 0 731916 b 697 a 7548 b 93149 d 43080238 e c b 0 6 b 4 b 1 d 4 f c 0 7677060377 d 318 a 4 b f 7 b 3e99124075 e 655e3677 d 3926 b e 45 d 1 c 35 d 0 d 297 d 1 f 5819e311 e 4 d e 1 a 31 a 90 d e b 5e0 a 23066 f 53 d e 8221 d d f 1e751 b 9 d a 46440826e877567 b a 554 c 1092 b b 277 b 9526 a b f 9 a 942721 d 325825 d a 500925548 b 0 968 a 9321816e41 f 5e7 d 7e33 e 28 c 56 f d a 66 c d c d e d 50 c 2e879 b 93758761 f 27 a 7 d e 64e3 f b 0e96 b b d e 1834 a 16 f 305 f 719e7 f 8763 d 9 f 3 b 11 b
"name" : "alg 2, a large area" ,
"opened" : {
"area_len" : 65536 ,
"files" : [
{
"path" : "carta.txt" ,
"sha256" : "03099b51191207a3859384cf7ffb2c715e325cec6c019c6e735c22e1ca69e8a3" ,
"size" : 13
} ,
{
"path" : "docs/año 2026/acta.txt" ,
"sha256" : "877c16d3221cc9231c966dd50d0976c93d5de695d3e3d19ec9c23ea68f29806a" ,
"size" : 21
}
] ,
"head" : "a4006d646174656b6579732d68656164010102582055b0ba1965b989205d9a767a458f258bba6d38f8de8c94d8bb7a1fcbffb82f700582a5006963617274612e747874010d0200030d04582003099b51191207a3859384cf7ffb2c715e325cec6c019c6e735c22e1ca69e8a3a50077646f63732f61c3b16f20323032362f616374612e7478740115020d031822045820877c16d3221cc9231c966dd50d0976c93d5de695d3e3d19ec9c23ea68f29806a" ,
"length" : 65758 ,
"lines" : [
"Firmado con un certificado a nombre de «Ana Pérez». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial." ,
" «Ana Pérez» (emisor según su certificado: «Ana Pérez»), sellado por «Autoridad de sellado de prueba» el 2023-08-23T15:09:27Z, antes de la fecha de apertura." ,
" DateKeys no comprueba quién emitió los sellos."
] ,
"result" : "ok" ,
"verdicts" : [
"F6" ,
"S0"
]
} ,
"ts" : {
"area_len" : 65536 ,
"lines" : [
"Firmado con un certificado a nombre de «Ana Pérez». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial." ,
" «Ana Pérez» (emisor según su certificado: «Ana Pérez»), sellado por «Autoridad de sellado de prueba» el 2023-08-23T15:09:27Z, antes de la fecha de apertura." ,
" DateKeys no comprueba quién emitió los sellos."
] ,
"verdicts" : [
"F6" ,
"S0"
]
}
}
] ,
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly
The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION
0.16, and testdata, wordlists and annex synced from that commit. The
annex is §79 of the draft, with the CC BY-ND 4.0 license of the
specification in its title and the key of words in 79.7.
A seal without accuracy proves nothing before the opening date (§29.7,
§29.11, as 7e3b810): a valid seal is S4 only when its token carries
accuracy and t plus the accuracy is before round_time; otherwise S5,
with the first reason that holds: late, no accuracy under the BTSP
policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads
hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts
gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no
fixed text any more, and verdictLines writes it and the line of a signer
of F6 with the reason, the texts of Go byte for byte (sealReasonText).
encryptFiles returns the verdicts of the area it wrote in
Encrypted.security, as Result.Security of Go, so that a writer warns of
a seal without accuracy (§62.1 rule 19).
drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as
ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is
an object, with no name repeated in any object, names compared exactly
once their escapes are decoded, a lone escaped surrogate malformed, the
round a number without sign, fraction or exponent from 1 to 2^53 - 1,
and signature and randomness strings, with the error texts of Go.
ParsedRelease is now a Release: no round above 2^53 - 1 is read. The
page reads the answers of the relays with it (drand.ts), as the client
of Go does, and the pasted release with strictJSON and jsonRound
(release-input.ts), so that it never reads another round than step 10.
Tests: security_cms.json with seal_reason (143 cases), the 38 JSON
inputs of release.json, the new cases of signature2_test.go and
drandjson_test.go (with the escapes written as escapes), and the new
fixtures: format3_time_and_key_words opens with the identity that the
words of its words_text give with normalizeWords and wordKey, in the
library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends
in a full STREAM chunk, opens. check-build.mjs counts words_text among
the secrets of the fixtures.
Reference files made again with Go at 4f78854: mutation-texts.json (its
spec field only), ibe-vectors.json (the two new fixtures, the rest
unchanged) and signing-vectors.json, in an export of 4f78854 with the
same frozen samples read again: the capsules are the same, and the
tokens of the sealer, without accuracy, now give S5.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"source" : "4f7885495bd6ea666cb444519090fb5f3ea46752"
The writer signs and seals: the hooks of capsule.EncryptFiles of Go
encryptFiles gains authorKey (alg 1, an AuthorSigner such as AuthorKey),
cmsSigner (alg 2, a CMS signature with certificates), sealer (seal_type 2,
an RFC 3161 token) and largeArea, as EncryptOptions of Go at spec-v0.12:
the same checks in the same order with the same texts, the signature and
the seal made with the final control and head and before anything is
written, and the security area evaluated by the reader of this library in
the context of the capsule before it is written, as Go's security does.
The hooks may be asynchronous. The area grows to 64 KiB only when what was
signed does not fit and largeArea allows it, and the larger capsule counts
in the limit of memory. security.ts encodes the area with its signature and
seal, and securitycms.ts encodes SIGNERS.
scripts/signing-go-vectors_test.go, run as a test in an export of
datekeys-go at spec-v0.12, writes testing/signing-vectors.json: with the
draws of crypto/rand of Go and the signatures and tokens of its hooks,
encryptFiles writes the eight signed and sealed capsules of Go byte for
byte, asks the hooks over the same messages, and fails with the text of Go
in the other 15 recipes; and Go opens the five capsules that
scripts/signing-ts-samples.mjs writes with this library, its own random
values and certificates, with the same verdicts and lines.
check-build.mjs fails when a page loads the author keys with the page, or
when /inspect can load them at all.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
}
