1 # Sample Issuer Material 2 3 This folder contains compressed key sample issuer material for use with the 4 Intel(R) EPID SDK. All data files are in binary format. 5 6 _Note: The groups and members provided here are distinct from the 7 corresponding uncompressed groups and members._ 8 9 ## Directory Structure 10 11 compressed_data 12 |__ groupa 13 | |__ member0 14 | | |__ mprivkey.dat 15 | | 16 | |__ member1 17 | | |__ mprivkey.dat 18 | | 19 | |__ privrevokedmember0 20 | | |__ mprivkey.dat 21 | | 22 | |__ privrevokedmember1 23 | | |__ mprivkey.dat 24 | | 25 | |__ privrevokedmember2 26 | | |__ mprivkey.dat 27 | | 28 | |__ sigrevokedmember0 29 | | |__ mprivkey.dat 30 | | 31 | |__ sigrevokedmember1 32 | | |__ mprivkey.dat 33 | | 34 | |__ sigrevokedmember2 35 | | |__ mprivkey.dat 36 | | 37 | |__ privrl.bin 38 | |__ privrl_empty.bin 39 | |__ pubkey.bin 40 | |__ sigrl.bin 41 | |__ sigrl_empty.bin 42 | 43 |__ groupb 44 | |__ member0 45 | | |__ mprivkey.dat 46 | | 47 | |__ member1 48 | | |__ mprivkey.dat 49 | | 50 | |__ privrevokedmember0 51 | | |__ mprivkey.dat 52 | | 53 | |__ sigrevokedmember0 54 | | |__ mprivkey.dat 55 | | 56 | |__ privrl.bin 57 | |__ privrl_empty.bin 58 | |__ pubkey.bin 59 | |__ sigrl.bin 60 | |__ sigrl_empty.bin 61 | 62 |__ grprl.bin 63 |__ grprl_empty.bin 64 |__ mprivkey.dat 65 |__ privrl.bin 66 |__ pubkey.bin 67 |__ cacert.bin 68 |__ sigrl.bin 69 70 71 ## Description 72 73 There are 2 groups 74 75 - **groupa** 76 77 - **groupb** 78 79 ### Group A 80 81 **groupa** contains 8 members. Each member has a member private key 82 `mprivkey.dat`. Here are the members: 83 84 - **member0** - a member in good standing 85 86 - **member1** - a member in good standing 87 88 - **privrevokedmember0** - a member revoked using its private key 89 90 - **privrevokedmember1** - a member revoked using its private key 91 92 - **privrevokedmember2** - a member revoked using its private key 93 94 - **sigrevokedmember0** - a member revoked using a signature 95 96 - **sigrevokedmember1** - a member revoked using a signature 97 98 - **sigrevokedmember2** - a member revoked using a signature 99 100 101 In addition, **groupa** contain the following revocation lists: 102 103 - `pubkey.bin` - group public key 104 105 - `privrl.bin` - private key based revocation list with 3 entries - 106 **privrevokedmember0**, **privrevokedmember1** and 107 **privrevokedmember2** 108 109 - `sigrl.bin` - signature based revocation list with 3 entries - 110 **sigrevokedmember0**, **sigrevokedmember2** and 111 **sigrevokedmember2** 112 113 - `privrl_empty.bin` - private key based revocation list with 0 entries 114 115 - `sigrl_empty.bin` - signature based revocation list with 0 entries 116 117 118 ### Group B 119 120 **groupb** contains 3 members. Each member has a member private key 121 `mprivkey.dat`. Here are the members: 122 123 - **member0** - a member in good standing 124 125 - **privrevokedmember0** - a member whose private key is revoked 126 127 - **sigrevokedmember0** - a member whose signature is revoked 128 129 130 In addition, **groupb** contain the following revocation lists: 131 132 - `pubkey.bin` - group public key 133 134 - `privrl.bin` - private key based revocation list with 1 entry - 135 **privrevokedmember0** 136 137 - `sigrl.bin` - signature based revocation list with 1 entry - 138 **sigrevokedmember0** 139 140 - `privrl_empty.bin` - private key based revocation list with 0 entries 141 142 - `sigrl_empty.bin` - signature based revocation list with 0 entries 143 144 145 ### Default files 146 147 - `cacert.bin` - CA certificate used as default input to signmsg 148 and `verifysig` 149 150 - `grprl.bin` - group revocation list with one entry **groupb** used 151 as default input to `verifysig` 152 153 - `pubkey.bin` - public key in **groupa** used as default input 154 to signmsg and `verifysig` 155 156 - `mprivkey.dat` - private key of a **member0** in the 157 **groupa** used as default input to `signmsg` 158 159 - `privrl.bin` - private key based revocation list in the 160 **groupa** with 3 entries used as default input to `verifysig` 161 162 - `sigrl.bin` - signature based revocation list in the 163 **groupa** with 3 entries used as default input to `signmsg` 164 and `verifysig` 165 166 ### Group revocation lists 167 168 There are 2 group revocation lists: 169 170 - `grprl.bin` - group revocation list with 100 entries 171 172 - `grprl_empty.bin` - group revocation list with 0 entries 173 174 175 ### IoT Issuing CA certificate 176 177 - `cacert.bin` - CA certificate used to check that revocation 178 lists and group public keys are authorized by the issuer, e.g., 179 signed by the issuer 180