You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
DateKeys-App/testdata/fixtures/format3_seal_unsupported.json

154 lines
4.5 KiB

Format 3, step 3: read capsule format 3 of spec v0.10 Syncs testdata with datekeys-go at the tag spec-v0.10 (cc35d2c) and moves the reader to the DateKeys Protocol Specification v0.10. The three capsule formats are read. - framing: FORMAT_3, and isPadded for formats 2 and 3. control: schema version 3, with the keys 6 and 7 of version 2. SPEC_VERSION is 0.10. - open: OpenOptions.sink receives the files of a format 3 capsule (sink.ts: Sink with begin, create, commit and abort, as capsule.Sink, and MemorySink). Without one, open rejects with a TypeError right after step 2, before any request, as ErrSinkRequired. Opened gains head, verdicts, areaLen and unusableHeadExtensions. - open3.ts: step 17 of format 3 in its substeps 17.2 to 17.8, as openBody of the reference: a failure of age or a plaintext whose length is not P prevails, the first failing substep decides, and the codes other than ERR_INTEGRITY are reported only after reading PAYLOAD_AGE to its end. Reads grow with the bytes received, never with the lengths BODY declares. A failure of the sink is ERR_INTEGRITY with its text, and the sink is aborted once after begin. - The page: opener.ts opens the fixtures of format 3 into a MemorySink; the open panel says that it does not deliver their files yet, and the glosses of the steps name format 3. check-build.mjs refuses to ship the heads, salts, comments and paths of the format 3 fixtures. Tests: the 21 fixtures, format 3 laid out byte by byte from its record and opened into a sink with its files and verdicts; the 209 cases of the corpus from memory and from a Blob, with the code, the step and, new, the exact text of capsule.Open, frozen by scripts/mutation-go-texts.go in testing/mutation-texts.json, which replays the corpus as internal/testkit does (its extension validator texts included); the 5110 differential cases over 14 bases; paths, path_fold, head_schema and security vectors; the control of schema version 3 in cbor.json; and step 17 on crafted plaintexts sealed again to I_PAYLOAD, whose texts capsule.Open gives on the same plaintexts. ibe-vectors.json gains the nine format 3 fixtures from scripts/ibe-go-vectors.go; the twelve before are unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 week ago
{
Follow the draft v0.12: testdata at 601e6d2, the reader of certificates, the texts of the verdicts testdata is synced with the head of the branch v0.12 of datekeys-go (601e6d2); SPEC_VERSION stays 0.11 until the author approves the draft. - CMS as Go reads it at the draft v0.12 (review of 2 October, T2, T6 to T8 and the TypeScript side of E7 to E9): - the certificate field by field with the profile of section 29.10, its errors in CertificateError with the texts of Go; one that breaks it decides nothing unless a SignerInfo names it, and two copies are one; - the text of a name only from UTF8String, PrintableString, IA5String, TeletexString in ASCII and BMPString without surrogates, never from an attribute that appears twice; the holder by givenName and surname before the commonName, the issuer by its commonName or its organizationName; - object identifiers by the bytes of their DER; a SET OF may repeat an element; RSA with NULL parameters and an odd modulus; a key of another scheme than its algorithm is invalid; a messageImprint of another length is S3; the crls of a token decide nothing; - DER: UTCTime and GeneralizedTime in their X.690 forms with a date that exists, the restricted string types as primitive, the accuracy as minimal INTEGERs. The test of cms.test.ts that compared a function with itself has an expected value of its own. - The verdicts in the texts of the draft: names between « and », shown with at most 64 code points and no two spaces in a row, or their SHA-256; in F6 the authority of each seal and the warning that nobody checks who issued it; foreign signers in Spanish; times with their fraction. - security.json in its context with lines, and the 135 cases of security_cms.json, compared field by field, lines included. - The 218 cases of mutations.json, with the texts of capsule.Open regenerated by scripts/mutation-go-texts.go, and ibe-vectors.json with the fixtures format3_note, format3_unsigned and the new format3_seal_unsupported; its frozen values do not change. - note.json, run with checkNoteData, publicNote and unusableNote. - inspect reads the public note on demand, only for a header with one, so that the Unicode tables never load with /inspect; the view of inspect -json gives public_note and public_note_unusable, as Go. A Go/TypeScript differential of 63,623 security areas, made from the vectors, edited element by element and signed afresh with varied certificates, tokens and authorities, gave no difference in verdicts, results or lines; the code before this change differed in 13,296 of the first 42,986. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"description": "format 3 time_only capsule with an author-signature of alg 4294967295, as in format3_signature_unsupported, and a seal of seal_type 4294967295, reserved for tests, with a random token of 32 bytes: verdicts F1 and S1",
Specification 0.16 draft: a seal without accuracy, drand's JSON read strictly The draft v0.16 of datekeys-go at 4f78854 (branch v0.16): SPEC_VERSION 0.16, and testdata, wordlists and annex synced from that commit. The annex is §79 of the draft, with the CC BY-ND 4.0 license of the specification in its title and the key of words in 79.7. A seal without accuracy proves nothing before the opening date (§29.7, §29.11, as 7e3b810): a valid seal is S4 only when its token carries accuracy and t plus the accuracy is before round_time; otherwise S5, with the first reason that holds: late, no accuracy under the BTSP policy of ETSI EN 319 421 (0.4.0.2023.1.1), or no accuracy. cms.ts reads hasAccuracy and the policy of the token (tokenIsBTSP); securitycms.ts gives SealReason, Detail.sealReason and SignerLine.reason; S5 has no fixed text any more, and verdictLines writes it and the line of a signer of F6 with the reason, the texts of Go byte for byte (sealReasonText). encryptFiles returns the verdicts of the area it wrote in Encrypted.security, as Result.Security of Go, so that a writer warns of a seal without accuracy (§62.1 rule 19). drand's JSON is read strictly (§47.1, as b570338): parseDrandJSON, as ParseDrandJSON of Go, reads RFC 8259 JSON in valid UTF-8 whose value is an object, with no name repeated in any object, names compared exactly once their escapes are decoded, a lone escaped surrogate malformed, the round a number without sign, fraction or exponent from 1 to 2^53 - 1, and signature and randomness strings, with the error texts of Go. ParsedRelease is now a Release: no round above 2^53 - 1 is read. The page reads the answers of the relays with it (drand.ts), as the client of Go does, and the pasted release with strictJSON and jsonRound (release-input.ts), so that it never reads another round than step 10. Tests: security_cms.json with seal_reason (143 cases), the 38 JSON inputs of release.json, the new cases of signature2_test.go and drandjson_test.go (with the escapes written as escapes), and the new fixtures: format3_time_and_key_words opens with the identity that the words of its words_text give with normalizeWords and wordKey, in the library and in the page, and format3_full_chunk, whose PAYLOAD_AGE ends in a full STREAM chunk, opens. check-build.mjs counts words_text among the secrets of the fixtures. Reference files made again with Go at 4f78854: mutation-texts.json (its spec field only), ibe-vectors.json (the two new fixtures, the rest unchanged) and signing-vectors.json, in an export of 4f78854 with the same frozen samples read again: the capsules are the same, and the tokens of the sealer, without accuracy, now give S5. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
6 hours ago
"spec": "0.16",
Format 3, step 3: read capsule format 3 of spec v0.10 Syncs testdata with datekeys-go at the tag spec-v0.10 (cc35d2c) and moves the reader to the DateKeys Protocol Specification v0.10. The three capsule formats are read. - framing: FORMAT_3, and isPadded for formats 2 and 3. control: schema version 3, with the keys 6 and 7 of version 2. SPEC_VERSION is 0.10. - open: OpenOptions.sink receives the files of a format 3 capsule (sink.ts: Sink with begin, create, commit and abort, as capsule.Sink, and MemorySink). Without one, open rejects with a TypeError right after step 2, before any request, as ErrSinkRequired. Opened gains head, verdicts, areaLen and unusableHeadExtensions. - open3.ts: step 17 of format 3 in its substeps 17.2 to 17.8, as openBody of the reference: a failure of age or a plaintext whose length is not P prevails, the first failing substep decides, and the codes other than ERR_INTEGRITY are reported only after reading PAYLOAD_AGE to its end. Reads grow with the bytes received, never with the lengths BODY declares. A failure of the sink is ERR_INTEGRITY with its text, and the sink is aborted once after begin. - The page: opener.ts opens the fixtures of format 3 into a MemorySink; the open panel says that it does not deliver their files yet, and the glosses of the steps name format 3. check-build.mjs refuses to ship the heads, salts, comments and paths of the format 3 fixtures. Tests: the 21 fixtures, format 3 laid out byte by byte from its record and opened into a sink with its files and verdicts; the 209 cases of the corpus from memory and from a Blob, with the code, the step and, new, the exact text of capsule.Open, frozen by scripts/mutation-go-texts.go in testing/mutation-texts.json, which replays the corpus as internal/testkit does (its extension validator texts included); the 5110 differential cases over 14 bases; paths, path_fold, head_schema and security vectors; the control of schema version 3 in cbor.json; and step 17 on crafted plaintexts sealed again to I_PAYLOAD, whose texts capsule.Open gives on the same plaintexts. ibe-vectors.json gains the nine format 3 fixtures from scripts/ibe-go-vectors.go; the twelve before are unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 week ago
"format": 3,
"file": "format3_seal_unsupported.dkc",
Follow the draft v0.12: testdata at 601e6d2, the reader of certificates, the texts of the verdicts testdata is synced with the head of the branch v0.12 of datekeys-go (601e6d2); SPEC_VERSION stays 0.11 until the author approves the draft. - CMS as Go reads it at the draft v0.12 (review of 2 October, T2, T6 to T8 and the TypeScript side of E7 to E9): - the certificate field by field with the profile of section 29.10, its errors in CertificateError with the texts of Go; one that breaks it decides nothing unless a SignerInfo names it, and two copies are one; - the text of a name only from UTF8String, PrintableString, IA5String, TeletexString in ASCII and BMPString without surrogates, never from an attribute that appears twice; the holder by givenName and surname before the commonName, the issuer by its commonName or its organizationName; - object identifiers by the bytes of their DER; a SET OF may repeat an element; RSA with NULL parameters and an odd modulus; a key of another scheme than its algorithm is invalid; a messageImprint of another length is S3; the crls of a token decide nothing; - DER: UTCTime and GeneralizedTime in their X.690 forms with a date that exists, the restricted string types as primitive, the accuracy as minimal INTEGERs. The test of cms.test.ts that compared a function with itself has an expected value of its own. - The verdicts in the texts of the draft: names between « and », shown with at most 64 code points and no two spaces in a row, or their SHA-256; in F6 the authority of each seal and the warning that nobody checks who issued it; foreign signers in Spanish; times with their fraction. - security.json in its context with lines, and the 135 cases of security_cms.json, compared field by field, lines included. - The 218 cases of mutations.json, with the texts of capsule.Open regenerated by scripts/mutation-go-texts.go, and ibe-vectors.json with the fixtures format3_note, format3_unsigned and the new format3_seal_unsupported; its frozen values do not change. - note.json, run with checkNoteData, publicNote and unusableNote. - inspect reads the public note on demand, only for a header with one, so that the Unicode tables never load with /inspect; the view of inspect -json gives public_note and public_note_unusable, as Go. A Go/TypeScript differential of 63,623 security areas, made from the vectors, edited element by element and signed afresh with varied certificates, tokens and authorities, gave no difference in verdicts, results or lines; the code before this change differed in 13,296 of the first 42,986. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"sha256": "ae3219fbdbd1de4cef6fade1a3fb3f6e5d5e2e8af54d9516b05f0a48136913ad",
Format 3, step 3: read capsule format 3 of spec v0.10 Syncs testdata with datekeys-go at the tag spec-v0.10 (cc35d2c) and moves the reader to the DateKeys Protocol Specification v0.10. The three capsule formats are read. - framing: FORMAT_3, and isPadded for formats 2 and 3. control: schema version 3, with the keys 6 and 7 of version 2. SPEC_VERSION is 0.10. - open: OpenOptions.sink receives the files of a format 3 capsule (sink.ts: Sink with begin, create, commit and abort, as capsule.Sink, and MemorySink). Without one, open rejects with a TypeError right after step 2, before any request, as ErrSinkRequired. Opened gains head, verdicts, areaLen and unusableHeadExtensions. - open3.ts: step 17 of format 3 in its substeps 17.2 to 17.8, as openBody of the reference: a failure of age or a plaintext whose length is not P prevails, the first failing substep decides, and the codes other than ERR_INTEGRITY are reported only after reading PAYLOAD_AGE to its end. Reads grow with the bytes received, never with the lengths BODY declares. A failure of the sink is ERR_INTEGRITY with its text, and the sink is aborted once after begin. - The page: opener.ts opens the fixtures of format 3 into a MemorySink; the open panel says that it does not deliver their files yet, and the glosses of the steps name format 3. check-build.mjs refuses to ship the heads, salts, comments and paths of the format 3 fixtures. Tests: the 21 fixtures, format 3 laid out byte by byte from its record and opened into a sink with its files and verdicts; the 209 cases of the corpus from memory and from a Blob, with the code, the step and, new, the exact text of capsule.Open, frozen by scripts/mutation-go-texts.go in testing/mutation-texts.json, which replays the corpus as internal/testkit does (its extension validator texts included); the 5110 differential cases over 14 bases; paths, path_fold, head_schema and security vectors; the control of schema version 3 in cbor.json; and step 17 on crafted plaintexts sealed again to I_PAYLOAD, whose texts capsule.Open gives on the same plaintexts. ibe-vectors.json gains the nine format 3 fixtures from scripts/ibe-go-vectors.go; the twelve before are unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 week ago
"release": {
"round": 2000,
"signature": "b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"
},
"prelude": "444b43310300000000000079000001ca",
Follow the draft v0.12: testdata at 601e6d2, the reader of certificates, the texts of the verdicts testdata is synced with the head of the branch v0.12 of datekeys-go (601e6d2); SPEC_VERSION stays 0.11 until the author approves the draft. - CMS as Go reads it at the draft v0.12 (review of 2 October, T2, T6 to T8 and the TypeScript side of E7 to E9): - the certificate field by field with the profile of section 29.10, its errors in CertificateError with the texts of Go; one that breaks it decides nothing unless a SignerInfo names it, and two copies are one; - the text of a name only from UTF8String, PrintableString, IA5String, TeletexString in ASCII and BMPString without surrogates, never from an attribute that appears twice; the holder by givenName and surname before the commonName, the issuer by its commonName or its organizationName; - object identifiers by the bytes of their DER; a SET OF may repeat an element; RSA with NULL parameters and an odd modulus; a key of another scheme than its algorithm is invalid; a messageImprint of another length is S3; the crls of a token decide nothing; - DER: UTCTime and GeneralizedTime in their X.690 forms with a date that exists, the restricted string types as primitive, the accuracy as minimal INTEGERs. The test of cms.test.ts that compared a function with itself has an expected value of its own. - The verdicts in the texts of the draft: names between « and », shown with at most 64 code points and no two spaces in a row, or their SHA-256; in F6 the authority of each seal and the warning that nobody checks who issued it; foreign signers in Spanish; times with their fraction. - security.json in its context with lines, and the 135 cases of security_cms.json, compared field by field, lines included. - The 218 cases of mutations.json, with the texts of capsule.Open regenerated by scripts/mutation-go-texts.go, and ibe-vectors.json with the fixtures format3_note, format3_unsigned and the new format3_seal_unsupported; its frozen values do not change. - note.json, run with checkNoteData, publicNote and unusableNote. - inspect reads the public note on demand, only for a header with one, so that the Unicode tables never load with /inspect; the view of inspect -json gives public_note and public_note_unusable, as Go. A Go/TypeScript differential of 63,623 security areas, made from the vectors, edited element by element and signed afresh with varied certificates, tokens and authorities, gave no difference in verdicts, results or lines; the code before this change differed in 13,296 of the first 42,986. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"public_header": "a5006a646174656b6579636170010102508e2f648c77bd659a89ca95f96f213780037853646b315f65794a325a584a7a61573975496a6f784c434a755a58523362334a72496a6f695a4746305a57746c65584d3663585670593274755a585136646a45694c434a79623356755a4349364d6a41774d48300400",
Format 3, step 3: read capsule format 3 of spec v0.10 Syncs testdata with datekeys-go at the tag spec-v0.10 (cc35d2c) and moves the reader to the DateKeys Protocol Specification v0.10. The three capsule formats are read. - framing: FORMAT_3, and isPadded for formats 2 and 3. control: schema version 3, with the keys 6 and 7 of version 2. SPEC_VERSION is 0.10. - open: OpenOptions.sink receives the files of a format 3 capsule (sink.ts: Sink with begin, create, commit and abort, as capsule.Sink, and MemorySink). Without one, open rejects with a TypeError right after step 2, before any request, as ErrSinkRequired. Opened gains head, verdicts, areaLen and unusableHeadExtensions. - open3.ts: step 17 of format 3 in its substeps 17.2 to 17.8, as openBody of the reference: a failure of age or a plaintext whose length is not P prevails, the first failing substep decides, and the codes other than ERR_INTEGRITY are reported only after reading PAYLOAD_AGE to its end. Reads grow with the bytes received, never with the lengths BODY declares. A failure of the sink is ERR_INTEGRITY with its text, and the sink is aborted once after begin. - The page: opener.ts opens the fixtures of format 3 into a MemorySink; the open panel says that it does not deliver their files yet, and the glosses of the steps name format 3. check-build.mjs refuses to ship the heads, salts, comments and paths of the format 3 fixtures. Tests: the 21 fixtures, format 3 laid out byte by byte from its record and opened into a sink with its files and verdicts; the 209 cases of the corpus from memory and from a Blob, with the code, the step and, new, the exact text of capsule.Open, frozen by scripts/mutation-go-texts.go in testing/mutation-texts.json, which replays the corpus as internal/testkit does (its extension validator texts included); the 5110 differential cases over 14 bases; paths, path_fold, head_schema and security vectors; the control of schema version 3 in cbor.json; and step 17 on crafted plaintexts sealed again to I_PAYLOAD, whose texts capsule.Open gives on the same plaintexts. ibe-vectors.json gains the nine format 3 fixtures from scripts/ibe-go-vectors.go; the twelve before are unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 week ago
"datekey": "dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0",
Follow the draft v0.12: testdata at 601e6d2, the reader of certificates, the texts of the verdicts testdata is synced with the head of the branch v0.12 of datekeys-go (601e6d2); SPEC_VERSION stays 0.11 until the author approves the draft. - CMS as Go reads it at the draft v0.12 (review of 2 October, T2, T6 to T8 and the TypeScript side of E7 to E9): - the certificate field by field with the profile of section 29.10, its errors in CertificateError with the texts of Go; one that breaks it decides nothing unless a SignerInfo names it, and two copies are one; - the text of a name only from UTF8String, PrintableString, IA5String, TeletexString in ASCII and BMPString without surrogates, never from an attribute that appears twice; the holder by givenName and surname before the commonName, the issuer by its commonName or its organizationName; - object identifiers by the bytes of their DER; a SET OF may repeat an element; RSA with NULL parameters and an odd modulus; a key of another scheme than its algorithm is invalid; a messageImprint of another length is S3; the crls of a token decide nothing; - DER: UTCTime and GeneralizedTime in their X.690 forms with a date that exists, the restricted string types as primitive, the accuracy as minimal INTEGERs. The test of cms.test.ts that compared a function with itself has an expected value of its own. - The verdicts in the texts of the draft: names between « and », shown with at most 64 code points and no two spaces in a row, or their SHA-256; in F6 the authority of each seal and the warning that nobody checks who issued it; foreign signers in Spanish; times with their fraction. - security.json in its context with lines, and the 135 cases of security_cms.json, compared field by field, lines included. - The 218 cases of mutations.json, with the texts of capsule.Open regenerated by scripts/mutation-go-texts.go, and ibe-vectors.json with the fixtures format3_note, format3_unsigned and the new format3_seal_unsupported; its frozen values do not change. - note.json, run with checkNoteData, publicNote and unusableNote. - inspect reads the public note on demand, only for a header with one, so that the Unicode tables never load with /inspect; the view of inspect -json gives public_note and public_note_unusable, as Go. A Go/TypeScript differential of 63,623 security areas, made from the vectors, edited element by element and signed afresh with varied certificates, tokens and authorities, gave no difference in verdicts, results or lines; the code before this change differed in 13,296 of the first 42,986. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"capsule_id": "8e2f648c77bd659a89ca95f96f213780",
Format 3, step 3: read capsule format 3 of spec v0.10 Syncs testdata with datekeys-go at the tag spec-v0.10 (cc35d2c) and moves the reader to the DateKeys Protocol Specification v0.10. The three capsule formats are read. - framing: FORMAT_3, and isPadded for formats 2 and 3. control: schema version 3, with the keys 6 and 7 of version 2. SPEC_VERSION is 0.10. - open: OpenOptions.sink receives the files of a format 3 capsule (sink.ts: Sink with begin, create, commit and abort, as capsule.Sink, and MemorySink). Without one, open rejects with a TypeError right after step 2, before any request, as ErrSinkRequired. Opened gains head, verdicts, areaLen and unusableHeadExtensions. - open3.ts: step 17 of format 3 in its substeps 17.2 to 17.8, as openBody of the reference: a failure of age or a plaintext whose length is not P prevails, the first failing substep decides, and the codes other than ERR_INTEGRITY are reported only after reading PAYLOAD_AGE to its end. Reads grow with the bytes received, never with the lengths BODY declares. A failure of the sink is ERR_INTEGRITY with its text, and the sink is aborted once after begin. - The page: opener.ts opens the fixtures of format 3 into a MemorySink; the open panel says that it does not deliver their files yet, and the glosses of the steps name format 3. check-build.mjs refuses to ship the heads, salts, comments and paths of the format 3 fixtures. Tests: the 21 fixtures, format 3 laid out byte by byte from its record and opened into a sink with its files and verdicts; the 209 cases of the corpus from memory and from a Blob, with the code, the step and, new, the exact text of capsule.Open, frozen by scripts/mutation-go-texts.go in testing/mutation-texts.json, which replays the corpus as internal/testkit does (its extension validator texts included); the 5110 differential cases over 14 bases; paths, path_fold, head_schema and security vectors; the control of schema version 3 in cbor.json; and step 17 on crafted plaintexts sealed again to I_PAYLOAD, whose texts capsule.Open gives on the same plaintexts. ibe-vectors.json gains the nine format 3 fixtures from scripts/ibe-go-vectors.go; the twelve before are unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 week ago
"access_policy": "time_only",
"structure": "time_only",
"unlock_at": "2023-08-23T16:49:24Z",
Follow the draft v0.12: testdata at 601e6d2, the reader of certificates, the texts of the verdicts testdata is synced with the head of the branch v0.12 of datekeys-go (601e6d2); SPEC_VERSION stays 0.11 until the author approves the draft. - CMS as Go reads it at the draft v0.12 (review of 2 October, T2, T6 to T8 and the TypeScript side of E7 to E9): - the certificate field by field with the profile of section 29.10, its errors in CertificateError with the texts of Go; one that breaks it decides nothing unless a SignerInfo names it, and two copies are one; - the text of a name only from UTF8String, PrintableString, IA5String, TeletexString in ASCII and BMPString without surrogates, never from an attribute that appears twice; the holder by givenName and surname before the commonName, the issuer by its commonName or its organizationName; - object identifiers by the bytes of their DER; a SET OF may repeat an element; RSA with NULL parameters and an odd modulus; a key of another scheme than its algorithm is invalid; a messageImprint of another length is S3; the crls of a token decide nothing; - DER: UTCTime and GeneralizedTime in their X.690 forms with a date that exists, the restricted string types as primitive, the accuracy as minimal INTEGERs. The test of cms.test.ts that compared a function with itself has an expected value of its own. - The verdicts in the texts of the draft: names between « and », shown with at most 64 code points and no two spaces in a row, or their SHA-256; in F6 the authority of each seal and the warning that nobody checks who issued it; foreign signers in Spanish; times with their fraction. - security.json in its context with lines, and the 135 cases of security_cms.json, compared field by field, lines included. - The 218 cases of mutations.json, with the texts of capsule.Open regenerated by scripts/mutation-go-texts.go, and ibe-vectors.json with the fixtures format3_note, format3_unsigned and the new format3_seal_unsupported; its frozen values do not change. - note.json, run with checkNoteData, publicNote and unusableNote. - inspect reads the public note on demand, only for a header with one, so that the Unicode tables never load with /inspect; the view of inspect -json gives public_note and public_note_unusable, as Go. A Go/TypeScript differential of 63,623 security areas, made from the vectors, edited element by element and signed afresh with varied certificates, tokens and authorities, gave no difference in verdicts, results or lines; the code before this change differed in 13,296 of the first 42,986. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"header_binding": "c6518ed7bd02c8f121493170776eb6c43e2c8162e97a9a6225b310a1836da612",
Format 3, step 3: read capsule format 3 of spec v0.10 Syncs testdata with datekeys-go at the tag spec-v0.10 (cc35d2c) and moves the reader to the DateKeys Protocol Specification v0.10. The three capsule formats are read. - framing: FORMAT_3, and isPadded for formats 2 and 3. control: schema version 3, with the keys 6 and 7 of version 2. SPEC_VERSION is 0.10. - open: OpenOptions.sink receives the files of a format 3 capsule (sink.ts: Sink with begin, create, commit and abort, as capsule.Sink, and MemorySink). Without one, open rejects with a TypeError right after step 2, before any request, as ErrSinkRequired. Opened gains head, verdicts, areaLen and unusableHeadExtensions. - open3.ts: step 17 of format 3 in its substeps 17.2 to 17.8, as openBody of the reference: a failure of age or a plaintext whose length is not P prevails, the first failing substep decides, and the codes other than ERR_INTEGRITY are reported only after reading PAYLOAD_AGE to its end. Reads grow with the bytes received, never with the lengths BODY declares. A failure of the sink is ERR_INTEGRITY with its text, and the sink is aborted once after begin. - The page: opener.ts opens the fixtures of format 3 into a MemorySink; the open panel says that it does not deliver their files yet, and the glosses of the steps name format 3. check-build.mjs refuses to ship the heads, salts, comments and paths of the format 3 fixtures. Tests: the 21 fixtures, format 3 laid out byte by byte from its record and opened into a sink with its files and verdicts; the 209 cases of the corpus from memory and from a Blob, with the code, the step and, new, the exact text of capsule.Open, frozen by scripts/mutation-go-texts.go in testing/mutation-texts.json, which replays the corpus as internal/testkit does (its extension validator texts included); the 5110 differential cases over 14 bases; paths, path_fold, head_schema and security vectors; the control of schema version 3 in cbor.json; and step 17 on crafted plaintexts sealed again to I_PAYLOAD, whose texts capsule.Open gives on the same plaintexts. ibe-vectors.json gains the nine format 3 fixtures from scripts/ibe-go-vectors.go; the twelve before are unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 week ago
"outer_stanzas": [
{
"type": "tlock",
"args": [
"2000",
"52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971"
]
}
],
"payload_stanzas": [
{
"type": "X25519",
"args": [
Follow the draft v0.12: testdata at 601e6d2, the reader of certificates, the texts of the verdicts testdata is synced with the head of the branch v0.12 of datekeys-go (601e6d2); SPEC_VERSION stays 0.11 until the author approves the draft. - CMS as Go reads it at the draft v0.12 (review of 2 October, T2, T6 to T8 and the TypeScript side of E7 to E9): - the certificate field by field with the profile of section 29.10, its errors in CertificateError with the texts of Go; one that breaks it decides nothing unless a SignerInfo names it, and two copies are one; - the text of a name only from UTF8String, PrintableString, IA5String, TeletexString in ASCII and BMPString without surrogates, never from an attribute that appears twice; the holder by givenName and surname before the commonName, the issuer by its commonName or its organizationName; - object identifiers by the bytes of their DER; a SET OF may repeat an element; RSA with NULL parameters and an odd modulus; a key of another scheme than its algorithm is invalid; a messageImprint of another length is S3; the crls of a token decide nothing; - DER: UTCTime and GeneralizedTime in their X.690 forms with a date that exists, the restricted string types as primitive, the accuracy as minimal INTEGERs. The test of cms.test.ts that compared a function with itself has an expected value of its own. - The verdicts in the texts of the draft: names between « and », shown with at most 64 code points and no two spaces in a row, or their SHA-256; in F6 the authority of each seal and the warning that nobody checks who issued it; foreign signers in Spanish; times with their fraction. - security.json in its context with lines, and the 135 cases of security_cms.json, compared field by field, lines included. - The 218 cases of mutations.json, with the texts of capsule.Open regenerated by scripts/mutation-go-texts.go, and ibe-vectors.json with the fixtures format3_note, format3_unsigned and the new format3_seal_unsupported; its frozen values do not change. - note.json, run with checkNoteData, publicNote and unusableNote. - inspect reads the public note on demand, only for a header with one, so that the Unicode tables never load with /inspect; the view of inspect -json gives public_note and public_note_unusable, as Go. A Go/TypeScript differential of 63,623 security areas, made from the vectors, edited element by element and signed afresh with varied certificates, tokens and authorities, gave no difference in verdicts, results or lines; the code before this change differed in 13,296 of the first 42,986. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"nhJ/XFoarftmX9LumtcoVsCBMxXMYQgJwuYYEG8lg3M"
Format 3, step 3: read capsule format 3 of spec v0.10 Syncs testdata with datekeys-go at the tag spec-v0.10 (cc35d2c) and moves the reader to the DateKeys Protocol Specification v0.10. The three capsule formats are read. - framing: FORMAT_3, and isPadded for formats 2 and 3. control: schema version 3, with the keys 6 and 7 of version 2. SPEC_VERSION is 0.10. - open: OpenOptions.sink receives the files of a format 3 capsule (sink.ts: Sink with begin, create, commit and abort, as capsule.Sink, and MemorySink). Without one, open rejects with a TypeError right after step 2, before any request, as ErrSinkRequired. Opened gains head, verdicts, areaLen and unusableHeadExtensions. - open3.ts: step 17 of format 3 in its substeps 17.2 to 17.8, as openBody of the reference: a failure of age or a plaintext whose length is not P prevails, the first failing substep decides, and the codes other than ERR_INTEGRITY are reported only after reading PAYLOAD_AGE to its end. Reads grow with the bytes received, never with the lengths BODY declares. A failure of the sink is ERR_INTEGRITY with its text, and the sink is aborted once after begin. - The page: opener.ts opens the fixtures of format 3 into a MemorySink; the open panel says that it does not deliver their files yet, and the glosses of the steps name format 3. check-build.mjs refuses to ship the heads, salts, comments and paths of the format 3 fixtures. Tests: the 21 fixtures, format 3 laid out byte by byte from its record and opened into a sink with its files and verdicts; the 209 cases of the corpus from memory and from a Blob, with the code, the step and, new, the exact text of capsule.Open, frozen by scripts/mutation-go-texts.go in testing/mutation-texts.json, which replays the corpus as internal/testkit does (its extension validator texts included); the 5110 differential cases over 14 bases; paths, path_fold, head_schema and security vectors; the control of schema version 3 in cbor.json; and step 17 on crafted plaintexts sealed again to I_PAYLOAD, whose texts capsule.Open gives on the same plaintexts. ibe-vectors.json gains the nine format 3 fixtures from scripts/ibe-go-vectors.go; the twelve before are unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 week ago
]
}
],
Follow the draft v0.12: testdata at 601e6d2, the reader of certificates, the texts of the verdicts testdata is synced with the head of the branch v0.12 of datekeys-go (601e6d2); SPEC_VERSION stays 0.11 until the author approves the draft. - CMS as Go reads it at the draft v0.12 (review of 2 October, T2, T6 to T8 and the TypeScript side of E7 to E9): - the certificate field by field with the profile of section 29.10, its errors in CertificateError with the texts of Go; one that breaks it decides nothing unless a SignerInfo names it, and two copies are one; - the text of a name only from UTF8String, PrintableString, IA5String, TeletexString in ASCII and BMPString without surrogates, never from an attribute that appears twice; the holder by givenName and surname before the commonName, the issuer by its commonName or its organizationName; - object identifiers by the bytes of their DER; a SET OF may repeat an element; RSA with NULL parameters and an odd modulus; a key of another scheme than its algorithm is invalid; a messageImprint of another length is S3; the crls of a token decide nothing; - DER: UTCTime and GeneralizedTime in their X.690 forms with a date that exists, the restricted string types as primitive, the accuracy as minimal INTEGERs. The test of cms.test.ts that compared a function with itself has an expected value of its own. - The verdicts in the texts of the draft: names between « and », shown with at most 64 code points and no two spaces in a row, or their SHA-256; in F6 the authority of each seal and the warning that nobody checks who issued it; foreign signers in Spanish; times with their fraction. - security.json in its context with lines, and the 135 cases of security_cms.json, compared field by field, lines included. - The 218 cases of mutations.json, with the texts of capsule.Open regenerated by scripts/mutation-go-texts.go, and ibe-vectors.json with the fixtures format3_note, format3_unsigned and the new format3_seal_unsupported; its frozen values do not change. - note.json, run with checkNoteData, publicNote and unusableNote. - inspect reads the public note on demand, only for a header with one, so that the Unicode tables never load with /inspect; the view of inspect -json gives public_note and public_note_unusable, as Go. A Go/TypeScript differential of 63,623 security areas, made from the vectors, edited element by element and signed afresh with varied certificates, tokens and authorities, gave no difference in verdicts, results or lines; the code before this change differed in 13,296 of the first 42,986. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"control_cbor": "a60070646174656b6579732d636f6e74726f6c0103025820c6518ed7bd02c8f121493170776eb6c43e2c8162e97a9a6225b310a1836da6120358204b0e0832574c11b161d7bab4d37582fde331eabb027f7d26c23cf11113fd5cc8064800000000000002930702",
"payload_identity": "4b0e0832574c11b161d7bab4d37582fde331eabb027f7d26c23cf11113fd5cc8",
Format 3, step 3: read capsule format 3 of spec v0.10 Syncs testdata with datekeys-go at the tag spec-v0.10 (cc35d2c) and moves the reader to the DateKeys Protocol Specification v0.10. The three capsule formats are read. - framing: FORMAT_3, and isPadded for formats 2 and 3. control: schema version 3, with the keys 6 and 7 of version 2. SPEC_VERSION is 0.10. - open: OpenOptions.sink receives the files of a format 3 capsule (sink.ts: Sink with begin, create, commit and abort, as capsule.Sink, and MemorySink). Without one, open rejects with a TypeError right after step 2, before any request, as ErrSinkRequired. Opened gains head, verdicts, areaLen and unusableHeadExtensions. - open3.ts: step 17 of format 3 in its substeps 17.2 to 17.8, as openBody of the reference: a failure of age or a plaintext whose length is not P prevails, the first failing substep decides, and the codes other than ERR_INTEGRITY are reported only after reading PAYLOAD_AGE to its end. Reads grow with the bytes received, never with the lengths BODY declares. A failure of the sink is ERR_INTEGRITY with its text, and the sink is aborted once after begin. - The page: opener.ts opens the fixtures of format 3 into a MemorySink; the open panel says that it does not deliver their files yet, and the glosses of the steps name format 3. check-build.mjs refuses to ship the heads, salts, comments and paths of the format 3 fixtures. Tests: the 21 fixtures, format 3 laid out byte by byte from its record and opened into a sink with its files and verdicts; the 209 cases of the corpus from memory and from a Blob, with the code, the step and, new, the exact text of capsule.Open, frozen by scripts/mutation-go-texts.go in testing/mutation-texts.json, which replays the corpus as internal/testkit does (its extension validator texts included); the 5110 differential cases over 14 bases; paths, path_fold, head_schema and security vectors; the control of schema version 3 in cbor.json; and step 17 on crafted plaintexts sealed again to I_PAYLOAD, whose texts capsule.Open gives on the same plaintexts. ibe-vectors.json gains the nine format 3 fixtures from scripts/ibe-go-vectors.go; the twelve before are unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 week ago
"payload_length": 659,
"padding": 2,
"padded_length": 768,
"plaintext_file": "format3_seal_unsupported.plaintext",
Follow the draft v0.12: testdata at 601e6d2, the reader of certificates, the texts of the verdicts testdata is synced with the head of the branch v0.12 of datekeys-go (601e6d2); SPEC_VERSION stays 0.11 until the author approves the draft. - CMS as Go reads it at the draft v0.12 (review of 2 October, T2, T6 to T8 and the TypeScript side of E7 to E9): - the certificate field by field with the profile of section 29.10, its errors in CertificateError with the texts of Go; one that breaks it decides nothing unless a SignerInfo names it, and two copies are one; - the text of a name only from UTF8String, PrintableString, IA5String, TeletexString in ASCII and BMPString without surrogates, never from an attribute that appears twice; the holder by givenName and surname before the commonName, the issuer by its commonName or its organizationName; - object identifiers by the bytes of their DER; a SET OF may repeat an element; RSA with NULL parameters and an odd modulus; a key of another scheme than its algorithm is invalid; a messageImprint of another length is S3; the crls of a token decide nothing; - DER: UTCTime and GeneralizedTime in their X.690 forms with a date that exists, the restricted string types as primitive, the accuracy as minimal INTEGERs. The test of cms.test.ts that compared a function with itself has an expected value of its own. - The verdicts in the texts of the draft: names between « and », shown with at most 64 code points and no two spaces in a row, or their SHA-256; in F6 the authority of each seal and the warning that nobody checks who issued it; foreign signers in Spanish; times with their fraction. - security.json in its context with lines, and the 135 cases of security_cms.json, compared field by field, lines included. - The 218 cases of mutations.json, with the texts of capsule.Open regenerated by scripts/mutation-go-texts.go, and ibe-vectors.json with the fixtures format3_note, format3_unsigned and the new format3_seal_unsupported; its frozen values do not change. - note.json, run with checkNoteData, publicNote and unusableNote. - inspect reads the public note on demand, only for a header with one, so that the Unicode tables never load with /inspect; the view of inspect -json gives public_note and public_note_unusable, as Go. A Go/TypeScript differential of 63,623 security areas, made from the vectors, edited element by element and signed afresh with varied certificates, tokens and authorities, gave no difference in verdicts, results or lines; the code before this change differed in 13,296 of the first 42,986. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"plaintext_sha256": "0f865221d26545762712271faf835cb2e9980f8fb15c9d3b94fb6747cf16c1df",
Format 3, step 3: read capsule format 3 of spec v0.10 Syncs testdata with datekeys-go at the tag spec-v0.10 (cc35d2c) and moves the reader to the DateKeys Protocol Specification v0.10. The three capsule formats are read. - framing: FORMAT_3, and isPadded for formats 2 and 3. control: schema version 3, with the keys 6 and 7 of version 2. SPEC_VERSION is 0.10. - open: OpenOptions.sink receives the files of a format 3 capsule (sink.ts: Sink with begin, create, commit and abort, as capsule.Sink, and MemorySink). Without one, open rejects with a TypeError right after step 2, before any request, as ErrSinkRequired. Opened gains head, verdicts, areaLen and unusableHeadExtensions. - open3.ts: step 17 of format 3 in its substeps 17.2 to 17.8, as openBody of the reference: a failure of age or a plaintext whose length is not P prevails, the first failing substep decides, and the codes other than ERR_INTEGRITY are reported only after reading PAYLOAD_AGE to its end. Reads grow with the bytes received, never with the lengths BODY declares. A failure of the sink is ERR_INTEGRITY with its text, and the sink is aborted once after begin. - The page: opener.ts opens the fixtures of format 3 into a MemorySink; the open panel says that it does not deliver their files yet, and the glosses of the steps name format 3. check-build.mjs refuses to ship the heads, salts, comments and paths of the format 3 fixtures. Tests: the 21 fixtures, format 3 laid out byte by byte from its record and opened into a sink with its files and verdicts; the 209 cases of the corpus from memory and from a Blob, with the code, the step and, new, the exact text of capsule.Open, frozen by scripts/mutation-go-texts.go in testing/mutation-texts.json, which replays the corpus as internal/testkit does (its extension validator texts included); the 5110 differential cases over 14 bases; paths, path_fold, head_schema and security vectors; the control of schema version 3 in cbor.json; and step 17 on crafted plaintexts sealed again to I_PAYLOAD, whose texts capsule.Open gives on the same plaintexts. ibe-vectors.json gains the nine format 3 fixtures from scripts/ibe-go-vectors.go; the twelve before are unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 week ago
"area_len": 512,
Follow the draft v0.12: testdata at 601e6d2, the reader of certificates, the texts of the verdicts testdata is synced with the head of the branch v0.12 of datekeys-go (601e6d2); SPEC_VERSION stays 0.11 until the author approves the draft. - CMS as Go reads it at the draft v0.12 (review of 2 October, T2, T6 to T8 and the TypeScript side of E7 to E9): - the certificate field by field with the profile of section 29.10, its errors in CertificateError with the texts of Go; one that breaks it decides nothing unless a SignerInfo names it, and two copies are one; - the text of a name only from UTF8String, PrintableString, IA5String, TeletexString in ASCII and BMPString without surrogates, never from an attribute that appears twice; the holder by givenName and surname before the commonName, the issuer by its commonName or its organizationName; - object identifiers by the bytes of their DER; a SET OF may repeat an element; RSA with NULL parameters and an odd modulus; a key of another scheme than its algorithm is invalid; a messageImprint of another length is S3; the crls of a token decide nothing; - DER: UTCTime and GeneralizedTime in their X.690 forms with a date that exists, the restricted string types as primitive, the accuracy as minimal INTEGERs. The test of cms.test.ts that compared a function with itself has an expected value of its own. - The verdicts in the texts of the draft: names between « and », shown with at most 64 code points and no two spaces in a row, or their SHA-256; in F6 the authority of each seal and the warning that nobody checks who issued it; foreign signers in Spanish; times with their fraction. - security.json in its context with lines, and the 135 cases of security_cms.json, compared field by field, lines included. - The 218 cases of mutations.json, with the texts of capsule.Open regenerated by scripts/mutation-go-texts.go, and ibe-vectors.json with the fixtures format3_note, format3_unsigned and the new format3_seal_unsupported; its frozen values do not change. - note.json, run with checkNoteData, publicNote and unusableNote. - inspect reads the public note on demand, only for a header with one, so that the Unicode tables never load with /inspect; the view of inspect -json gives public_note and public_note_unusable, as Go. A Go/TypeScript differential of 63,623 security areas, made from the vectors, edited element by element and signed afresh with varied certificates, tokens and authorities, gave no difference in verdicts, results or lines; the code before this change differed in 13,296 of the first 42,986. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2 days ago
"security_cbor": "a40071646174656b6579732d7365637572697479010102586da3001affffffff015820d956dada75e3501522321d0e57c5a06dc64e07c394e6e5666f5de65b38871732025840b1f86cea4dfa61201710331694cd3fb811eeb32f7d983d9c5679c5adc41ba25fe5b82d48a74ec76d5db3f887745d0681f2a221c71b014324e8b6ad324a4234b303582aa2001affffffff0158206721210782b8e419b97c9e620bc6247ef6775929a04eb075aaac927687283a9c",
"head_cbor": "a4006d646174656b6579732d686561640101025820f9526586bc95f1bc1a375fc7575c71081312626445cce4aae63a095e35afc84a0581a600686e6f74612e7478740116020003160458205d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510051a6abcf9c0",
"salt": "f9526586bc95f1bc1a375fc7575c71081312626445cce4aae63a095e35afc84a",
Format 3, step 3: read capsule format 3 of spec v0.10 Syncs testdata with datekeys-go at the tag spec-v0.10 (cc35d2c) and moves the reader to the DateKeys Protocol Specification v0.10. The three capsule formats are read. - framing: FORMAT_3, and isPadded for formats 2 and 3. control: schema version 3, with the keys 6 and 7 of version 2. SPEC_VERSION is 0.10. - open: OpenOptions.sink receives the files of a format 3 capsule (sink.ts: Sink with begin, create, commit and abort, as capsule.Sink, and MemorySink). Without one, open rejects with a TypeError right after step 2, before any request, as ErrSinkRequired. Opened gains head, verdicts, areaLen and unusableHeadExtensions. - open3.ts: step 17 of format 3 in its substeps 17.2 to 17.8, as openBody of the reference: a failure of age or a plaintext whose length is not P prevails, the first failing substep decides, and the codes other than ERR_INTEGRITY are reported only after reading PAYLOAD_AGE to its end. Reads grow with the bytes received, never with the lengths BODY declares. A failure of the sink is ERR_INTEGRITY with its text, and the sink is aborted once after begin. - The page: opener.ts opens the fixtures of format 3 into a MemorySink; the open panel says that it does not deliver their files yet, and the glosses of the steps name format 3. check-build.mjs refuses to ship the heads, salts, comments and paths of the format 3 fixtures. Tests: the 21 fixtures, format 3 laid out byte by byte from its record and opened into a sink with its files and verdicts; the 209 cases of the corpus from memory and from a Blob, with the code, the step and, new, the exact text of capsule.Open, frozen by scripts/mutation-go-texts.go in testing/mutation-texts.json, which replays the corpus as internal/testkit does (its extension validator texts included); the 5110 differential cases over 14 bases; paths, path_fold, head_schema and security vectors; the control of schema version 3 in cbor.json; and step 17 on crafted plaintexts sealed again to I_PAYLOAD, whose texts capsule.Open gives on the same plaintexts. ibe-vectors.json gains the nine format 3 fixtures from scripts/ibe-go-vectors.go; the twelve before are unchanged. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
1 week ago
"content_offset": 637,
"files": [
{
"path": "nota.txt",
"size": 22,
"start": 0,
"end": 22,
"sha256": "5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510",
"mtime": 1790769600
}
],
"verdicts": {
"signature": "F1",
"seal": "S1",
"lines": [
"No se ha comprobado ninguna firma: trátala como no firmada.",
"Lleva un sello de tiempo que esta versión no sabe comprobar: aquí no prueba nada."
]
},
"stages": [
{
"step": 1,
"name": "parse DKC1",
"ok": true
},
{
"step": 2,
"name": "prelude",
"ok": true
},
{
"step": 3,
"name": "public header",
"ok": true
},
{
"step": 4,
"name": "header validation",
"ok": true
},
{
"step": 5,
"name": "sealed control structure",
"ok": true
},
{
"step": 6,
"name": "payload structure",
"ok": true
},
{
"step": 7,
"name": "condition",
"ok": true
},
{
"step": 8,
"name": "tlock stanza",
"ok": true
},
{
"step": 9,
"name": "release",
"ok": true
},
{
"step": 10,
"name": "release verification",
"ok": true
},
{
"step": 11,
"name": "open sealed control",
"ok": true
},
{
"step": 12,
"name": "policy structure",
"ok": true
},
{
"step": 14,
"name": "control",
"ok": true
},
{
"step": 15,
"name": "header binding",
"ok": true
},
{
"step": 16,
"name": "payload identity",
"ok": true
},
{
"step": 17,
"name": "open payload",
"ok": true
},
{
"step": 18,
"name": "commit",
"ok": true
}
]
}

Powered by TurnKey Linux.