go
/
dateKeys-dart
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Branches Tags
${ item.name }
Create tag ${ searchTerm }
Create branch ${ searchTerm }
from '2cdc1d9d12'
${ noResults }
dateKeys-dart/test/vectors/open_cases.json

186 lines
309 KiB
Raw Normal View History Unescape

Stage 4c: the vectors of Go for the head, the note and the opening tool/mutation_go_texts.go ports scripts/mutation-go-texts.go of datekeys-ts over the synced testdata of this repository, the tag spec-v0.11: it replays every case of the mutation corpus as the testkit of the reference does and writes the text of capsule.Open and its checks, with the detail of each step, in mutation_texts.json. Where Go and the corpus disagree on a code or a step it would say so in the case; Go at c531e93 and at the tag spec-v0.11 agree with all 210 cases, and give the same file, byte for byte. tool/open_go_vectors.go runs in an export of datekeys-go, since it uses internal/testkit, internal/cbortest and internal/inspectview, and writes: - open_cases.json: capsule.Open on every fixture with each of its credentials, and 117 openings of edited fixtures or with other options at each step that the corpus does not reach: the frame, the fields, the extensions and the bindings of a .dkk at step 9.a, the clock and the failures of the release source, the age headers of steps 11 and 17, a malformed X25519 stanza in INNER_ACCESS_AGE, CONTROL_CBOR and the BODY of format 3 sealed again, the sinks and the output that fail, the refusal of Accept and the unusable extensions of each object, with the text, the step, the checks, the release requests, the state of the sink and the content or the files; - open_heads.json: capsule.DecodeHead and EncodeHead of heads of a fixed seed, valid and broken in each layer of spec §69.1; - open_notes.json: extension.CheckNote, Note, Header.UnusableNote and extension.Standard with a note; - open_inspect.json: the text of capsule.Inspect for each of the 5110 mutations of inspect_differential.json, where Go and the file also agree, and the exact output of datekeys inspect -json with public notes; - open_vectors.g.dart: seven small fixtures, their records and a part of each file, for the tests that run compiled to JavaScript. The edited capsules are sealed again with the file keys and the nonces of the fixtures, as the testkit does, so the output is the same on every run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 days ago
{
Specification 0.13, approved: the spec version 0.13 and testdata at spec-v0.13 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
3 days ago
"spec": "0.13",
Stage 4c: the vectors of Go for the head, the note and the opening tool/mutation_go_texts.go ports scripts/mutation-go-texts.go of datekeys-ts over the synced testdata of this repository, the tag spec-v0.11: it replays every case of the mutation corpus as the testkit of the reference does and writes the text of capsule.Open and its checks, with the detail of each step, in mutation_texts.json. Where Go and the corpus disagree on a code or a step it would say so in the case; Go at c531e93 and at the tag spec-v0.11 agree with all 210 cases, and give the same file, byte for byte. tool/open_go_vectors.go runs in an export of datekeys-go, since it uses internal/testkit, internal/cbortest and internal/inspectview, and writes: - open_cases.json: capsule.Open on every fixture with each of its credentials, and 117 openings of edited fixtures or with other options at each step that the corpus does not reach: the frame, the fields, the extensions and the bindings of a .dkk at step 9.a, the clock and the failures of the release source, the age headers of steps 11 and 17, a malformed X25519 stanza in INNER_ACCESS_AGE, CONTROL_CBOR and the BODY of format 3 sealed again, the sinks and the output that fail, the refusal of Accept and the unusable extensions of each object, with the text, the step, the checks, the release requests, the state of the sink and the content or the files; - open_heads.json: capsule.DecodeHead and EncodeHead of heads of a fixed seed, valid and broken in each layer of spec §69.1; - open_notes.json: extension.CheckNote, Note, Header.UnusableNote and extension.Standard with a note; - open_inspect.json: the text of capsule.Inspect for each of the 5110 mutations of inspect_differential.json, where Go and the file also agree, and the exact output of datekeys inspect -json with public notes; - open_vectors.g.dart: seven small fixtures, their records and a part of each file, for the tests that run compiled to JavaScript. The edited capsules are sealed again with the file keys and the nonces of the fixtures, as the testkit does, so the output is the same on every run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 days ago
"generator": "tool/open_go_vectors.go",
"source": "c531e936fa8188a4aab01575607cc85d4f5d4fa4",
Stage 5b: the opening evaluates the security area as Go OpenOptions.evaluator is now evaluateSecurityInput, so that opening a capsule of format 3 gives the verdicts of Go at step 17: the signature of alg 1 and every verdict of the form, with the author keys of the options, and the signature of alg 2 and the seal of seal_type 2 not evaluated until a reader of CMS is given. notEvaluated stays for a caller that shows no verdict. tool/open_go_vectors.go records the verdicts of each capsule of format 3 that opens, with their lines, the key and the label of alg 1 and the earliest valid seal, and opens the fixtures signed with alg 1 also with their author key saved, F3, and with another, F4. Every case of open_cases.json and every case of the mutation corpus that opens gives those verdicts and lines: format3_signed, format3_unsigned, format3_signature_unsupported, format3_seal_unsupported, format3_security_v2 and format3_note all of them, and format3_signed_cms and format3_sealed the part that needs no reader of CMS. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 days ago
"description": "capsule.Open of a .dkc, as edits of a fixture, given the release (null: none), or a source that fails with source_error (its text and its code, none for a plain error); the clock now; the registry of profiles, empty when registry is empty; the extensions known at (id, version) with valid data valid_data (testkit.KnownExtensions), or reject_all, a registry that knows every extension and rejects all data with that text; the age identities, the .dkk decoded before (dkk, with its material replaced by dkk_material) or the .dkk still encoded (dkk_file); a sink that fails at sink_fail (begin, create i, write i, close i or commit, with the text no and the call); an output that fails with disk full when output_fail; accept, refuse to refuse every verdict with not trusted; and author_keys, the author keys saved with their labels. The outcome: result (ok, refused, or the code), text, the checks as [step, name, ok, detail, code], the release requests, the state of the sink, the content (length and SHA-256) or the files ([path, size, SHA-256 of what the sink received]) of a capsule that opens, the verdicts of a capsule of format 3 that opens (signature, seal, lines, author_key and author_label of alg 1, sealed_at), and the unusable extensions of each object as [id, version, text].",
Stage 4c: the vectors of Go for the head, the note and the opening tool/mutation_go_texts.go ports scripts/mutation-go-texts.go of datekeys-ts over the synced testdata of this repository, the tag spec-v0.11: it replays every case of the mutation corpus as the testkit of the reference does and writes the text of capsule.Open and its checks, with the detail of each step, in mutation_texts.json. Where Go and the corpus disagree on a code or a step it would say so in the case; Go at c531e93 and at the tag spec-v0.11 agree with all 210 cases, and give the same file, byte for byte. tool/open_go_vectors.go runs in an export of datekeys-go, since it uses internal/testkit, internal/cbortest and internal/inspectview, and writes: - open_cases.json: capsule.Open on every fixture with each of its credentials, and 117 openings of edited fixtures or with other options at each step that the corpus does not reach: the frame, the fields, the extensions and the bindings of a .dkk at step 9.a, the clock and the failures of the release source, the age headers of steps 11 and 17, a malformed X25519 stanza in INNER_ACCESS_AGE, CONTROL_CBOR and the BODY of format 3 sealed again, the sinks and the output that fail, the refusal of Accept and the unusable extensions of each object, with the text, the step, the checks, the release requests, the state of the sink and the content or the files; - open_heads.json: capsule.DecodeHead and EncodeHead of heads of a fixed seed, valid and broken in each layer of spec §69.1; - open_notes.json: extension.CheckNote, Note, Header.UnusableNote and extension.Standard with a note; - open_inspect.json: the text of capsule.Inspect for each of the 5110 mutations of inspect_differential.json, where Go and the file also agree, and the exact output of datekeys inspect -json with public notes; - open_vectors.g.dart: seven small fixtures, their records and a part of each file, for the tests that run compiled to JavaScript. The edited capsules are sealed again with the file keys and the nonces of the fixtures, as the testkit does, so the output is the same on every run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 days ago
"fixtures": [
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=446",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ab10174561a9a19a6d9dc9ab1ef59c66 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"0 bytes of content",""]],"content":{"length":0,"sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},"dkc":{"base":"empty_payload.dkc","edits":[]},"name":"empty_payload","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=1a6c88f0fa7408f649cf64b929cb9289 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 0, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 0",""],[18,"commit",true,"0 bytes of content",""]],"content":{"length":0,"sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855"},"dkc":{"base":"format2_empty_payload.dkc","edits":[]},"name":"format2_empty_payload","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=fe68d3b3bb59db0c14b7ef57d8d6cb5e datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 46, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 46",""],[18,"commit",true,"46 bytes of content",""]],"content":{"length":46,"sha256":"937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b"},"dkc":{"base":"format2_time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b657901010250e3c7be83cbf1fbd6b115c96411b3bd010350fe68d3b3bb59db0c14b7ef57d8d6cb5e04667832353531390558209c09aeda759a8664a98120435fe0f6bf850000ac5ef0f9853ff46144c365780106a1005820600892659fe4890223e895876275f656995d170fda42b07fb2bec0ca51ce4b43","name":"format2_time_and_key_portable: the .dkk, still encoded","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=fe68d3b3bb59db0c14b7ef57d8d6cb5e datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 46, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 46",""],[18,"commit",true,"46 bytes of content",""]],"content":{"length":46,"sha256":"937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b"},"dkc":{"base":"format2_time_and_key_portable.dkc","edits":[]},"dkk":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b657901010250e3c7be83cbf1fbd6b115c96411b3bd010350fe68d3b3bb59db0c14b7ef57d8d6cb5e04667832353531390558209c09aeda759a8664a98120435fe0f6bf850000ac5ef0f9853ff46144c365780106a1005820600892659fe4890223e895876275f656995d170fda42b07fb2bec0ca51ce4b43","name":"format2_time_and_key_portable: the .dkk, decoded","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ca3e8bfcae3ee19717fe3129ec9830b6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f"},"dkc":{"base":"format2_time_and_key_recipients.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b65790101025093cedf68421710e83908ec683b1044360350ca3e8bfcae3ee19717fe3129ec9830b60466783235353139055820272884826b037b4bc98cfe4d57838807b6da906ff8704e810f975111dd3cbfda06a10058201a44fd8708c92e2e0a10cfcb1d864a71331ea9af25d97e1a42e969dc898959e3","name":"format2_time_and_key_recipients: the .dkk, still encoded","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ca3e8bfcae3ee19717fe3129ec9830b6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f"},"dkc":{"base":"format2_time_and_key_recipients.dkc","edits":[]},"dkk":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b65790101025093cedf68421710e83908ec683b1044360350ca3e8bfcae3ee19717fe3129ec9830b60466783235353139055820272884826b037b4bc98cfe4d57838807b6da906ff8704e810f975111dd3cbfda06a10058201a44fd8708c92e2e0a10cfcb1d864a71331ea9af25d97e1a42e969dc898959e3","name":"format2_time_and_key_recipients: the .dkk, decoded","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ca3e8bfcae3ee19717fe3129ec9830b6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f"},"dkc":{"base":"format2_time_and_key_recipients.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1DRV36ZLYW0GCZCJTMK0S025K3PLEQR7QAY574K4PGH5VFTZKKZMS3J3LNL"],"name":"format2_time_and_key_recipients: identity 1","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ca3e8bfcae3ee19717fe3129ec9830b6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f"},"dkc":{"base":"format2_time_and_key_recipients.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1E92XVRNNUHQ9GD7D34P2XAD97MZGNE4DR990GJFGDYEX8WDE8E4ST8HHK2"],"name":"format2_time_and_key_recipients: identity 2","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ca3e8bfcae3ee19717fe3129ec9830b6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f"},"dkc":{"base":"format2_time_and_key_recipients.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1C2K7R20E0GKLGJM60JFL63ZUL4G9HNSA7CYU3WLPZMKLYEKFFJRSSP7UTJ"],"name":"format2_time_and_key_recipients: identity 3","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ca3e8bfcae3ee19717fe3129ec9830b6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"4 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f"},"dkc":{"base":"format2_time_and_key_recipients.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b65790101025093cedf68421710e83908ec683b1044360350ca3e8bfcae3ee19717fe3129ec9830b60466783235353139055820272884826b037b4bc98cfe4d57838807b6da906ff8704e810f975111dd3cbfda06a10058201a44fd8708c92e2e0a10cfcb1d864a71331ea9af25d97e1a42e969dc898959e3","identities":["AGE-SECRET-KEY-1DRV36ZLYW0GCZCJTMK0S025K3PLEQR7QAY574K4PGH5VFTZKKZMS3J3LNL","AGE-SECRET-KEY-1E92XVRNNUHQ9GD7D34P2XAD97MZGNE4DR990GJFGDYEX8WDE8E4ST8HHK2","AGE-SECRET-KEY-1C2K7R20E0GKLGJM60JFL63ZUL4G9HNSA7CYU3WLPZMKLYEKFFJRSSP7UTJ"],"name":"format2_time_and_key_recipients: every credential","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1PXL3AC9TN7LJJCLQ53TGU6VYU02AY709VFYYZCEYFGNXMHT7SUMQP0M2DT"],"name":"format2_time_and_key_sixteen: identity 1","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1ATGRTUEY80VSHV6YR6P3U3D4Z4VHC8K7UCTPEY9TRALTW3RJ6VHQQPKQYN"],"name":"format2_time_and_key_sixteen: identity 2","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-13WEPF99TP58KQAD3PJVMTKAW2H7L5TK2C0200QGK0ESH5GZD7ZKQFE3ER5"],"name":"format2_time_and_key_sixteen: identity 3","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-19TSHS4VD8VJ29ETFNJYKCHGQYU2K0NC9HAT6Z4ZWZ7NNJAUHXLDSQG6CZF"],"name":"format2_time_and_key_sixteen: identity 4","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1M0AXFJZZRLWNQ32M7WXE7Q4PCT2XX9LZPTKPS7UGMC2M2QFAVNCSPQWVN4"],"name":"format2_time_and_key_sixteen: identity 5","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1DX3M9XMVLD8YW77F8HP57985HCSLCS4TZ4ZER8P560NNJADKM5FQ58PGEM"],"name":"format2_time_and_key_sixteen: identity 6","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1MUR3WWVK2SE0DDTU45PEEM2C0GMRQNE4KY28DVHF40ZNLWVTW6AQ99C5A9"],"name":"format2_time_and_key_sixteen: identity 7","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1NNMJK68RC2TTXXMWN38CTZV53PUT6WCPKW8SAQYFL3H827S7DPTQW7WGSU"],"name":"format2_time_and_key_sixteen: identity 8","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1AM8FLQKNRVKMY57GN7X0NVUUC3XUQ6HJ46WGMTWYMEAKDP8545QSM6MXZ4"],"name":"format2_time_and_key_sixteen: identity 9","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1E36KU0LDG3ZPDWT2RTUUUXX6WW4A3EQJSTTXYAPPCR5KM7030GASR7LGLP"],"name":"format2_time_and_key_sixteen: identity 10","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1N6DRGLY8C6RVK38VUAFX42X0URCWDHDPK4N88LC62GURP80QRLVQ0LU4ZA"],"name":"format2_time_and_key_sixteen: identity 11","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1ESAC0TZKVMNCKW4XVRRUMN757NNKSW2W5CPLA5FEAQZUEPCZGLZS7ZT8G9"],"name":"format2_time_and_key_sixteen: identity 12","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-129ZJMZTRDZVFSTYLPECMCDS5QR6Q2C7FKW2A2S2L96NJ6G4WVSVSFAQ2NY"],"name":"format2_time_and_key_sixteen: identity 13","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1Z9TQWH8VG4QSLM8PUU0KDQHAWKDMDVF0X35LXKRYXGWZAF5ZYL3SZX9CML"],"name":"format2_time_and_key_sixteen: identity 14","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-10AEA26HQPN53KHFGXGJCHAAZDTJU6PF4HJUGZ58P07MZTM3TTN5SMD27MM"],"name":"format2_time_and_key_sixteen: identity 15","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-153U4SENXWJEY7WMXR75HUUSV6HU0CJPAXPU7S8X8S20G5KT86FWQHVG43Q"],"name":"format2_time_and_key_sixteen: identity 16","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e53b85a2f9201e2b3368ae122540da7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"16 identities to try",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"e5abfb7b5fdbf297277b6cc4729c15d85435e890b653c2e2342b7031ecd9eab9"},"dkc":{"base":"format2_time_and_key_sixteen.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1PXL3AC9TN7LJJCLQ53TGU6VYU02AY709VFYYZCEYFGNXMHT7SUMQP0M2DT","AGE-SECRET-KEY-1ATGRTUEY80VSHV6YR6P3U3D4Z4VHC8K7UCTPEY9TRALTW3RJ6VHQQPKQYN","AGE-SECRET-KEY-13WEPF99TP58KQAD3PJVMTKAW2H7L5TK2C0200QGK0ESH5GZD7ZKQFE3ER5","AGE-SECRET-KEY-19TSHS4VD8VJ29ETFNJYKCHGQYU2K0NC9HAT6Z4ZWZ7NNJAUHXLDSQG6CZF","AGE-SECRET-KEY-1M0AXFJZZRLWNQ32M7WXE7Q4PCT2XX9LZPTKPS7UGMC2M2QFAVNCSPQWVN4","AGE-SECRET-KEY-1DX3M9XMVLD8YW77F8HP57985HCSLCS4TZ4ZER8P560NNJADKM5FQ58PGEM","AGE-SECRET-KEY-1MUR3WWVK2SE0DDTU45PEEM2C0GMRQNE4KY28DVHF40ZNLWVTW6AQ99C5A9","AGE-SECRET-KEY-1NNMJK68RC2TTXXMWN38CTZV53PUT6WCPKW8SAQYFL3H827S7DPTQW7WGSU","AGE-SECRET-KEY-1AM8FLQKNRVKMY57GN7X0NVUUC3XUQ6HJ46WGMTWYMEAKDP8545QSM6MXZ4","AGE-SECRET-KEY-1E36KU0LDG3ZPDWT2RTUUUXX6WW4A3EQJSTTXYAPPCR5KM7030GASR7LGLP","AGE-SECRET-KEY-1N6DRGLY8C6RVK38VUAFX42X0URCWDHDPK4N88LC62GURP80QRLVQ0LU4ZA","AGE-SECRET-KEY-1ESAC0TZKVMNCKW4XVRRUMN757NNKSW2W5CPLA5FEAQZUEPCZGLZS7ZT8G9","AGE-SECRET-KEY-129ZJMZTRDZVFSTYLPECMCDS5QR6Q2C7FKW2A2S2L96NJ6G4WVSVSFAQ2NY","AGE-SECRET-KEY-1Z9TQWH8VG4QSLM8PUU0KDQHAWKDMDVF0X35LXKRYXGWZAF5ZYL3SZX9CML","AGE-SECRET-KEY-10AEA26HQPN53KHFGXGJCHAAZDTJU6PF4HJUGZ58P07MZTM3TTN5SMD27MM","AGE-SECRET-KEY-153U4SENXWJEY7WMXR75HUUSV6HU0CJPAXPU7S8X8S20G5KT86FWQHVG43Q"],"name":"format2_time_and_key_sixteen: every credential","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=c8cfc53d45c879da916edddf71f3bddd datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 78000, padding reforzado, P = 79872",""],[17,"open payload",true,"payload authenticated; 79872 bytes of plaintext, zero after byte 78000",""],[18,"commit",true,"78000 bytes of content",""]],"content":{"length":78000,"sha256":"53b8ee821fb7b678e89d4f93da1812339f6cc1ab83aac6ed1432db99df784be5"},"dkc":{"base":"format2_time_only.dkc","edits":[]},"name":"format2_time_only","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=10157a2ba032f78e23d8035e368345c8 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 78000, padding bloque256, P = 78080",""],[17,"open payload",true,"payload authenticated; 78080 bytes of plaintext, zero after byte 78000",""],[18,"commit",true,"78000 bytes of content",""]],"content":{"length":78000,"sha256":"53b8ee821fb7b678e89d4f93da1812339f6cc1ab83aac6ed1432db99df784be5"},"dkc":{"base":"format2_time_only_bloque256.dkc","edits":[]},"name":"format2_time_only_bloque256","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=494",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=3ab2c06d482609a9c7ae92f672599883 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 34, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 34",""],[18,"commit",true,"34 bytes of content",""]],"content":{"length":34,"sha256":"1129768e195e2f1e50b7a6f926b6eebef120212c29b5642c8a662c503b2a9131"},"dkc":{"base":"format2_time_only_extensions.dkc","edits":[]},"name":"format2_time_only_extensions","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
Stage 5b: the opening evaluates the security area as Go OpenOptions.evaluator is now evaluateSecurityInput, so that opening a capsule of format 3 gives the verdicts of Go at step 17: the signature of alg 1 and every verdict of the form, with the author keys of the options, and the signature of alg 2 and the seal of seal_type 2 not evaluated until a reader of CMS is given. notEvaluated stays for a caller that shows no verdict. tool/open_go_vectors.go records the verdicts of each capsule of format 3 that opens, with their lines, the key and the label of alg 1 and the earliest valid seal, and opens the fixtures signed with alg 1 also with their author key saved, F3, and with another, F4. Every case of open_cases.json and every case of the mutation corpus that opens gives those verdicts and lines: format3_signed, format3_unsigned, format3_signature_unsupported, format3_seal_unsupported, format3_security_v2 and format3_note all of them, and format3_signed_cms and format3_sealed the part that needs no reader of CMS. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 days ago
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=f85bb40402b3348b4d1918b8aebde114 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 1171, padding reforzado, P = 1280",""],[17,"open payload",true,"payload authenticated; BODY of 1171 bytes, 1 files, area of 1024 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_area_1024.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format3_area_1024","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["Sin firma de autor."],"seal":"S0","signature":"F0"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0e8e97dd76a6d6e77583fcf14a73849d datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 20644, padding bloque256, P = 20736",""],[17,"open payload",true,"payload authenticated; BODY of 20644 bytes, 1 files, area of 512 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_bloque256.dkc","edits":[]},"files":[["informe.txt",20000,"0d3a0a082e43677eabd670db220ec3deba2fffcc000229dd4dd1eb0c9afa7dff"]],"name":"format3_bloque256","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["Sin firma de autor."],"seal":"S0","signature":"F0"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=d4d92a78eb71a94616bf193a8b665727 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwNH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1004, unlock at 2023-08-23T15:59:36Z",""],[8,"tlock stanza",true,"round 1004, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1004 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 636, padding reforzado, P = 768",""],[17,"open payload",true,"payload authenticated; BODY of 636 bytes, 0 files, area of 512 bytes",""],[18,"commit",true,"0 files",""]],"dkc":{"base":"format3_comment_only.dkc","edits":[]},"files":[],"name":"format3_comment_only","now":"2023-08-23T15:59:36Z","release":{"round":1004,"signature":"a40658b820c0f8c10207524179a2031ba9537688a0d04e4851b58026be9a341fee3b96fb48ffad28483d84b40a5864aa"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["Sin firma de autor."],"seal":"S0","signature":"F0"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=169, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"169 bytes",""],[4,"header validation",true,"capsule_id=1999a39e1beae60b2fc9b157d11dab5a datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 32915, padding reforzado, P = 34816",""],[17,"open payload",true,"payload authenticated; BODY of 32915 bytes, 1 files, area of 32768 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_note.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format3_note","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["Sin firma de autor."],"seal":"S0","signature":"F0"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=8e2f648c77bd659a89ca95f96f213780 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",true,"payload authenticated; BODY of 659 bytes, 1 files, area of 512 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_seal_unsupported.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format3_seal_unsupported","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["No se ha comprobado ninguna firma: trátala como no firmada.","Lleva un sello de tiempo que esta versión no sabe comprobar: aquí no prueba nada."],"seal":"S1","signature":"F1"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=b3d25bb6c74cda4e014c65e3d2f43a69 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 32915, padding reforzado, P = 34816",""],[17,"open payload",true,"payload authenticated; BODY of 32915 bytes, 1 files, area of 32768 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_sealed.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format3_sealed","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"author_key":"dkauthor1jtf6s2c7ywr6scx40jhye32sj82rjp8a6cj7f54jsh36rd96vaqqcg54xg","lines":["Firmado con la clave dkauthor1jtf6s2c7ywr6scx40jhye32sj82rjp8a6cj7f54jsh36rd96vaqqcg54xg. No prueba quién la tiene.","Según un sello a nombre de «Autoridad de Sellado de prueba», existía el 2023-08-23T15:09:27Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."],"seal":"S4","sealed_at":"2023-08-23T15:09:27Z","signature":"F4"}},
{"author_keys":{"dkauthor1jtf6s2c7ywr6scx40jhye32sj82rjp8a6cj7f54jsh36rd96vaqqcg54xg":"Ana","dkauthor1n5pmm750hpmvxcravawct34ah7hce20jj2nvy7s7uuxc46yta2xs077rc8":"Luis"},"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=b3d25bb6c74cda4e014c65e3d2f43a69 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 32915, padding reforzado, P = 34816",""],[17,"open payload",true,"payload authenticated; BODY of 32915 bytes, 1 files, area of 32768 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_sealed.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format3_sealed: its author key saved","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"author_key":"dkauthor1jtf6s2c7ywr6scx40jhye32sj82rjp8a6cj7f54jsh36rd96vaqqcg54xg","author_label":"Ana","lines":["Firmado con la clave que guardaste como Ana.","Según un sello a nombre de «Autoridad de Sellado de prueba», existía el 2023-08-23T15:09:27Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."],"seal":"S4","sealed_at":"2023-08-23T15:09:27Z","signature":"F3"}},
{"author_keys":{"dkauthor1n5pmm750hpmvxcravawct34ah7hce20jj2nvy7s7uuxc46yta2xs077rc8":"Luis"},"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=b3d25bb6c74cda4e014c65e3d2f43a69 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 32915, padding reforzado, P = 34816",""],[17,"open payload",true,"payload authenticated; BODY of 32915 bytes, 1 files, area of 32768 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_sealed.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format3_sealed: another author key saved","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"author_key":"dkauthor1jtf6s2c7ywr6scx40jhye32sj82rjp8a6cj7f54jsh36rd96vaqqcg54xg","lines":["Firmado con la clave dkauthor1jtf6s2c7ywr6scx40jhye32sj82rjp8a6cj7f54jsh36rd96vaqqcg54xg. No prueba quién la tiene.","Según un sello a nombre de «Autoridad de Sellado de prueba», existía el 2023-08-23T15:09:27Z, antes de que la cápsula pudiera abrirse. DateKeys no comprueba quién emitió el sello."],"seal":"S4","sealed_at":"2023-08-23T15:09:27Z","signature":"F4"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=59ce66fca727d22d1eb5ae0b8828f438 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",true,"payload authenticated; BODY of 659 bytes, 1 files, area of 512 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_security_v2.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format3_security_v2","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["No se han podido comprobar la firma ni el sello: trátala como no firmada y sin fecha probada."],"seal":"X","signature":"X"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=a6bf56d5084eb0054779492620b8af34 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",true,"payload authenticated; BODY of 659 bytes, 1 files, area of 512 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_signature_unsupported.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format3_signature_unsupported","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["No se ha comprobado ninguna firma: trátala como no firmada."],"seal":"S0","signature":"F1"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=681476c1bfa81dd12fec810ee44fe7f7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 32915, padding reforzado, P = 34816",""],[17,"open payload",true,"payload authenticated; BODY of 32915 bytes, 1 files, area of 32768 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_signed.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format3_signed","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"author_key":"dkauthor1jtf6s2c7ywr6scx40jhye32sj82rjp8a6cj7f54jsh36rd96vaqqcg54xg","lines":["Firmado con la clave dkauthor1jtf6s2c7ywr6scx40jhye32sj82rjp8a6cj7f54jsh36rd96vaqqcg54xg. No prueba quién la tiene."],"seal":"S0","signature":"F4"}},
{"author_keys":{"dkauthor1jtf6s2c7ywr6scx40jhye32sj82rjp8a6cj7f54jsh36rd96vaqqcg54xg":"Ana","dkauthor1n5pmm750hpmvxcravawct34ah7hce20jj2nvy7s7uuxc46yta2xs077rc8":"Luis"},"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=681476c1bfa81dd12fec810ee44fe7f7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 32915, padding reforzado, P = 34816",""],[17,"open payload",true,"payload authenticated; BODY of 32915 bytes, 1 files, area of 32768 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_signed.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format3_signed: its author key saved","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"author_key":"dkauthor1jtf6s2c7ywr6scx40jhye32sj82rjp8a6cj7f54jsh36rd96vaqqcg54xg","author_label":"Ana","lines":["Firmado con la clave que guardaste como Ana."],"seal":"S0","signature":"F3"}},
{"author_keys":{"dkauthor1n5pmm750hpmvxcravawct34ah7hce20jj2nvy7s7uuxc46yta2xs077rc8":"Luis"},"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=681476c1bfa81dd12fec810ee44fe7f7 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 32915, padding reforzado, P = 34816",""],[17,"open payload",true,"payload authenticated; BODY of 32915 bytes, 1 files, area of 32768 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_signed.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format3_signed: another author key saved","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"author_key":"dkauthor1jtf6s2c7ywr6scx40jhye32sj82rjp8a6cj7f54jsh36rd96vaqqcg54xg","lines":["Firmado con la clave dkauthor1jtf6s2c7ywr6scx40jhye32sj82rjp8a6cj7f54jsh36rd96vaqqcg54xg. No prueba quién la tiene."],"seal":"S0","signature":"F4"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=fb1b4917149f996c9c9561997593d37d datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 32915, padding reforzado, P = 34816",""],[17,"open payload",true,"payload authenticated; BODY of 32915 bytes, 1 files, area of 32768 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_signed_cms.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format3_signed_cms","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["Firmado con un certificado a nombre de «Luis Gómez», «Ana López». DateKeys no comprueba quién lo emitió: para eso, exporta la firma a un validador oficial."," «Luis Gómez» (emisor según su certificado: «Luis Gómez»), sellado por «Autoridad de Sellado de prueba» el 2023-08-23T15:09:27Z, antes de la fecha de apertura."," «Ana López» (emisor según su certificado: «Ana López»), sellado por «Autoridad de Sellado de prueba» el 2023-08-23T15:09:27Z, antes de la fecha de apertura."," DateKeys no comprueba quién emitió los sellos."],"seal":"S0","sealed_at":"2023-08-23T15:09:27Z","signature":"F6"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",true,"payload authenticated; BODY of 659 bytes, 1 files, area of 512 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_single.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format3_single","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["Sin firma de autor."],"seal":"S0","signature":"F0"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=29737cb54ad5310734ecf20720c2d317 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 688, padding reforzado, P = 768",""],[17,"open payload",true,"payload authenticated; BODY of 688 bytes, 1 files, area of 512 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b657901010250bdb483fba42daf0b409f44d23033f362035029737cb54ad5310734ecf20720c2d317046678323535313905582042e50b6ae3b2f00b79f08609f7fe11fba1256c54c6faa0c9ec9258b5f6f4c05906a1005820680d29962e575689a31543df28433dae7737abd9a793e9cae92ef40920d09636","files":[["secreto.txt",46,"937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b"]],"name":"format3_time_and_key_portable: the .dkk, still encoded","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["Sin firma de autor."],"seal":"S0","signature":"F0"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=29737cb54ad5310734ecf20720c2d317 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 688, padding reforzado, P = 768",""],[17,"open payload",true,"payload authenticated; BODY of 688 bytes, 1 files, area of 512 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_time_and_key_portable.dkc","edits":[]},"dkk":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b657901010250bdb483fba42daf0b409f44d23033f362035029737cb54ad5310734ecf20720c2d317046678323535313905582042e50b6ae3b2f00b79f08609f7fe11fba1256c54c6faa0c9ec9258b5f6f4c05906a1005820680d29962e575689a31543df28433dae7737abd9a793e9cae92ef40920d09636","files":[["secreto.txt",46,"937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b"]],"name":"format3_time_and_key_portable: the .dkk, decoded","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["Sin firma de autor."],"seal":"S0","signature":"F0"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=091119676ec081409c666846153ba7eb datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 84078, padding reforzado, P = 86016",""],[17,"open payload",true,"payload authenticated; BODY of 84078 bytes, 5 files, area of 512 bytes",""],[18,"commit",true,"5 files",""]],"dkc":{"base":"format3_tree.dkc","edits":[]},"files":[["carta.txt",37,"89f8d33bccb614f3928203cdc48da69b2c7e3eedddcc097d47977806077fb5c1"],["fotos/2025/atardecer.jpg",3000,"cc26b6f4c05b315883de7ca59eb990a56efaff70c6b8f366e900975804b27b18"],["fotos/2025/playa.jpg",80000,"5619f3e6974f07c51e71777064e0d46992144fe91f6218fb00ac2e7074555ed1"],["fotos/leeme.txt",22,"cc5e54573bb1b57f0481843fe6c1bd7bebd236d73057220cc8dba732d9cf4700"],["música/canción.txt",12,"3e1453835def913b4b9ef720e11e5e2ac167a9af12b9f0a5417be8f84ded5e5a"]],"name":"format3_tree","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["Sin firma de autor."],"seal":"S0","signature":"F0"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=0cced8e8b035d6dd70f39923b407a96c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 32915, padding reforzado, P = 34816",""],[17,"open payload",true,"payload authenticated; BODY of 32915 bytes, 1 files, area of 32768 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_unsigned.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format3_unsigned","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["Sin firma de autor."],"seal":"S0","signature":"F0"}},
Stage 4c: the vectors of Go for the head, the note and the opening tool/mutation_go_texts.go ports scripts/mutation-go-texts.go of datekeys-ts over the synced testdata of this repository, the tag spec-v0.11: it replays every case of the mutation corpus as the testkit of the reference does and writes the text of capsule.Open and its checks, with the detail of each step, in mutation_texts.json. Where Go and the corpus disagree on a code or a step it would say so in the case; Go at c531e93 and at the tag spec-v0.11 agree with all 210 cases, and give the same file, byte for byte. tool/open_go_vectors.go runs in an export of datekeys-go, since it uses internal/testkit, internal/cbortest and internal/inspectview, and writes: - open_cases.json: capsule.Open on every fixture with each of its credentials, and 117 openings of edited fixtures or with other options at each step that the corpus does not reach: the frame, the fields, the extensions and the bindings of a .dkk at step 9.a, the clock and the failures of the release source, the age headers of steps 11 and 17, a malformed X25519 stanza in INNER_ACCESS_AGE, CONTROL_CBOR and the BODY of format 3 sealed again, the sinks and the output that fail, the refusal of Accept and the unusable extensions of each object, with the text, the step, the checks, the release requests, the state of the sink and the content or the files; - open_heads.json: capsule.DecodeHead and EncodeHead of heads of a fixed seed, valid and broken in each layer of spec §69.1; - open_notes.json: extension.CheckNote, Note, Header.UnusableNote and extension.Standard with a note; - open_inspect.json: the text of capsule.Inspect for each of the 5110 mutations of inspect_differential.json, where Go and the file also agree, and the exact output of datekeys inspect -json with public notes; - open_vectors.g.dart: seven small fixtures, their records and a part of each file, for the tests that run compiled to JavaScript. The edited capsules are sealed again with the file keys and the nonces of the fixtures, as the testkit does, so the output is the same on every run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 days ago
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 1 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"46 bytes of content",""]],"content":{"length":46,"sha256":"937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b"},"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"time_and_key_portable: the .dkk, still encoded","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 1 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"46 bytes of content",""]],"content":{"length":46,"sha256":"937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b"},"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"time_and_key_portable: the .dkk, decoded","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=842",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=c75dfc8e9c576d1369910664df93693a datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 3 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f"},"dkc":{"base":"time_and_key_recipients.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b657901010250b89292aedf6d05d584cec9a871ce87350350c75dfc8e9c576d1369910664df93693a046678323535313905582042d6d897097fd5af2772e058db17920afe1390e2856139bc2f800294564dd7ac06a100582069ac110380f5d768b5b6afaa157a50ed17d8ceccfbd4604ffa5b6da38539b635","name":"time_and_key_recipients: the .dkk, still encoded","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=842",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=c75dfc8e9c576d1369910664df93693a datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 3 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f"},"dkc":{"base":"time_and_key_recipients.dkc","edits":[]},"dkk":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b657901010250b89292aedf6d05d584cec9a871ce87350350c75dfc8e9c576d1369910664df93693a046678323535313905582042d6d897097fd5af2772e058db17920afe1390e2856139bc2f800294564dd7ac06a100582069ac110380f5d768b5b6afaa157a50ed17d8ceccfbd4604ffa5b6da38539b635","name":"time_and_key_recipients: the .dkk, decoded","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=842",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=c75dfc8e9c576d1369910664df93693a datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 3 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f"},"dkc":{"base":"time_and_key_recipients.dkc","edits":[]},"identities":["AGE-SECRET-KEY-1DPM6CQMQV3665FK762HTVC37XAY6X99MM4YLJ9J0J2DQD7K63GCSG5TMCK"],"name":"time_and_key_recipients: identity 1","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=842",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=c75dfc8e9c576d1369910664df93693a datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 3 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f"},"dkc":{"base":"time_and_key_recipients.dkc","edits":[]},"identities":["AGE-SECRET-KEY-15MEM79HAM2XQ79HN5QVCLECUDM4JQQKWEE9JWR3VV2FWK033AXPQQ2422Y"],"name":"time_and_key_recipients: identity 2","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=842",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=c75dfc8e9c576d1369910664df93693a datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"3 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 3 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f"},"dkc":{"base":"time_and_key_recipients.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b657901010250b89292aedf6d05d584cec9a871ce87350350c75dfc8e9c576d1369910664df93693a046678323535313905582042d6d897097fd5af2772e058db17920afe1390e2856139bc2f800294564dd7ac06a100582069ac110380f5d768b5b6afaa157a50ed17d8ceccfbd4604ffa5b6da38539b635","identities":["AGE-SECRET-KEY-1DPM6CQMQV3665FK762HTVC37XAY6X99MM4YLJ9J0J2DQD7K63GCSG5TMCK","AGE-SECRET-KEY-15MEM79HAM2XQ79HN5QVCLECUDM4JQQKWEE9JWR3VV2FWK033AXPQQ2422Y"],"name":"time_and_key_recipients: every credential","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=446",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ad4d676812b134ff8a3de263f77018b4 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"78000 bytes of content",""]],"content":{"length":78000,"sha256":"53b8ee821fb7b678e89d4f93da1812339f6cc1ab83aac6ed1432db99df784be5"},"dkc":{"base":"time_only.dkc","edits":[]},"name":"time_only","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"34 bytes of content",""]],"content":{"length":34,"sha256":"1129768e195e2f1e50b7a6f926b6eebef120212c29b5642c8a662c503b2a9131"},"dkc":{"base":"time_only_extensions.dkc","edits":[]},"name":"time_only_extensions","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"}
],
"steps": [
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",false,"capsule: truncated PUBLIC_HEADER: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[26,865,""]]},"name":"PUBLIC_HEADER cut short","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":0,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: truncated PUBLIC_HEADER: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=130, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"130 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6ODM5MDMxNjU4MTJ9 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",false,"datekey: round 83903165812 outside 1..83903165811 of datekeys:quicknet:v1: ERR_DATEKEY_INVALID","ERR_DATEKEY_INVALID"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[11,6,"82000001e2a5"],[51,1,"5c"],[128,18,"4f444d354d444d784e6a55344d544a390400"],[146,29,""]]},"name":"a DateKey round after 9999-12-31T23:59:59Z","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":0,"result":"ERR_DATEKEY_INVALID","sink":"untouched","text":"datekey: round 83903165812 outside 1..83903165811 of datekeys:quicknet:v1: ERR_DATEKEY_INVALID"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=130, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"130 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6ODM5MDMxNjU4MTF9 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 83903165811, unlock at 9999-12-31T23:59:57Z",""],[8,"tlock stanza",false,"agewrap: tlock stanza round \"2000\", DateKey round 83903165811: ERR_ROUND_MISMATCH","ERR_ROUND_MISMATCH"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[11,6,"82000001e2a5"],[51,1,"5c"],[128,18,"4f444d354d444d784e6a55344d5446390400"],[146,29,""]]},"name":"a DateKey of the last round, with the tlock stanza of round 2000","now":"9999-12-31T23:59:59Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":0,"result":"ERR_ROUND_MISMATCH","sink":"untouched","text":"agewrap: tlock stanza round \"2000\", DateKey round 83903165811: ERR_ROUND_MISMATCH"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: ERR_INVALID_MAGIC","ERR_INVALID_MAGIC"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b","name":"the .dkk: three bytes DKK","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_INVALID_MAGIC","sink":"untouched","text":"accesskey: ERR_INVALID_MAGIC"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: ERR_INVALID_MAGIC","ERR_INVALID_MAGIC"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b32010000000000008ca70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"the .dkk: another magic","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_INVALID_MAGIC","sink":"untouched","text":"accesskey: ERR_INVALID_MAGIC"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: truncated prelude: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b3101000000000000","name":"the .dkk: a prelude of 11 bytes","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_INTEGRITY","sink":"untouched","text":"accesskey: truncated prelude: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: framing version 2: ERR_UNSUPPORTED_VERSION","ERR_UNSUPPORTED_VERSION"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31020000000000008ca70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"the .dkk: framing version 2","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_UNSUPPORTED_VERSION","sink":"untouched","text":"accesskey: framing version 2: ERR_UNSUPPORTED_VERSION"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: flags 0x1, reserved 0x000: ERR_INVALID_FLAGS","ERR_INVALID_FLAGS"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010100000000008ca70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"the .dkk: FLAGS 1","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_INVALID_FLAGS","sink":"untouched","text":"accesskey: flags 0x1, reserved 0x000: ERR_INVALID_FLAGS"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: flags 0x0, reserved 0x001: ERR_INVALID_FLAGS","ERR_INVALID_FLAGS"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000010000008ca70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"the .dkk: RESERVED 1","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_INVALID_FLAGS","sink":"untouched","text":"accesskey: flags 0x0, reserved 0x001: ERR_INVALID_FLAGS"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: BODY_LEN 0 outside 1..16777216: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b310100000000000000a70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"the .dkk: BODY_LEN 0","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_INTEGRITY","sink":"untouched","text":"accesskey: BODY_LEN 0 outside 1..16777216: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: BODY_LEN 16777217 outside 1..16777216: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b310100000001000001a70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"the .dkk: BODY_LEN above 16 MiB","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_INTEGRITY","sink":"untouched","text":"accesskey: BODY_LEN 16777217 outside 1..16777216: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: truncated body: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b29","name":"the .dkk: a body cut short","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_INTEGRITY","sink":"untouched","text":"accesskey: truncated body: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: data after BODY_CBOR: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b297200","name":"the .dkk: a byte after the body","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_INTEGRITY","sink":"untouched","text":"accesskey: data after BODY_CBOR: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: codec: offset 0: indefinite length (initial byte 0xbf): ERR_NON_CANONICAL_CBOR","ERR_NON_CANONICAL_CBOR"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008cbf0073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"the .dkk: a body that is not canonical CBOR","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_NON_CANONICAL_CBOR","sink":"untouched","text":"accesskey: codec: offset 0: indefinite length (initial byte 0xbf): ERR_NON_CANONICAL_CBOR"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: codec: type \"datekeys-access-kex\", want \"datekeys-access-key\": ERR_NON_CANONICAL_CBOR","ERR_NON_CANONICAL_CBOR"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b6578010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"the .dkk: another type tag","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_NON_CANONICAL_CBOR","sink":"untouched","text":"accesskey: codec: type \"datekeys-access-kex\", want \"datekeys-access-key\": ERR_NON_CANONICAL_CBOR"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: codec: datekeys-access-key schema version 2, want 1: ERR_UNSUPPORTED_VERSION","ERR_UNSUPPORTED_VERSION"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b6579010202503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"the .dkk: schema version 2","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_UNSUPPORTED_VERSION","sink":"untouched","text":"accesskey: codec: datekeys-access-key schema version 2, want 1: ERR_UNSUPPORTED_VERSION"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: key 9 is not defined: ERR_NON_CANONICAL_CBOR","ERR_NON_CANONICAL_CBOR"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ea80073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b29720901","name":"the .dkk: an unknown key","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_NON_CANONICAL_CBOR","sink":"untouched","text":"accesskey: key 9 is not defined: ERR_NON_CANONICAL_CBOR"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: access_type \"ed25519\" is not supported by V1: ERR_ACCESS_INVALID","ERR_ACCESS_INVALID"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008da70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f0467656432353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"the .dkk: access_type ed25519","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_ACCESS_INVALID","sink":"untouched","text":"accesskey: access_type \"ed25519\" is not supported by V1: ERR_ACCESS_INVALID"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: x25519 access_material is 31 bytes, want 32: ERR_ACCESS_INVALID","ERR_ACCESS_INVALID"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ba70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f046678323535313905581f3d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d206a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"the .dkk: access_material of 31 bytes","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_ACCESS_INVALID","sink":"untouched","text":"accesskey: x25519 access_material is 31 bytes, want 32: ERR_ACCESS_INVALID"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"capsule: .dkk: extension org.example.lock v1: ERR_EXTENSION_CRITICAL_UNKNOWN","ERR_EXTENSION_CRITICAL_UNKNOWN"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b3101000000000000a3a80073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b29720781a200706f72672e6578616d706c652e6c6f636b0101","name":"the .dkk: an unknown critical extension","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_EXTENSION_CRITICAL_UNKNOWN","sink":"untouched","text":"capsule: .dkk: extension org.example.lock v1: ERR_EXTENSION_CRITICAL_UNKNOWN"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"capsule: the .dkk is for capsule 07070707070707070707070707070707, this is 448e134a13457c319cab7fceaf7ffa1f: ERR_ACCESS_INVALID","ERR_ACCESS_INVALID"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d03500707070707070707070707070707070704667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"the .dkk: another capsule_id","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_ACCESS_INVALID","sink":"untouched","text":"capsule: the .dkk is for capsule 07070707070707070707070707070707, this is 448e134a13457c319cab7fceaf7ffa1f: ERR_ACCESS_INVALID"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"capsule: .dkk: extension org.example.lock v1: ERR_EXTENSION_CRITICAL_UNKNOWN","ERR_EXTENSION_CRITICAL_UNKNOWN"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b3101000000000000a3a80073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d03500707070707070707070707070707070704667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b29720781a200706f72672e6578616d706c652e6c6f636b0101","name":"the .dkk: another capsule_id and an unknown critical extension","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_EXTENSION_CRITICAL_UNKNOWN","sink":"untouched","text":"capsule: .dkk: extension org.example.lock v1: ERR_EXTENSION_CRITICAL_UNKNOWN"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"capsule: the .dkk capsule_digest does not match this .dkc: ERR_ACCESS_INVALID","ERR_ACCESS_INVALID"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058200909090909090909090909090909090909090909090909090909090909090909","name":"the .dkk: the capsule_digest of another file","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_ACCESS_INVALID","sink":"untouched","text":"capsule: the .dkk capsule_digest does not match this .dkc: ERR_ACCESS_INVALID"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 1 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"46 bytes of content",""]],"content":{"length":46,"sha256":"937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b"},"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b310100000000000067a60073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c6","name":"the .dkk: no capsule_digest","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 1 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"46 bytes of content",""]],"content":{"length":46,"sha256":"937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b"},"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b3101000000000000a9a80073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b29720881a300706f72672e6578616d706c652e6e6f746501010244686f6c61","name":"the .dkk: an unknown noncritical extension","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"capsule: .dkk: extension org.example.lock v1: data: data 6e6f is not 6f6b: ERR_EXTENSION_DATA_INVALID","ERR_EXTENSION_DATA_INVALID"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b3101000000000000a7a80073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b29720781a300706f72672e6578616d706c652e6c6f636b010102426e6f","extensions":[{"id":"org.example.lock","valid_data":"6f6b","version":1}],"name":"the .dkk: a known critical extension with invalid data","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_EXTENSION_DATA_INVALID","sink":"untouched","text":"capsule: .dkk: extension org.example.lock v1: data: data 6e6f is not 6f6b: ERR_EXTENSION_DATA_INVALID"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try, 1 unusable noncritical extensions",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 1 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"46 bytes of content",""]],"content":{"length":46,"sha256":"937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b"},"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b3101000000000000a9a80073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b29720881a300706f72672e6578616d706c652e6e6f746501010244686f6c61","extensions":[{"id":"org.example.note","valid_data":"6f6b","version":1}],"name":"the .dkk: a known noncritical extension with invalid data","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok","unusable":{"dkk":[["org.example.note",1,"extension org.example.note v1: data: data 686f6c61 is not 6f6b: ERR_EXTENSION_DATA_INVALID"]]}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try, 1 unusable noncritical extensions",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 1 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"46 bytes of content",""]],"content":{"length":46,"sha256":"937492203d207d6fe36161b8696bf1f05b8b4cc56d855c44853f4b76aad3a05b"},"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b3101000000000000b0a80073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b29720881a300746f72672e6578616d706c652e64656c697665727901010247a1006468616e64","name":"the .dkk with an extension, every extension rejected","now":"2023-08-23T15:59:24Z","reject_all":"not today","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok","unusable":{"dkk":[["org.example.delivery",1,"extension org.example.delivery v1: data: not today: ERR_EXTENSION_DATA_INVALID"]]}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"accesskey: x25519 access_material is 31 bytes, want 32: ERR_ACCESS_INVALID","ERR_ACCESS_INVALID"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","dkk_material":"5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c6","name":"the .dkk, decoded, with access_material of 31 bytes","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_ACCESS_INVALID","sink":"untouched","text":"accesskey: x25519 access_material is 31 bytes, want 32: ERR_ACCESS_INVALID"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=446",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ad4d676812b134ff8a3de263f77018b4 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"78000 bytes of content",""]],"content":{"length":78000,"sha256":"53b8ee821fb7b678e89d4f93da1812339f6cc1ab83aac6ed1432db99df784be5"},"dkc":{"base":"time_only.dkc","edits":[]},"dkk_file":"444b4b","name":"time_only and a .dkk that is not one, which plays no part","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"34 bytes of content",""]],"content":{"length":34,"sha256":"1129768e195e2f1e50b7a6f926b6eebef120212c29b5642c8a662c503b2a9131"},"dkc":{"base":"time_only_extensions.dkc","edits":[]},"dkk":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"time_only and a decoded .dkk of another capsule, which plays no part","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"capsule: time_and_key capsule and no identity or .dkk supplied: ERR_ACCESS_REQUIRED","ERR_ACCESS_REQUIRED"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"name":"time_and_key without credentials, before the round time","now":"2023-08-23T14:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_ACCESS_REQUIRED","sink":"untouched","text":"capsule: time_and_key capsule and no identity or .dkk supplied: ERR_ACCESS_REQUIRED"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",false,"capsule: flags 0x1, reserved 0x0000: ERR_INVALID_FLAGS","ERR_INVALID_FLAGS"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[[5,1,"01"]]},"dkk_file":"584b4b31","name":"time_and_key with FLAGS 1 and a .dkk without magic","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_INVALID_FLAGS","sink":"untouched","text":"capsule: flags 0x1, reserved 0x0000: ERR_INVALID_FLAGS"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=29737cb54ad5310734ecf20720c2d317 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",false,"capsule: the .dkk is for capsule 448e134a13457c319cab7fceaf7ffa1f, this is 29737cb54ad5310734ecf20720c2d317: ERR_ACCESS_INVALID","ERR_ACCESS_INVALID"]],"dkc":{"base":"format3_time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"format 3: the .dkk of another capsule","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_ACCESS_INVALID","sink":"untouched","text":"capsule: the .dkk is for capsule 448e134a13457c319cab7fceaf7ffa1f, this is 29737cb54ad5310734ecf20720c2d317: ERR_ACCESS_INVALID"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ca3e8bfcae3ee19717fe3129ec9830b6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"4 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f"},"dkc":{"base":"format2_time_and_key_recipients.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b65790101025093cedf68421710e83908ec683b1044360350ca3e8bfcae3ee19717fe3129ec9830b60466783235353139055820272884826b037b4bc98cfe4d57838807b6da906ff8704e810f975111dd3cbfda06a10058201a44fd8708c92e2e0a10cfcb1d864a71331ea9af25d97e1a42e969dc898959e3","identities":["AGE-SECRET-KEY-1DRV36ZLYW0GCZCJTMK0S025K3PLEQR7QAY574K4PGH5VFTZKKZMS3J3LNL","AGE-SECRET-KEY-1E92XVRNNUHQ9GD7D34P2XAD97MZGNE4DR990GJFGDYEX8WDE8E4ST8HHK2","AGE-SECRET-KEY-1C2K7R20E0GKLGJM60JFL63ZUL4G9HNSA7CYU3WLPZMKLYEKFFJRSSP7UTJ"],"name":"format 2: the .dkk and three identities","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ca3e8bfcae3ee19717fe3129ec9830b6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"2 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 41, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 41",""],[18,"commit",true,"41 bytes of content",""]],"content":{"length":41,"sha256":"0e9fd50e98a85953aa9cf07a11ee3c62bb3d7622f344f1c6ce744d1ed111659f"},"dkc":{"base":"format2_time_and_key_recipients.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b65790101025093cedf68421710e83908ec683b1044360350ca3e8bfcae3ee19717fe3129ec9830b60466783235353139055820272884826b037b4bc98cfe4d57838807b6da906ff8704e810f975111dd3cbfda06a10058201a44fd8708c92e2e0a10cfcb1d864a71331ea9af25d97e1a42e969dc898959e3","identities":["AGE-SECRET-KEY-1G2PR0YP2Q6DHNQV9QPC7PFAC34AGUUU9CGJGJQCLJR3QLAUYPMGQ2LKA30"],"name":"format 2: the .dkk and an identity that is not a recipient","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=446",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ad4d676812b134ff8a3de263f77018b4 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",false,"capsule: round 1000 is published at 2023-08-23T15:59:24Z, it is 2023-08-23T15:59:23Z: ERR_RELEASE_UNAVAILABLE","ERR_RELEASE_UNAVAILABLE"]],"dkc":{"base":"time_only.dkc","edits":[]},"name":"one second before the round time","now":"2023-08-23T15:59:23Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_RELEASE_UNAVAILABLE","sink":"untouched","text":"capsule: round 1000 is published at 2023-08-23T15:59:24Z, it is 2023-08-23T15:59:23Z: ERR_RELEASE_UNAVAILABLE"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=446",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ad4d676812b134ff8a3de263f77018b4 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",false,"capsule: round 1000 is published at 2023-08-23T15:59:24Z, it is 2023-08-23T15:59:23Z: ERR_RELEASE_UNAVAILABLE","ERR_RELEASE_UNAVAILABLE"]],"dkc":{"base":"time_only.dkc","edits":[]},"name":"one nanosecond before the round time","now":"2023-08-23T15:59:23.999999999Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":0,"result":"ERR_RELEASE_UNAVAILABLE","sink":"untouched","text":"capsule: round 1000 is published at 2023-08-23T15:59:24Z, it is 2023-08-23T15:59:23Z: ERR_RELEASE_UNAVAILABLE"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"34 bytes of content",""]],"content":{"length":34,"sha256":"1129768e195e2f1e50b7a6f926b6eebef120212c29b5642c8a662c503b2a9131"},"dkc":{"base":"time_only_extensions.dkc","edits":[]},"name":"one nanosecond after the round time","now":"2023-08-23T16:49:24.000000001Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"34 bytes of content",""]],"content":{"length":34,"sha256":"1129768e195e2f1e50b7a6f926b6eebef120212c29b5642c8a662c503b2a9131"},"dkc":{"base":"time_only_extensions.dkc","edits":[]},"name":"a year after the round time","now":"2024-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",false,"relay: not yet: ERR_RELEASE_UNAVAILABLE","ERR_RELEASE_UNAVAILABLE"]],"dkc":{"base":"time_only_extensions.dkc","edits":[]},"name":"the source fails: relay: not yet: ERR_RELEASE_UNAVAILABLE","now":"2023-08-23T16:49:24Z","release":null,"release_requests":1,"result":"ERR_RELEASE_UNAVAILABLE","sink":"untouched","source_error":{"code":"ERR_RELEASE_UNAVAILABLE","text":"relay: not yet"},"text":"relay: not yet: ERR_RELEASE_UNAVAILABLE"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",false,"capsule: release source: relay: bad: ERR_RELEASE_INVALID: ERR_RELEASE_UNAVAILABLE","ERR_RELEASE_UNAVAILABLE"]],"dkc":{"base":"time_only_extensions.dkc","edits":[]},"name":"the source fails: relay: bad: ERR_RELEASE_INVALID","now":"2023-08-23T16:49:24Z","release":null,"release_requests":1,"result":"ERR_RELEASE_UNAVAILABLE","sink":"untouched","source_error":{"code":"ERR_RELEASE_INVALID","text":"relay: bad"},"text":"capsule: release source: relay: bad: ERR_RELEASE_INVALID: ERR_RELEASE_UNAVAILABLE"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",false,"capsule: release source: relay: round: ERR_ROUND_MISMATCH: ERR_RELEASE_UNAVAILABLE","ERR_RELEASE_UNAVAILABLE"]],"dkc":{"base":"time_only_extensions.dkc","edits":[]},"name":"the source fails: relay: round: ERR_ROUND_MISMATCH","now":"2023-08-23T16:49:24Z","release":null,"release_requests":1,"result":"ERR_RELEASE_UNAVAILABLE","sink":"untouched","source_error":{"code":"ERR_ROUND_MISMATCH","text":"relay: round"},"text":"capsule: release source: relay: round: ERR_ROUND_MISMATCH: ERR_RELEASE_UNAVAILABLE"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",false,"capsule: release source: connection refused: ERR_RELEASE_UNAVAILABLE","ERR_RELEASE_UNAVAILABLE"]],"dkc":{"base":"time_only_extensions.dkc","edits":[]},"name":"the source fails: connection refused","now":"2023-08-23T16:49:24Z","release":null,"release_requests":1,"result":"ERR_RELEASE_UNAVAILABLE","sink":"untouched","source_error":{"text":"connection refused"},"text":"capsule: release source: connection refused: ERR_RELEASE_UNAVAILABLE"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=646",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=448e134a13457c319cab7fceaf7ffa1f datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",false,"capsule: release source: connection refused: ERR_RELEASE_UNAVAILABLE","ERR_RELEASE_UNAVAILABLE"]],"dkc":{"base":"time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b6579010102503955e944a3c60cfa1fd6485e9693c77d0350448e134a13457c319cab7fceaf7ffa1f04667832353531390558203d5e4d51f21236ecff40d89c0adcf9aa325a24b91b46fd9d1afa482f54b2d2c606a10058202e97878078bae6358037a9c264f379a3cbe839f767d69836b0343f35657b2972","name":"time_and_key: the source fails after the credentials","now":"2023-08-23T15:59:24Z","release":null,"release_requests":1,"result":"ERR_RELEASE_UNAVAILABLE","sink":"untouched","source_error":{"text":"connection refused"},"text":"capsule: release source: connection refused: ERR_RELEASE_UNAVAILABLE"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=446",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ad4d676812b134ff8a3de263f77018b4 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",false,"provider: release for round 2000, expected 1000: ERR_ROUND_MISMATCH","ERR_ROUND_MISMATCH"]],"dkc":{"base":"time_only.dkc","edits":[]},"name":"the valid release of round 2000 for round 1000","now":"2023-08-23T15:59:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_ROUND_MISMATCH","sink":"untouched","text":"provider: release for round 2000, expected 1000: ERR_ROUND_MISMATCH"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",false,"capsule: age: the age header is malformed or truncated, or its MAC does not verify: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[459,1,"41"]]},"name":"OUTER_TIME_AGE with its MAC edited","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: age: the age header is malformed or truncated, or its MAC does not verify: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=481",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",false,"capsule: age: the age payload is truncated, has trailing data or fails STREAM authentication: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[15,1,"e1"],[656,1,""]]},"name":"OUTER_TIME_AGE one byte short","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: age: the age payload is truncated, has trailing data or fails STREAM authentication: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=483",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",false,"capsule: age: the age payload is truncated, has trailing data or fails STREAM authentication: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[15,1,"e3"],[657,0,"00"]]},"name":"OUTER_TIME_AGE with a byte more","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: age: the age payload is truncated, has trailing data or fails STREAM authentication: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=331",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",false,"capsule: age: the age header is malformed or truncated, or its MAC does not verify: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[15,1,"4b"],[506,151,""]]},"name":"OUTER_TIME_AGE cut after its header","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: age: the age header is malformed or truncated, or its MAC does not verify: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=339",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",false,"capsule: age: the age payload is truncated, has trailing data or fails STREAM authentication: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[15,1,"53"],[514,143,""]]},"name":"OUTER_TIME_AGE without its STREAM","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: age: the age payload is truncated, has trailing data or fails STREAM authentication: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=842",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=c75dfc8e9c576d1369910664df93693a datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 3 X25519 stanzas",""],[13,"open access layer",false,"capsule: age: agewrap: malformed X25519 stanza in INNER_ACCESS_AGE (one argument, a 32-byte ephemeral share not of low order, and a 32-byte body): ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_and_key_recipients.dkc","edits":[[508,87,"4a823bffd08c241c8059969fd752daec086755e5bbe500963f96fc510ddc3c98f94cf601cef8bdbc00fc5af77299271ee72358b03cc2f526c9b8506ccccfbf20eb9855be1881708ee013980e3cb599980b42e88dd764f6"],[796,43,"594dd42e5df1aea7b7b6669b737ec98d3bc27b962c33b527ea80b2007feb99e9f002e5d4e1363eb77b20c2"],[963,16,"2c47254c0d57384cb361f3466310b35c"]]},"identities":["AGE-SECRET-KEY-1GTTD39CF0L267FMJUPVDK9UJPTLP8Y8ZS4SNN0P0SQPFG4JD67KQVVK4AQ"],"name":"INNER_ACCESS_AGE with a share of low order","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: age: agewrap: malformed X25519 stanza in INNER_ACCESS_AGE (one argument, a 32-byte ephemeral share not of low order, and a 32-byte body): ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=803",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=c75dfc8e9c576d1369910664df93693a datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 3 X25519 stanzas",""],[13,"open access layer",false,"capsule: age: agewrap: malformed X25519 stanza in INNER_ACCESS_AGE (one argument, a 32-byte ephemeral share not of low order, and a 32-byte body): ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_and_key_recipients.dkc","edits":[[15,1,"23"],[508,432,"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"],[940,39,""]]},"identities":["AGE-SECRET-KEY-1GTTD39CF0L267FMJUPVDK9UJPTLP8Y8ZS4SNN0P0SQPFG4JD67KQVVK4AQ"],"name":"INNER_ACCESS_AGE with a share of 3 bytes","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: age: agewrap: malformed X25519 stanza in INNER_ACCESS_AGE (one argument, a 32-byte ephemeral share not of low order, and a 32-byte body): ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=940",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=c75dfc8e9c576d1369910664df93693a datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",false,"agewrap: INNER_ACCESS_AGE stanza 3 repeats an ephemeral share: ERR_POLICY_STRUCTURE_MISMATCH","ERR_POLICY_STRUCTURE_MISMATCH"]],"dkc":{"base":"time_and_key_recipients.dkc","edits":[[15,1,"ac"],[793,186,"994db83d098d6c53a0edbbf28d2c8b4f32cdfe0bf05d81340f9937ebd1bf5c51efe6f1d624e2ebe3430be4403ef0e8509b6ad6c7ab37b82aa39359d0caae5e6003e3f6cde6dddf0848257938466f7e0420734a5e29809288285fdde738f89f210f66f7ca0e45f09f58380fa1b7ed7885e3f36e53cb10f7df5ab0c7310d3ebdf9bd9c9b2a35ab515e73e754c08403094a13bd1fa0ed957a96e652ce6df53adc1221fd0f98f9e6854c87ba377972ddcb0dc378d7d0875931e8cc92"],[979,0,"57f695bd4276ff970472b7d30b781b4fd385efa7649c0f6bb423c7304aaf81095ebfad9b03e6ae77d2550ad0ad5be2a53b76d3056a9bab7b4c2aa23d60e93075a14bfa4aceae815034dc3521de2fbcdbd8fc17f29f36c647045fed9fd6dbe3ad46fc"]]},"identities":["AGE-SECRET-KEY-1GTTD39CF0L267FMJUPVDK9UJPTLP8Y8ZS4SNN0P0SQPFG4JD67KQVVK4AQ"],"name":"INNER_ACCESS_AGE with a share repeated","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ERR_POLICY_STRUCTURE_MISMATCH","sink":"untouched","text":"agewrap: INNER_ACCESS_AGE stanza 3 repeats an ephemeral share: ERR_POLICY_STRUCTURE_MISMATCH"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=940",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=c75dfc8e9c576d1369910664df93693a datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"2 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 4 X25519 stanzas",""],[13,"open access layer",false,"capsule: age: agewrap: one identity opens 2 INNER_ACCESS_AGE stanzas, want one per recipient: ERR_POLICY_STRUCTURE_MISMATCH","ERR_POLICY_STRUCTURE_MISMATCH"]],"dkc":{"base":"time_and_key_recipients.dkc","edits":[[15,1,"ac"],[793,186,"994db83d098d6c53a0f4bbcca8748f6a7ee3f0328d03820b338d57f9abb75d7d9ec9d9e25ac2ead21e29b0780c98b543bc57d4baab1fd95983b070c28dcb497404cedfd3faf7eb0f2c27586117536b34226e0e7b18c492c82d7ddea72ddfa2390f66f7ca0e6e94923f2b71afebfe58eff4ef7a469479f4bd5e91d8275317a5fc87d6bb2b6ca75e5e02da5ee1ae64545213bd1fa0ed957a96e652ce6df53adc1221fd0f98f9e6854c87ba377972ddcb0dc378d7d0875931e8cc92"],[979,0,"57f695bd4276ff970472b7d30b781b4fd385efa7649c0f6bb423c7304aaf81095ebfad9b03e6ae77d2550ad0ad5be2a53b76d3056a9bab7b4c2aa23d60e93075a14bfa4aceae815034dc3521de2fbcdbd8fc50f16ff68f9f4c49495adce3320beabf"]]},"identities":["AGE-SECRET-KEY-1DPM6CQMQV3665FK762HTVC37XAY6X99MM4YLJ9J0J2DQD7K63GCSG5TMCK","AGE-SECRET-KEY-1GTTD39CF0L267FMJUPVDK9UJPTLP8Y8ZS4SNN0P0SQPFG4JD67KQVVK4AQ"],"name":"two identities, one of them opens two stanzas","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ERR_POLICY_STRUCTURE_MISMATCH","sink":"untouched","text":"capsule: age: agewrap: one identity opens 2 INNER_ACCESS_AGE stanzas, want one per recipient: ERR_POLICY_STRUCTURE_MISMATCH"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=940",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=c75dfc8e9c576d1369910664df93693a datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"2 identities to try",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 4 X25519 stanzas",""],[13,"open access layer",false,"capsule: age: agewrap: one identity opens 2 INNER_ACCESS_AGE stanzas, want one per recipient: ERR_POLICY_STRUCTURE_MISMATCH","ERR_POLICY_STRUCTURE_MISMATCH"]],"dkc":{"base":"time_and_key_recipients.dkc","edits":[[15,1,"ac"],[793,186,"994db83d098d6c53a0f4bbcca8748f6a7ee3f0328d03820b338d57f9abb75d7d9ec9d9e25ac2ead21e29b0780c98b543bc57d4baab1fd95983b070c28dcb497404cedfd3faf7eb0f2c27586117536b34226e0e7b18c492c82d7ddea72ddfa2390f66f7ca0e6e94923f2b71afebfe58eff4ef7a469479f4bd5e91d8275317a5fc87d6bb2b6ca75e5e02da5ee1ae64545213bd1fa0ed957a96e652ce6df53adc1221fd0f98f9e6854c87ba377972ddcb0dc378d7d0875931e8cc92"],[979,0,"57f695bd4276ff970472b7d30b781b4fd385efa7649c0f6bb423c7304aaf81095ebfad9b03e6ae77d2550ad0ad5be2a53b76d3056a9bab7b4c2aa23d60e93075a14bfa4aceae815034dc3521de2fbcdbd8fc50f16ff68f9f4c49495adce3320beabf"]]},"identities":["AGE-SECRET-KEY-1GTTD39CF0L267FMJUPVDK9UJPTLP8Y8ZS4SNN0P0SQPFG4JD67KQVVK4AQ","AGE-SECRET-KEY-1GTTD39CF0L267FMJUPVDK9UJPTLP8Y8ZS4SNN0P0SQPFG4JD67KQVVK4AQ"],"name":"one identity opens two stanzas, given twice","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ERR_POLICY_STRUCTURE_MISMATCH","sink":"untouched","text":"capsule: age: agewrap: one identity opens 2 INNER_ACCESS_AGE stanzas, want one per recipient: ERR_POLICY_STRUCTURE_MISMATCH"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=356",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",false,"capsule: CONTROL_CBOR: codec: offset 1: map without a type tag and a schema version: ERR_NON_CANONICAL_CBOR","ERR_NON_CANONICAL_CBOR"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[15,1,"64"],[514,17,"7d1c87d4db888735f498981b95d218f01d"],[531,126,""]]},"name":"CONTROL_CBOR an empty map","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_NON_CANONICAL_CBOR","sink":"untouched","text":"capsule: CONTROL_CBOR: codec: offset 1: map without a type tag and a schema version: ERR_NON_CANONICAL_CBOR"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=447",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",false,"capsule: CONTROL_CBOR: key 3 is missing: ERR_NON_CANONICAL_CBOR","ERR_NON_CANONICAL_CBOR"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[15,1,"bf"],[514,1,"79"],[538,84,"6c63eee0efae67673854ed50e370c76e524b15656cfd5bbd6e2cdcc030c0e084f8f398b7e8b4ab3a0c522ab778b581c9273b2510f5008525bd9cae6d529cee556826234a8de2bd83a15db1015302742b21102bf6"],[622,35,""]]},"name":"CONTROL_CBOR without key 3","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_NON_CANONICAL_CBOR","sink":"untouched","text":"capsule: CONTROL_CBOR: key 3 is missing: ERR_NON_CANONICAL_CBOR"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",false,"capsule: CONTROL_CBOR: codec: datekeys-control schema version 7, want 1: ERR_UNSUPPORTED_VERSION","ERR_UNSUPPORTED_VERSION"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[534,1,"47"],[641,16,"a32937b28c0e8814c1608320c720b15b"]]},"name":"CONTROL_CBOR of version 7","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_UNSUPPORTED_VERSION","sink":"untouched","text":"capsule: CONTROL_CBOR: codec: datekeys-control schema version 7, want 1: ERR_UNSUPPORTED_VERSION"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=484",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",false,"capsule: CONTROL_CBOR: key 9 is not defined: ERR_NON_CANONICAL_CBOR","ERR_NON_CANONICAL_CBOR"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[15,1,"e4"],[514,1,"7b"],[538,32,"0d759583f8d85b62bab2485d6f4b56ace786e9497473d2a152b317999fdcd60c"],[641,16,"8352145648fa77eb7a61ac23c8f8b563"],[657,0,"858e"]]},"name":"CONTROL_CBOR with an unknown key","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_NON_CANONICAL_CBOR","sink":"untouched","text":"capsule: CONTROL_CBOR: key 9 is not defined: ERR_NON_CANONICAL_CBOR"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=481",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",false,"capsule: CONTROL_CBOR: key 3: codec: offset 59: a byte string of 31 bytes outside 32..32: ERR_NON_CANONICAL_CBOR","ERR_NON_CANONICAL_CBOR"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[15,1,"e1"],[538,35,"b5684fb0adf45794d5a5ae1cae20759d124aa71b299ab64fcbb4d45ec1ad2a8efe2a24"],[604,52,"43afd30432d18f9fe96f6707533ec2964f0e457e36dbd13d337412b00d425ec7ed94f57696ff1b230c0dfc029316aecd04cda141"],[656,1,""]]},"name":"CONTROL_CBOR with a payload_identity of 31 bytes","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_NON_CANONICAL_CBOR","sink":"untouched","text":"capsule: CONTROL_CBOR: key 3: codec: offset 59: a byte string of 31 bytes outside 32..32: ERR_NON_CANONICAL_CBOR"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=494",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=3ab2c06d482609a9c7ae92f672599883 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",false,"capsule: CONTROL_CBOR: key 7: padding code 0 is not defined: ERR_NON_CANONICAL_CBOR","ERR_NON_CANONICAL_CBOR"]],"dkc":{"base":"format2_time_only_extensions.dkc","edits":[[652,17,"e1931958b9bfe8ae998b8e1cf1323c7743"]]},"name":"format 2: CONTROL_CBOR with padding 0","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_NON_CANONICAL_CBOR","sink":"untouched","text":"capsule: CONTROL_CBOR: key 7: padding code 0 is not defined: ERR_NON_CANONICAL_CBOR"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=505",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",false,"capsule: CONTROL_CBOR: extension org.example.lock v1: ERR_EXTENSION_CRITICAL_UNKNOWN","ERR_EXTENSION_CRITICAL_UNKNOWN"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[15,1,"f9"],[514,1,"7b"],[538,32,"3d6ecb46fe588154ef057ebb2941edbfd2ce78ee33a929b59227c9f5c040e09e"],[605,52,"2af1a642ce928aa0247a1e5f23de9f044e466530b1d23e7d57b1b77c4b5fc5a29de873f8fa3eeefabd8be091532c7f2126b31337"],[657,0,"8c707a7ea3684726e3830b6a395a996dc8e6bc559cba73"]]},"name":"CONTROL_CBOR with an unknown critical extension","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_EXTENSION_CRITICAL_UNKNOWN","sink":"untouched","text":"capsule: CONTROL_CBOR: extension org.example.lock v1: ERR_EXTENSION_CRITICAL_UNKNOWN"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=509",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"34 bytes of content",""]],"content":{"length":34,"sha256":"1129768e195e2f1e50b7a6f926b6eebef120212c29b5642c8a662c503b2a9131"},"dkc":{"base":"time_only_extensions.dkc","edits":[[15,1,"fd"],[514,1,"7b"],[538,32,"7230883407ec9897c6312f17f893fc6a23a19e1114eda2831b10fa690cea3d78"],[605,1,"2a"],[622,35,"466530b1d23e7a947ddc09a58ea2fc97e275bbef2aeab9a388f1da3c41090f85b1167d"],[657,0,"4803181ea97e467c140761c599d03a937b8129a3a90cbe1a5c2c25"]]},"extensions":[{"id":"org.example.lock","valid_data":"6f6b","version":1}],"name":"CONTROL_CBOR with a known critical extension","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1, 1 unusable noncritical extensions",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR, 1 unusable noncritical extensions",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"34 bytes of content",""]],"content":{"length":34,"sha256":"1129768e195e2f1e50b7a6f926b6eebef120212c29b5642c8a662c503b2a9131"},"dkc":{"base":"time_only_extensions.dkc","edits":[]},"name":"every extension rejected: PUBLIC_HEADER and CONTROL_CBOR","now":"2023-08-23T16:49:24Z","reject_all":"not today","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok","unusable":{"control":[["org.example.note",2,"extension org.example.note v2: data: not today: ERR_EXTENSION_DATA_INVALID"]],"header":[["org.example.label",1,"extension org.example.label v1: data: not today: ERR_EXTENSION_DATA_INVALID"]]}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=494",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=3ab2c06d482609a9c7ae92f672599883 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1, 1 unusable noncritical extensions",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR, 1 unusable noncritical extensions",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 34, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 34",""],[18,"commit",true,"34 bytes of content",""]],"content":{"length":34,"sha256":"1129768e195e2f1e50b7a6f926b6eebef120212c29b5642c8a662c503b2a9131"},"dkc":{"base":"format2_time_only_extensions.dkc","edits":[]},"name":"format 2: every extension rejected","now":"2023-08-23T16:49:24Z","reject_all":"not today","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok","unusable":{"control":[["org.example.note",2,"extension org.example.note v2: data: not today: ERR_EXTENSION_DATA_INVALID"]],"header":[["org.example.label",1,"extension org.example.label v1: data: not today: ERR_EXTENSION_DATA_INVALID"]]}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",false,"capsule: header_binding does not match PRELUDE || PUBLIC_HEADER: ERR_HEADER_BINDING","ERR_HEADER_BINDING"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[11,6,"79000001e2a5"],[137,38,""]]},"name":"PUBLIC_HEADER without its extension, sealed again","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_HEADER_BINDING","sink":"untouched","text":"capsule: header_binding does not match PRELUDE || PUBLIC_HEADER: ERR_HEADER_BINDING"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the age header is malformed or truncated, or its MAC does not verify: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[786,1,"41"]]},"name":"PAYLOAD_AGE with its MAC edited","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: the age header is malformed or truncated, or its MAC does not verify: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the age header is malformed or truncated, or its MAC does not verify: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[830,61,""]]},"name":"PAYLOAD_AGE without its nonce","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: the age header is malformed or truncated, or its MAC does not verify: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the age payload is truncated, has trailing data or fails STREAM authentication: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_only_extensions.dkc","edits":[[841,50,""]]},"name":"PAYLOAD_AGE without its STREAM","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: the age payload is truncated, has trailing data or fails STREAM authentication: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=446",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ad4d676812b134ff8a3de263f77018b4 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the age payload is truncated, has trailing data or fails STREAM authentication: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_only.dkc","edits":[[78798,1,""]]},"name":"time_only cut in its second STREAM chunk","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: the age payload is truncated, has trailing data or fails STREAM authentication: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=446",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ad4d676812b134ff8a3de263f77018b4 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the age payload is truncated, has trailing data or fails STREAM authentication: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_only.dkc","edits":[[58799,1,"fb"]]},"name":"time_only with its first STREAM chunk edited","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: the age payload is truncated, has trailing data or fails STREAM authentication: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: writing the plaintext: disk full: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"time_only_extensions.dkc","edits":[]},"name":"time_only_extensions: the output fails","now":"2023-08-23T16:49:24Z","output_fail":true,"release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: writing the plaintext: disk full: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=494",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=3ab2c06d482609a9c7ae92f672599883 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 34, padding reforzado, P = 256",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: writing the plaintext: disk full: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format2_time_only_extensions.dkc","edits":[]},"name":"format2_time_only_extensions: the output fails","now":"2023-08-23T16:49:24Z","output_fail":true,"release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: writing the plaintext: disk full: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=c8cfc53d45c879da916edddf71f3bddd datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 78000, padding reforzado, P = 79872",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: writing the plaintext: disk full: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format2_time_only.dkc","edits":[]},"name":"format2_time_only: the output fails","now":"2023-08-23T15:59:24Z","output_fail":true,"release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: writing the plaintext: disk full: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=494",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=3ab2c06d482609a9c7ae92f672599883 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 34, padding reforzado, P = 256",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the plaintext is 34 bytes, shorter than P = 256: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format2_time_only_extensions.dkc","edits":[[887,16,"d6ce427933325eeabe9d771bfc4a64ec"],[903,222,""]]},"name":"format 2: PAYLOAD_AGE holds the content only","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: the plaintext is 34 bytes, shorter than P = 256: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=494",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=3ab2c06d482609a9c7ae92f672599883 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 34, padding reforzado, P = 256",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the plaintext is 255 bytes, shorter than P = 256: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format2_time_only_extensions.dkc","edits":[[1108,16,"e0efdea667865b5fdf9dd98e76c33d25"],[1124,1,""]]},"name":"format 2: PAYLOAD_AGE holds the content and P - L - 1 zeros","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: the plaintext is 255 bytes, shorter than P = 256: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=494",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=3ab2c06d482609a9c7ae92f672599883 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 34, padding reforzado, P = 256",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the plaintext is longer than P = 256: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format2_time_only_extensions.dkc","edits":[[1109,16,"1ad408c1aab4dbc1c0cb3b7b503e070a"],[1125,0,"47"]]},"name":"format 2: PAYLOAD_AGE holds the content and P - L + 1 zeros","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: the plaintext is longer than P = 256: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=494",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=3ab2c06d482609a9c7ae92f672599883 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 34, padding reforzado, P = 256",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: byte 255 of the plaintext is padding and is not zero: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format2_time_only_extensions.dkc","edits":[[1108,17,"a9c4c81d0051c53edf9b90a846b2fd5e9f"]]},"name":"format 2: PAYLOAD_AGE holds the content, zeros and a last byte 1","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: byte 255 of the plaintext is padding and is not zero: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=494",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=3ab2c06d482609a9c7ae92f672599883 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 34, padding reforzado, P = 256",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: byte 34 of the plaintext is padding and is not zero: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format2_time_only_extensions.dkc","edits":[[887,1,"41"],[1109,16,"8549de5d26df5c3a94156d68743bcc26"]]},"name":"format 2: PAYLOAD_AGE holds the content, a byte 2 and zeros","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: byte 34 of the plaintext is padding and is not zero: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=494",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=3ab2c06d482609a9c7ae92f672599883 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 34, padding reforzado, P = 256",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the plaintext is 0 bytes, shorter than P = 256: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format2_time_only_extensions.dkc","edits":[[853,16,"dfa522f900a10cfe909633303bac336f"],[869,256,""]]},"name":"format 2: PAYLOAD_AGE holds no plaintext","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: the plaintext is 0 bytes, shorter than P = 256: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=494",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=3ab2c06d482609a9c7ae92f672599883 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 34, padding reforzado, P = 256",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the plaintext is 17 bytes, shorter than P = 256: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format2_time_only_extensions.dkc","edits":[[870,16,"3a947dd8c536b0540c936289143f69bd"],[886,239,""]]},"name":"format 2: PAYLOAD_AGE holds half the content","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: the plaintext is 17 bytes, shorter than P = 256: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v2, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=494",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=3ab2c06d482609a9c7ae92f672599883 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 34, padding reforzado, P = 256",""],[17,"open payload",true,"payload authenticated; 256 bytes of plaintext, zero after byte 34",""],[18,"commit",true,"34 bytes of content",""]],"content":{"length":34,"sha256":"eb142b0cae0baa72a767ebc0823d1be94e14c5bfc52d8e417fc4302fceb6240c"},"dkc":{"base":"format2_time_only_extensions.dkc","edits":[[853,34,"b1e991f498ae8f4202ae4701f3120574343ad50239a1224263e7820b0a73f8d00a38"],[1109,16,"6ad68403ed2f1afa02e62797438f271b"]]},"name":"format 2: PAYLOAD_AGE holds P zeros","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v1, PUBLIC_HEADER_LEN=159, SEALED_CONTROL_LEN=482",""],[3,"public header",true,"159 bytes",""],[4,"header validation",true,"capsule_id=4286085c21ca34d1a71e649326a4a0f6 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MjAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 2000, unlock at 2023-08-23T16:49:24Z",""],[8,"tlock stanza",true,"round 2000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 2000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered",""],[17,"open payload",true,"payload authenticated",""],[18,"commit",true,"35 bytes of content",""]],"content":{"length":35,"sha256":"6b0c03edcb46f186bae89a21d362db3bf637f8f2327c24c208c5a05c9a0bbde2"},"dkc":{"base":"time_only_extensions.dkc","edits":[[875,16,"699f68db253e03a012853d9acd3e29c6"],[891,0,"f0"]]},"name":"format 1: PAYLOAD_AGE holds the content and a zero","now":"2023-08-23T16:49:24Z","release":{"round":2000,"signature":"b6cb8f482a0b15d45936a4c4ea08e98a087e71787caee3f4d07a8a9843b1bc5423c6b3c22f446488b3137eaca799c77e"},"release_requests":1,"result":"ok","sink":"untouched","text":"ok"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the plaintext is 5 bytes, shorter than P = 768: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_single.dkc","edits":[[784,16,"74918f53af31623f7fa5ff5c8390582c"],[800,763,""]]},"name":"format 3: a plaintext of 5 bytes","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: the plaintext is 5 bytes, shorter than P = 768: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the plaintext is 100 bytes, shorter than P = 768: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_single.dkc","edits":[[879,16,"0c5cbb4cb313bb53ecd7c9968fecc687"],[895,668,""]]},"name":"format 3: a plaintext of 100 bytes","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: the plaintext is 100 bytes, shorter than P = 768: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the plaintext is 657 bytes, shorter than P = 768: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_single.dkc","edits":[[1436,16,"b828ca9d9efada0f6ab45b85f4857c22"],[1452,111,""]]},"name":"format 3: a plaintext cut inside the file","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"aborted","text":"capsule: PAYLOAD_AGE: the plaintext is 657 bytes, shorter than P = 768: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the plaintext is longer than P = 768: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_single.dkc","edits":[[1547,16,"72e4a9fdeb035b6d62d14068c954da25"],[1563,0,"69"]]},"name":"format 3: a plaintext of P + 1 bytes","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"aborted","text":"capsule: PAYLOAD_AGE: the plaintext is longer than P = 768: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: byte 767 of the plaintext is padding and is not zero: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_single.dkc","edits":[[1546,17,"2751618259652c6abdfb5e0afe3572a97f"]]},"name":"format 3: the last padding byte 1","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"aborted","text":"capsule: PAYLOAD_AGE: byte 767 of the plaintext is padding and is not zero: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the plaintext is 767 bytes, shorter than P = 768: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_single.dkc","edits":[[1546,16,"5cca05d7ec72139a538923f3a4aa27e9"],[1562,1,""]]},"name":"format 3: a plaintext of P - 1 bytes","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"aborted","text":"capsule: PAYLOAD_AGE: the plaintext is 767 bytes, shorter than P = 768: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the plaintext is 769 bytes, not P = 768: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_single.dkc","edits":[[1361,8,"c0e2190f2e253b47"],[1547,16,"72b5735a3b849b6437dc7667da84ed47"],[1563,0,"8c"]]},"name":"format 3: an invalid head and a plaintext of P + 1 bytes","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: the plaintext is 769 bytes, not P = 768: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: the plaintext is 767 bytes, not P = 768: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_single.dkc","edits":[[1361,8,"c0e2190f2e253b47"],[1546,16,"8b05d692dffe8cef1b43cd15a5872cc5"],[1562,1,""]]},"name":"format 3: an invalid head and a plaintext of P - 1 bytes","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: PAYLOAD_AGE: the plaintext is 767 bytes, not P = 768: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: head: file 1: R6: segment 1: CON is a reserved device name: ERR_HEAD_INVALID","ERR_HEAD_INVALID"]],"dkc":{"base":"format3_single.dkc","edits":[[1361,8,"c0e2190f2e253b47"],[1547,16,"7b563f7bb689570555139420c31fba30"]]},"name":"format 3: an invalid head and a plaintext of P bytes","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_HEAD_INVALID","sink":"untouched","text":"capsule: head: file 1: R6: segment 1: CON is a reserved device name: ERR_HEAD_INVALID"},
Stage 5b: the opening evaluates the security area as Go OpenOptions.evaluator is now evaluateSecurityInput, so that opening a capsule of format 3 gives the verdicts of Go at step 17: the signature of alg 1 and every verdict of the form, with the author keys of the options, and the signature of alg 2 and the seal of seal_type 2 not evaluated until a reader of CMS is given. notEvaluated stays for a caller that shows no verdict. tool/open_go_vectors.go records the verdicts of each capsule of format 3 that opens, with their lines, the key and the label of alg 1 and the earliest valid seal, and opens the fixtures signed with alg 1 also with their author key saved, F3, and with another, F4. Every case of open_cases.json and every case of the mutation corpus that opens gives those verdicts and lines: format3_signed, format3_unsigned, format3_signature_unsupported, format3_seal_unsupported, format3_security_v2 and format3_note all of them, and format3_signed_cms and format3_sealed the part that needs no reader of CMS. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 days ago
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",true,"payload authenticated; BODY of 659 bytes, 1 files, area of 512 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_single.dkc","edits":[]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format 3: BODY and its padding","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["Sin firma de autor."],"seal":"S0","signature":"F0"}},
Stage 4c: the vectors of Go for the head, the note and the opening tool/mutation_go_texts.go ports scripts/mutation-go-texts.go of datekeys-ts over the synced testdata of this repository, the tag spec-v0.11: it replays every case of the mutation corpus as the testkit of the reference does and writes the text of capsule.Open and its checks, with the detail of each step, in mutation_texts.json. Where Go and the corpus disagree on a code or a step it would say so in the case; Go at c531e93 and at the tag spec-v0.11 agree with all 210 cases, and give the same file, byte for byte. tool/open_go_vectors.go runs in an export of datekeys-go, since it uses internal/testkit, internal/cbortest and internal/inspectview, and writes: - open_cases.json: capsule.Open on every fixture with each of its credentials, and 117 openings of edited fixtures or with other options at each step that the corpus does not reach: the frame, the fields, the extensions and the bindings of a .dkk at step 9.a, the clock and the failures of the release source, the age headers of steps 11 and 17, a malformed X25519 stanza in INNER_ACCESS_AGE, CONTROL_CBOR and the BODY of format 3 sealed again, the sinks and the output that fail, the refusal of Accept and the unusable extensions of each object, with the text, the step, the checks, the release requests, the state of the sink and the content or the files; - open_heads.json: capsule.DecodeHead and EncodeHead of heads of a fixed seed, valid and broken in each layer of spec §69.1; - open_notes.json: extension.CheckNote, Note, Header.UnusableNote and extension.Standard with a note; - open_inspect.json: the text of capsule.Inspect for each of the 5110 mutations of inspect_differential.json, where Go and the file also agree, and the exact output of datekeys inspect -json with public notes; - open_vectors.g.dart: seven small fixtures, their records and a part of each file, for the tests that run compiled to JavaScript. The edited capsules are sealed again with the file keys and the nonces of the fixtures, as the testkit does, so the output is the same on every run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 days ago
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 682, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: head: extension org.example.lock v1: ERR_EXTENSION_CRITICAL_UNKNOWN","ERR_EXTENSION_CRITICAL_UNKNOWN"]],"dkc":{"base":"format3_single.dkc","edits":[[576,19,"7b8c2efe4b7a2d7ea69de72a43aabe04cd5555"],[790,1,"31"],[1303,1,"03"],[1416,45,"a1b989a40e4c22c3f33c0fef9da3dd3aea40af5dcccd2df210cee9525f83c94c95d2680457779b3222bb30cfa1"],[1547,16,"9f5115cc02057d2161ab7ccc1ab8eae3"]]},"name":"format 3: a head with an unknown critical extension","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_EXTENSION_CRITICAL_UNKNOWN","sink":"untouched","text":"capsule: head: extension org.example.lock v1: ERR_EXTENSION_CRITICAL_UNKNOWN"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 682, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: head: extension org.example.lock v1: ERR_EXTENSION_CRITICAL_UNKNOWN","ERR_EXTENSION_CRITICAL_UNKNOWN"]],"dkc":{"base":"format3_single.dkc","edits":[[576,19,"7b8c2efe4b7a2d7ea69de72a43aabe04cd5555"],[790,1,"31"],[1303,1,"03"],[1416,45,"a1b989a40e4c22c3f33c0fef9da3dd3aea40af5dcccd2df210cee9525f83c94c95d2680457779b3222bb30cfa1"],[1546,17,"279f972866a433092fd0b09ccc8de7de0e"]]},"name":"format 3: a head with an unknown critical extension and a padding byte 1","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_EXTENSION_CRITICAL_UNKNOWN","sink":"untouched","text":"capsule: head: extension org.example.lock v1: ERR_EXTENSION_CRITICAL_UNKNOWN"},
Stage 5b: the opening evaluates the security area as Go OpenOptions.evaluator is now evaluateSecurityInput, so that opening a capsule of format 3 gives the verdicts of Go at step 17: the signature of alg 1 and every verdict of the form, with the author keys of the options, and the signature of alg 2 and the seal of seal_type 2 not evaluated until a reader of CMS is given. notEvaluated stays for a caller that shows no verdict. tool/open_go_vectors.go records the verdicts of each capsule of format 3 that opens, with their lines, the key and the label of alg 1 and the earliest valid seal, and opens the fixtures signed with alg 1 also with their author key saved, F3, and with another, F4. Every case of open_cases.json and every case of the mutation corpus that opens gives those verdicts and lines: format3_signed, format3_unsigned, format3_signature_unsupported, format3_seal_unsupported, format3_security_v2 and format3_note all of them, and format3_signed_cms and format3_sealed the part that needs no reader of CMS. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 days ago
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 686, padding reforzado, P = 768",""],[17,"open payload",true,"payload authenticated; BODY of 686 bytes, 1 files, area of 512 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_single.dkc","edits":[[576,19,"7f8c2efe4d800642f0fbe47d78dfd92cd61891"],[790,1,"35"],[1303,1,"03"],[1416,49,"a1b988a40e4c22c3f33c0fef9da3dd3aea40af5dcccd2db83dcde33a548adb0894977e0c12279f2d63af3e92cadf86fc1f"],[1547,16,"cf168825f2544c816b223eaab378614b"]]},"extensions":[{"id":"org.example.lock","valid_data":"6f6b","version":1}],"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format 3: a head with a known critical extension","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["Sin firma de autor."],"seal":"S0","signature":"F0"}},
Stage 4c: the vectors of Go for the head, the note and the opening tool/mutation_go_texts.go ports scripts/mutation-go-texts.go of datekeys-ts over the synced testdata of this repository, the tag spec-v0.11: it replays every case of the mutation corpus as the testkit of the reference does and writes the text of capsule.Open and its checks, with the detail of each step, in mutation_texts.json. Where Go and the corpus disagree on a code or a step it would say so in the case; Go at c531e93 and at the tag spec-v0.11 agree with all 210 cases, and give the same file, byte for byte. tool/open_go_vectors.go runs in an export of datekeys-go, since it uses internal/testkit, internal/cbortest and internal/inspectview, and writes: - open_cases.json: capsule.Open on every fixture with each of its credentials, and 117 openings of edited fixtures or with other options at each step that the corpus does not reach: the frame, the fields, the extensions and the bindings of a .dkk at step 9.a, the clock and the failures of the release source, the age headers of steps 11 and 17, a malformed X25519 stanza in INNER_ACCESS_AGE, CONTROL_CBOR and the BODY of format 3 sealed again, the sinks and the output that fail, the refusal of Accept and the unusable extensions of each object, with the text, the step, the checks, the release requests, the state of the sink and the content or the files; - open_heads.json: capsule.DecodeHead and EncodeHead of heads of a fixed seed, valid and broken in each layer of spec §69.1; - open_notes.json: extension.CheckNote, Note, Header.UnusableNote and extension.Standard with a note; - open_inspect.json: the text of capsule.Inspect for each of the 5110 mutations of inspect_differential.json, where Go and the file also agree, and the exact output of datekeys inspect -json with public notes; - open_vectors.g.dart: seven small fixtures, their records and a part of each file, for the tests that run compiled to JavaScript. The edited capsules are sealed again with the file keys and the nonces of the fixtures, as the testkit does, so the output is the same on every run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 days ago
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 686, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: head: extension org.example.lock v1: data: data 6e6f is not 6f6b: ERR_EXTENSION_DATA_INVALID","ERR_EXTENSION_DATA_INVALID"]],"dkc":{"base":"format3_single.dkc","edits":[[576,19,"7f8c2efe4d800642f0fbe47d78dfd92cd61891"],[790,1,"35"],[1303,1,"03"],[1416,49,"a1b988a40e4c22c3f33c0fef9da3dd3aea40af5dcccd2db83dcce73a548adb0894977e0c12279f2d63af3e92cadf86fc1f"],[1547,16,"2403372c03ed1f57cc5f54318e5210a8"]]},"extensions":[{"id":"org.example.lock","valid_data":"6f6b","version":1}],"name":"format 3: a head with a known critical extension with invalid data","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_EXTENSION_DATA_INVALID","sink":"untouched","text":"capsule: head: extension org.example.lock v1: data: data 6e6f is not 6f6b: ERR_EXTENSION_DATA_INVALID"},
Stage 5b: the opening evaluates the security area as Go OpenOptions.evaluator is now evaluateSecurityInput, so that opening a capsule of format 3 gives the verdicts of Go at step 17: the signature of alg 1 and every verdict of the form, with the author keys of the options, and the signature of alg 2 and the seal of seal_type 2 not evaluated until a reader of CMS is given. notEvaluated stays for a caller that shows no verdict. tool/open_go_vectors.go records the verdicts of each capsule of format 3 that opens, with their lines, the key and the label of alg 1 and the earliest valid seal, and opens the fixtures signed with alg 1 also with their author key saved, F3, and with another, F4. Every case of open_cases.json and every case of the mutation corpus that opens gives those verdicts and lines: format3_signed, format3_unsigned, format3_signature_unsupported, format3_seal_unsupported, format3_security_v2 and format3_note all of them, and format3_signed_cms and format3_sealed the part that needs no reader of CMS. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 days ago
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 684, padding reforzado, P = 768",""],[17,"open payload",true,"payload authenticated; BODY of 684 bytes, 1 files, area of 512 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_single.dkc","edits":[[576,19,"7d8c2efe4cfd1960cb4c66d4dd44cc98513773"],[790,1,"33"],[1303,1,"03"],[1416,47,"a0b988a4114c22c3f33c0fef9da3dd3aea58a159a6cf2efb07eae71e5ac6de4d83966848126bda3122ac3e85c495e3"],[1547,16,"39fb453454e8e7194ee37ae529352258"]]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format 3: a head with a noncritical extension, rejected","now":"2023-08-23T15:59:24Z","reject_all":"not today","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","unusable":{"head":[["org.example.tag",3,"extension org.example.tag v3: data: not today: ERR_EXTENSION_DATA_INVALID"]]},"verdicts":{"lines":["Sin firma de autor."],"seal":"S0","signature":"F0"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 592, padding reforzado, P = 768",""],[17,"open payload",true,"payload authenticated; BODY of 592 bytes, 0 files, area of 512 bytes",""],[18,"commit",true,"0 files",""]],"dkc":{"base":"format3_single.dkc","edits":[[576,19,"818c2e034f03f32315ab6327137ae7c05afaae"],[790,1,"fd"],[1356,82,"d03387b095a3cb3e4232383d49c25e43640038a1bd1e086258fd0e10c22a7f0c3ee8ac9013d1cd30ebe6b98ca9b021fce8b140795d23b17ddf25159fa7382ba47e2350a4dd59778ef0d3b15fc42cc03ea7cc"],[1547,16,"b71a670e002a9aa88589a5bd9f8afe50"]]},"files":[],"name":"format 3: a head without files and an empty CONTENT","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["Sin firma de autor."],"seal":"S0","signature":"F0"}},
Stage 4c: the vectors of Go for the head, the note and the opening tool/mutation_go_texts.go ports scripts/mutation-go-texts.go of datekeys-ts over the synced testdata of this repository, the tag spec-v0.11: it replays every case of the mutation corpus as the testkit of the reference does and writes the text of capsule.Open and its checks, with the detail of each step, in mutation_texts.json. Where Go and the corpus disagree on a code or a step it would say so in the case; Go at c531e93 and at the tag spec-v0.11 agree with all 210 cases, and give the same file, byte for byte. tool/open_go_vectors.go runs in an export of datekeys-go, since it uses internal/testkit, internal/cbortest and internal/inspectview, and writes: - open_cases.json: capsule.Open on every fixture with each of its credentials, and 117 openings of edited fixtures or with other options at each step that the corpus does not reach: the frame, the fields, the extensions and the bindings of a .dkk at step 9.a, the clock and the failures of the release source, the age headers of steps 11 and 17, a malformed X25519 stanza in INNER_ACCESS_AGE, CONTROL_CBOR and the BODY of format 3 sealed again, the sinks and the output that fail, the refusal of Accept and the unusable extensions of each object, with the text, the step, the checks, the release requests, the state of the sink and the content or the files; - open_heads.json: capsule.DecodeHead and EncodeHead of heads of a fixed seed, valid and broken in each layer of spec §69.1; - open_notes.json: extension.CheckNote, Note, Header.UnusableNote and extension.Standard with a note; - open_inspect.json: the text of capsule.Inspect for each of the 5110 mutations of inspect_differential.json, where Go and the file also agree, and the exact output of datekeys inspect -json with public notes; - open_vectors.g.dart: seven small fixtures, their records and a part of each file, for the tests that run compiled to JavaScript. The edited capsules are sealed again with the file keys and the nonces of the fixtures, as the testkit does, so the output is the same on every run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 days ago
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 593, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: BODY: the files end at byte 0 of a content of 1 bytes: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_single.dkc","edits":[[576,19,"808c2e83cec1fcb28253a4d2c5ace076980920"],[790,1,"fd"],[1356,82,"d03387b095a3cb3e4232383d49c25e43640038a1bd1e086258fd0e10c22a7f0c3ee8ac9013d1cd30ebe6b98ca9b021fce8b140795d23b17ddf25159fa7382ba47e2350a4dd59778ef0d3b15fc42cc03ea7cc"],[1547,16,"b71a670e002a9aa88589a5bd9f8afe50"]]},"name":"format 3: a head without files and a CONTENT of 1 byte","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","text":"capsule: BODY: the files end at byte 0 of a content of 1 bytes: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 704, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: file 2: its SHA-256 is not the one of the head: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_single.dkc","edits":[[576,19,"118c2eb3165b36b8035bad133ea8ed5d5aa525"],[790,1,"23"],[1357,126,"dc71d99ee28323592e5c5924b17355605818fce473572b9984fefcf155391c2bb76ea7f4f634ee03b5ce2955565bc06d8450dc5d46d353ab5d619ea33a3da7663954fcfdbf447a0caa0b8165f09d87d70315c6fdea32b6472516d161a9ab632a714aa9cc97308dca9b8db766de5b59c2f4f4772578c674d2b454482dd501"],[1547,16,"5741c612b8e6797238f933b7103364f7"]]},"name":"format 3: two files, the second of another content","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"aborted","text":"capsule: PAYLOAD_AGE: file 2: its SHA-256 is not the one of the head: ERR_INTEGRITY"},
Stage 5b: the opening evaluates the security area as Go OpenOptions.evaluator is now evaluateSecurityInput, so that opening a capsule of format 3 gives the verdicts of Go at step 17: the signature of alg 1 and every verdict of the form, with the author keys of the options, and the signature of alg 2 and the seal of seal_type 2 not evaluated until a reader of CMS is given. notEvaluated stays for a caller that shows no verdict. tool/open_go_vectors.go records the verdicts of each capsule of format 3 that opens, with their lines, the key and the label of alg 1 and the earliest valid seal, and opens the fixtures signed with alg 1 also with their author key saved, F3, and with another, F4. Every case of open_cases.json and every case of the mutation corpus that opens gives those verdicts and lines: format3_signed, format3_unsigned, format3_signature_unsupported, format3_seal_unsupported, format3_security_v2 and format3_note all of them, and format3_signed_cms and format3_sealed the part that needs no reader of CMS. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 days ago
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 704, padding reforzado, P = 768",""],[17,"open payload",true,"payload authenticated; BODY of 704 bytes, 2 files, area of 512 bytes",""],[18,"commit",true,"2 files",""]],"dkc":{"base":"format3_single.dkc","edits":[[576,19,"118c2eb3165b36b8035bad133ea8ed5d5aa525"],[790,1,"23"],[1357,126,"dc71d99ee28323592e5c5924b17355605818fce473572b9984fefcf155391c2bb76ea7f4f634ee03b5ce2955565bc06d8450dc5d46d353ab5d619ea33a3da7663954fcfdbf447a0caa0b8165f09d87d70315c6fdea32b6472516d161a9ab632a714aa9cc97308dca9b8db766de5b59c2f4f4772578c674d2b454482dd505"],[1547,16,"4161151ae465f51f0d37bf0eb61b3d4b"]]},"files":[["a.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"],["b.txt",4,"e633f4fc79badea1dc5db970cf397c8248bac47cc3acf9915ba60b5d76b0e88f"]],"name":"format 3: two files","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["Sin firma de autor."],"seal":"S0","signature":"F0"}},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 1683, padding reforzado, P = 1792",""],[17,"open payload",true,"payload authenticated; BODY of 1683 bytes, 1 files, area of 1536 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_single.dkc","edits":[[575,20,"6b428c2e54a90b950dad20fa16d6d81280c77e7f"],[781,1,"66"],[1303,135,"a680eaf55950b6ee293828625de5eb9e1cc578c85ced53f96f9cc601e8efa90bb3a537592cd99f7bddb3a170796b665638c601a35ad35ed4d9fb83ad57215a5d4f26b17043640038a1bd1e086258fd0e10c22a7f0c3ee8ac9013d1cd30ebe6b98ca9b021fce8b140795d23b17ddf25159fa7382ba47e2350a4dd59778ef0d3b15fc42cc03ea7cc"],[1547,16,"72ebcf64bdb8c5fdd6360e521547d63a"],[1563,0,"adc8e41ae1a5a2bca54f15b9cc89183ac1d6be169a2b5bfa037fafdfdb7cdc6d9b9f1ac5fa9b52f1ee69d2414ac64b1421017e9a08ab7e4b34c8f6f957dda932e45012b570151eb6e7b343e50ccc81d13cb3849a800e69398644c6accfe8f2f6b1b02661fa9548949fcb396bc4c2f288df314ccb38645ee1cfd5cba3c3f344cfb22a16ebef16bceb4215c5198aaa5c2b80dba7581fd3457a89d0fcb7798854c6f2127e331f963cfcb3a3308538067c9145cbf5e0a7b5e2947e7f75adf181ec57c9d0d424aa823378c0c0923068da324a04cce689786127514219b0e717b6814ab3b56f94c0437b62058570184ff312c1b472021dccc74bf265b421b85436a0799786cba282db0905054f402b582667831e70f93b03a3c6f3adea09df48ac1946d3569019b1f41fce1114fecfa6b32eedac880960e0470d2d9d5ac91cb386dbc66b4a9987c3161886ec8eff9a7e9733711f71bdf396bb1a61af29e18cf892d5bda82134960489083e6ca4f85ee598d02f0a29c81792b53757bc7c83908664a84e438e6232cd4079cd9adef03a31c1854613b4b95572f2c51d96c4ba281ef52ab32b16ccc37d875e99a4d6ccf9d715180f32f337143b75f5b9283263689df536911272ac4501602ca21530e938dd045b9b90a1b95a32e3bf47a6d707f98a1fedd52580598b3b3a443f73da7c34884af270736f66bac6d85d13a84ae47daa59c608a297c9bbc6b265edc915d093c44c63a7446a3ae58d4dc7058148fb151bae8d187bf8571bf0fcdd611f1a5b30c3953386d5cf0a0cdaf052d218ef5a214680cadd13f3e18554b9ad5f43503fba017614c7218fd755b4e3c90384da38de5fd2447d30a78e605818c158bbd28d19af02f0745308c199720670442ded51b19e9010cee0685959edd97ba2410bed481a8e5355ac046e3f16905017b75b4006e879a302b94c53587017a5e295af02fd622680633eb0923d6e303d759a41ef2bdc0b8a05df306a5a0bca207eb8ea49b2c0b2b82a32d1e5c3dfc2ac142cf58007c375be788113df2bce6a2783addafe2fdfb3de300eb31d86d56d906e4da8dd389336223bccb1e339aa7577df329db38a4735a254536d3661c2d02bda0b9733af8e6b8019f0991208cdb5fbf3047e0b70c1c374bb032098375e5ad02ba5ae39a7e840808fa2e19a53f797aa08e12a3a835dca696334eec688e4bf8d11bdf3ac3d5f46696c9187bb53f9e01ad4618fef16f663bb099296211ba6a7c582c593e00121aeaa987bd36da3fa0c1916f17cc8a07e05b5fb52f27c061148af47cceafa4794ba37f2dba4bd55af13eb582531171f6d61a81b6ec53be3804b5c95ca2c375aa4602c653ece97742fccc36f20016ac4d3a7cf1b3a65779aa17b6423c3cabade4f44248d1140b5142898169ed8bb8933627708fa2d81d2fb039fa6d55ceb961ac2e5cdb0"]]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format 3: an area of 1536 bytes","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok",
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",true,"payload authenticated; BODY of 659 bytes, 1 files, area of 512 bytes",""],[18,"commit",true,"1 files",""]],"dkc":{"base":"format3_single.dkc","edits":[[786,27,"a26f1f0dc8468be55a8ce70633c01029070ba951ba9f20cb6dfa1d"],[1547,16,"db82c4655d669ae65fede711bf31b9cc"]]},"files":[["nota.txt",22,"5d596d5f49c179f0ec337f4610155fc237e727f9dee85377a5fce67a3c853510"]],"name":"format 3: SECURITY_CBOR of one byte","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ok","sink":"committed","text":"ok","verdicts":{"lines":["No se han podido comprobar la firma ni el sello: trátala como no firmada y sin fecha probada."],"seal":"X","signature":"X"}},
Stage 4c: the vectors of Go for the head, the note and the opening tool/mutation_go_texts.go ports scripts/mutation-go-texts.go of datekeys-ts over the synced testdata of this repository, the tag spec-v0.11: it replays every case of the mutation corpus as the testkit of the reference does and writes the text of capsule.Open and its checks, with the detail of each step, in mutation_texts.json. Where Go and the corpus disagree on a code or a step it would say so in the case; Go at c531e93 and at the tag spec-v0.11 agree with all 210 cases, and give the same file, byte for byte. tool/open_go_vectors.go runs in an export of datekeys-go, since it uses internal/testkit, internal/cbortest and internal/inspectview, and writes: - open_cases.json: capsule.Open on every fixture with each of its credentials, and 117 openings of edited fixtures or with other options at each step that the corpus does not reach: the frame, the fields, the extensions and the bindings of a .dkk at step 9.a, the clock and the failures of the release source, the age headers of steps 11 and 17, a malformed X25519 stanza in INNER_ACCESS_AGE, CONTROL_CBOR and the BODY of format 3 sealed again, the sinks and the output that fail, the refusal of Accept and the unusable extensions of each object, with the text, the step, the checks, the release requests, the state of the sink and the content or the files; - open_heads.json: capsule.DecodeHead and EncodeHead of heads of a fixed seed, valid and broken in each layer of spec §69.1; - open_notes.json: extension.CheckNote, Note, Header.UnusableNote and extension.Standard with a note; - open_inspect.json: the text of capsule.Inspect for each of the 5110 mutations of inspect_differential.json, where Go and the file also agree, and the exact output of datekeys inspect -json with public notes; - open_vectors.g.dart: seven small fixtures, their records and a part of each file, for the tests that run compiled to JavaScript. The edited capsules are sealed again with the file keys and the nonces of the fixtures, as the testkit does, so the output is the same on every run. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
4 days ago
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=091119676ec081409c666846153ba7eb datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 84078, padding reforzado, P = 86016",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: beginning the files: no begin: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_tree.dkc","edits":[]},"name":"format 3: the sink fails at begin","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","sink_fail":"begin","text":"capsule: PAYLOAD_AGE: beginning the files: no begin: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=091119676ec081409c666846153ba7eb datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 84078, padding reforzado, P = 86016",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: creating file 1: no create 0: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_tree.dkc","edits":[]},"name":"format 3: the sink fails at create 0","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"aborted","sink_fail":"create 0","text":"capsule: PAYLOAD_AGE: creating file 1: no create 0: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=091119676ec081409c666846153ba7eb datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 84078, padding reforzado, P = 86016",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: creating file 2: no create 1: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_tree.dkc","edits":[]},"name":"format 3: the sink fails at create 1","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"aborted","sink_fail":"create 1","text":"capsule: PAYLOAD_AGE: creating file 2: no create 1: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=091119676ec081409c666846153ba7eb datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 84078, padding reforzado, P = 86016",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: writing file 1: no write 0: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_tree.dkc","edits":[]},"name":"format 3: the sink fails at write 0","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"aborted","sink_fail":"write 0","text":"capsule: PAYLOAD_AGE: writing file 1: no write 0: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=091119676ec081409c666846153ba7eb datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 84078, padding reforzado, P = 86016",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: writing file 2: no write 1: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_tree.dkc","edits":[]},"name":"format 3: the sink fails at write 1","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"aborted","sink_fail":"write 1","text":"capsule: PAYLOAD_AGE: writing file 2: no write 1: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=091119676ec081409c666846153ba7eb datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 84078, padding reforzado, P = 86016",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: writing file 1: no close 0: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_tree.dkc","edits":[]},"name":"format 3: the sink fails at close 0","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"aborted","sink_fail":"close 0","text":"capsule: PAYLOAD_AGE: writing file 1: no close 0: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=091119676ec081409c666846153ba7eb datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 84078, padding reforzado, P = 86016",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: writing file 5: no close 4: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_tree.dkc","edits":[]},"name":"format 3: the sink fails at close 4","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"aborted","sink_fail":"close 4","text":"capsule: PAYLOAD_AGE: writing file 5: no close 4: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=091119676ec081409c666846153ba7eb datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 84078, padding reforzado, P = 86016",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: committing the files: no commit: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_tree.dkc","edits":[]},"name":"format 3: the sink fails at commit","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"aborted","sink_fail":"commit","text":"capsule: PAYLOAD_AGE: committing the files: no commit: ERR_INTEGRITY"},
{"accept":"refuse","checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=091119676ec081409c666846153ba7eb datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMX0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1001, unlock at 2023-08-23T15:59:27Z",""],[8,"tlock stanza",true,"round 1001, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1001 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 84078, padding reforzado, P = 86016",""],[17,"open payload",true,"payload authenticated; the caller refused its verdicts and nothing was published",""]],"dkc":{"base":"format3_tree.dkc","edits":[]},"name":"format 3: the caller refuses the verdicts","now":"2023-08-23T15:59:27Z","release":{"round":1001,"signature":"b33bf3667cbd5a82de3a24b4e0e9fe5513cc1a0e840368c6e31f5fcfa79bea03f73896b25883abf2853d10337fb8fa41"},"release_requests":1,"result":"refused","sink":"aborted","text":"not trusted"},
{"accept":"refuse","checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=d4d92a78eb71a94616bf193a8b665727 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwNH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1004, unlock at 2023-08-23T15:59:36Z",""],[8,"tlock stanza",true,"round 1004, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1004 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 636, padding reforzado, P = 768",""],[17,"open payload",true,"payload authenticated; the caller refused its verdicts and nothing was published",""]],"dkc":{"base":"format3_comment_only.dkc","edits":[]},"name":"format 3: the caller refuses the verdicts of a capsule without files","now":"2023-08-23T15:59:36Z","release":{"round":1004,"signature":"a40658b820c0f8c10207524179a2031ba9537688a0d04e4851b58026be9a341fee3b96fb48ffad28483d84b40a5864aa"},"release_requests":1,"result":"refused","sink":"aborted","text":"not trusted"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=458",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=ff23599acbe9b0a742792dcb7cb1bc4c datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_only profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_only: CONTROL_CBOR sealed directly",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 659, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: beginning the files: no begin: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_single.dkc","edits":[[1546,17,"2751618259652c6abdfb5e0afe3572a97f"]]},"name":"format 3: the sink fails at begin, with an invalid padding","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"untouched","sink_fail":"begin","text":"capsule: PAYLOAD_AGE: beginning the files: no begin: ERR_INTEGRITY"},
{"checks":[[1,"parse DKC1",true,"magic DKC1",""],[2,"prelude",true,"DKC1 v3, PUBLIC_HEADER_LEN=121, SEALED_CONTROL_LEN=2128",""],[3,"public header",true,"121 bytes",""],[4,"header validation",true,"capsule_id=29737cb54ad5310734ecf20720c2d317 datekey=dk1_eyJ2ZXJzaW9uIjoxLCJuZXR3b3JrIjoiZGF0ZWtleXM6cXVpY2tuZXQ6djEiLCJyb3VuZCI6MTAwMH0 policy=time_and_key profile=datekeys:quicknet:v1",""],[5,"sealed control structure",true,"one tlock stanza",""],[6,"payload structure",true,"one X25519 stanza",""],[7,"condition",true,"round 1000, unlock at 2023-08-23T15:59:24Z",""],[8,"tlock stanza",true,"round 1000, chain 52db9ba70e0cc0f6eaf7803dd07447a1f5477735fd3f661792ba94600c84e971",""],[9,"access credential",true,"1 identities to try",""],[9,"release",true,"round 1000 obtained",""],[10,"release verification",true,"BLS signature valid under the pinned key",""],[11,"open sealed control",true,"one tlock stanza, header MAC valid",""],[12,"policy structure",true,"time_and_key: INNER_ACCESS_AGE with 16 X25519 stanzas",""],[13,"open access layer",true,"identity matched exactly one stanza",""],[14,"control",true,"canonical CONTROL_CBOR",""],[15,"header binding",true,"matches",""],[16,"payload identity",true,"I_PAYLOAD recovered; L = 688, padding reforzado, P = 768",""],[17,"open payload",false,"capsule: PAYLOAD_AGE: committing the files: no commit: ERR_INTEGRITY","ERR_INTEGRITY"]],"dkc":{"base":"format3_time_and_key_portable.dkc","edits":[]},"dkk_file":"444b4b31010000000000008ca70073646174656b6579732d6163636573732d6b657901010250bdb483fba42daf0b409f44d23033f362035029737cb54ad5310734ecf20720c2d317046678323535313905582042e50b6ae3b2f00b79f08609f7fe11fba1256c54c6faa0c9ec9258b5f6f4c05906a1005820680d29962e575689a31543df28433dae7737abd9a793e9cae92ef40920d09636","name":"format 3, time_and_key: the sink fails at commit","now":"2023-08-23T15:59:24Z","release":{"round":1000,"signature":"b44679b9a59af2ec876b1a6b1ad52ea9b1615fc3982b19576350f93447cb1125e342b73a8dd2bacbe47e4b6b63ed5e39"},"release_requests":1,"result":"ERR_INTEGRITY","sink":"aborted","sink_fail":"commit","text":"capsule: PAYLOAD_AGE: committing the files: no commit: ERR_INTEGRITY"}
]
}

Powered by TurnKey Linux.