1+ Bpki-module-v1 {iso(1 ) member-body(2 ) by(112 ) 0 2 0 34 101 78 module(1 ) ver1(1 )}
2+ DEFINITIONS ::=
3+ BEGIN
4+ IMPORTS
5+ CRLReason, Name
6+ FROM PKIX1Explicit88 {iso(1 ) identified-organization(3 )
7+ dod(6 ) internet(1 ) security(5 ) mechanisms(5 ) pkix(7 )
8+ id-mod(0 ) id-pkix1-explicit-88(1 )}
9+ PKIStatusInfo
10+ FROM PKIXTSP {iso(1 ) identified-organization(3 ) dod(6 ) internet(1 )
11+ security(5 ) mechanisms(5 ) pkix(7 ) id-mod(0 ) id-mod-tsp(13 )}
12+ belt-keywrap256
13+ FROM Belt-module-v1 {iso(1 ) member-body(2 ) by(112 ) 0 2 0 34 101 31 1 1}
14+ bign-pubkey, bign-curve256v1, bign-curve384v1, bign-curve512v1
15+ FROM Bign-module-v2 {iso(1 ) member-body(2 ) by(112 ) 0 2 0 34 101 45 1 2}
16+ hmac-hbelt
17+ FROM Brng-module-v2 {iso(1 ) member-body(2 ) by(112 ) 0 2 0 34 101 47 1 2}
18+ bels-share, bels-m0128v1, bels-m0192v1, bels-m0256v1
19+ FROM Bels-module-v2 {iso(1 ) member-body(2 ) by(112 ) 0 2 0 34 101 60 1 2}
20+ id-PBKDF2, id-PBES2
21+ FROM PKCS5v2-1 {iso(1 ) member-body(2 ) us(840 ) rsadsi(113549 ) pkcs(1 )
22+ pkcs-5(5 ) modules(16 ) pkcs5v2-1(2 )};
23+
24+ bpki OBJECT IDENTIFIER ::= {iso(1 ) member-body(2 ) by(112 ) 0 2 0 34 101 78}
25+
26+ bpki-role OBJECT IDENTIFIER ::= {bpki 2}
27+ bpki-role-ca0 OBJECT IDENTIFIER ::= {bpki-role 0}
28+ bpki-role-ca1 OBJECT IDENTIFIER ::= {bpki-role 1}
29+ bpki-role-ca2 OBJECT IDENTIFIER ::= {bpki-role 2}
30+ bpki-role-aa OBJECT IDENTIFIER ::= {bpki-role 10}
31+ bpki-role-ra OBJECT IDENTIFIER ::= {bpki-role 20}
32+ bpki-role-ocsp OBJECT IDENTIFIER ::= {bpki-role 30}
33+ bpki-role-tsa OBJECT IDENTIFIER ::= {bpki-role 31}
34+ bpki-role-dvcs OBJECT IDENTIFIER ::= {bpki-role 32}
35+ bpki-role-ids OBJECT IDENTIFIER ::= {bpki-role 33}
36+ bpki-role-tls OBJECT IDENTIFIER ::= {bpki-role 50}
37+ -- natural persons
38+ bpki-role-np OBJECT IDENTIFIER ::= {bpki-role 60}
39+ -- foreign natural persons
40+ bpki-role-fnp OBJECT IDENTIFIER ::= {bpki-role 61}
41+ -- legal representatives
42+ bpki-role-lr OBJECT IDENTIFIER ::= {bpki-role 62}
43+ -- autonomous cryptographic devices
44+ bpki-role-acd OBJECT IDENTIFIER ::= {bpki-role 70}
45+
46+ -- extended key usage
47+ bpki-eku OBJECT IDENTIFIER ::= {bpki 3}
48+ -- server of Terminal Mode
49+ bpki-eku-serverTM OBJECT IDENTIFIER ::= {bpki-eku 1}
50+ -- client of Terminal Mode
51+ bpki-eku-clientTM OBJECT IDENTIFIER ::= {bpki-eku 2}
52+
53+ -- attributes
54+ bpki-at OBJECT IDENTIFIER ::= {bpki 4}
55+ -- certificate validity period
56+ bpki-at-certificateValidity OBJECT IDENTIFIER ::= {bpki-at 1}
57+
58+ -- content types
59+ bpki-ct OBJECT IDENTIFIER ::= {bpki 5}
60+ bpki-ct-enroll1-req OBJECT IDENTIFIER ::= {bpki-ct 1}
61+ bpki-ct-enroll2-req OBJECT IDENTIFIER ::= {bpki-ct 2}
62+ bpki-ct-reenroll-req OBJECT IDENTIFIER ::= {bpki-ct 3}
63+ bpki-ct-spawn-req OBJECT IDENTIFIER ::= {bpki-ct 4}
64+ bpki-ct-setpwd-req OBJECT IDENTIFIER ::= {bpki-ct 5}
65+ bpki-ct-revoke-req OBJECT IDENTIFIER ::= {bpki-ct 6}
66+ bpki-ct-resp OBJECT IDENTIFIER ::= {bpki-ct 7}
67+
68+ BPKIRevokeReq ::= SEQUENCE {
69+ issuer Name,
70+ serialNumber INTEGER ,
71+ revokePwd UTF8String,
72+ reasonCode CRLReason,
73+ invalidityDate GeneralizedTime OPTIONAL ,
74+ comment UTF8String OPTIONAL }
75+
76+ BPKIResp ::= SEQUENCE {
77+ statusInfo PKIStatusInfo,
78+ requestId OCTET STRING (SIZE (32 )),
79+ nonce OCTET STRING (SIZE (8 )) OPTIONAL }
80+
81+ BPKIRetrieveReq ::= SEQUENCE {
82+ requestId OCTET STRING (SIZE (32 )),
83+ nonce OCTET STRING (SIZE (8 )) }
84+
85+ PrivateKeyInfo ::= SEQUENCE {
86+ version INTEGER (0 ),
87+ keyAlgorithm CHOICE {
88+ bignPrivkeyAlgorithm BignAlgorithmIdentifier,
89+ belsSharekeyAlgorithm BelsAlgorithmIdentifier },
90+ key OCTET STRING }
91+
92+ BignAlgorithmIdentifier ::= SEQUENCE {
93+ algorithm OBJECT IDENTIFIER (bign-pubkey),
94+ params OBJECT IDENTIFIER (bign-curve256v1 | bign-curve384v1 |
95+ bign-curve512v1 ) }
96+
97+ BelsAlgorithmIdentifier ::= SEQUENCE {
98+ algorithm OBJECT IDENTIFIER (bels-share),
99+ params OBJECT IDENTIFIER (bels-m0128v1 | bels-m0192v1 | bels-m0256v1 ) }
100+
101+ EncryptedPrivateKeyInfo ::= SEQUENCE {
102+ encryptionAlgorithm EncryptionAlgorithmIdentifier,
103+ encryptedData OCTET STRING }
104+
105+ EncryptionAlgorithmIdentifier ::= SEQUENCE {
106+ algorithm OBJECT IDENTIFIER (id-PBES2 ),
107+ params PBES2-params }
108+
109+ PBES2-params ::= SEQUENCE {
110+ keyDerivationFunc PBKDF2AlgorithmIdentifier,
111+ encryptionScheme BeltKeywrapAlgorithmIdentifier }
112+
113+ PBKDF2AlgorithmIdentifier ::= SEQUENCE {
114+ algorithm OBJECT IDENTIFIER (id-PBKDF2 ),
115+ params PBKDF2-params }
116+
117+ BeltKeywrapAlgorithmIdentifier ::= SEQUENCE {
118+ algorithm OBJECT IDENTIFIER (belt-keywrap256 ),
119+ params NULL }
120+
121+ PBKDF2-params ::= SEQUENCE {
122+ salt OCTET STRING (SIZE (8 )),
123+ iterationCount INTEGER (10000 .. MAX),
124+ prf PrfAlgorithmIdentifier }
125+
126+ PrfAlgorithmIdentifier ::= SEQUENCE {
127+ algorithm OBJECT IDENTIFIER (hmac-hbelt),
128+ params NULL }
129+ END
0 commit comments