Skip to content

Commit

Permalink
Add clarity for lines and duplicate boxes
Browse files Browse the repository at this point in the history
Signed-off-by: steve lasker <[email protected]>
  • Loading branch information
SteveLasker committed Oct 1, 2024
1 parent 7615e71 commit 604de7d
Showing 1 changed file with 11 additions and 4 deletions.
15 changes: 11 additions & 4 deletions draft-ietf-scitt-architecture.md
Original file line number Diff line number Diff line change
Expand Up @@ -326,6 +326,17 @@ The SCITT architecture consists of a very loose federation of Transparency Servi
In order to accommodate as many Transparency Service implementations as possible, this document only specifies the format of Signed Statements (which must be used by all Issuers) and a very thin wrapper format for Receipts, which specifies the Transparency Service identity and the agility parameters for the Signed Inclusion Proofs.
Most of the details of the Receipt's contents are specified in the COSE Signed Merkle Tree Proof document {{-COMETRE}}.

Statements about digital Artifacts, containing digital Artifacts, or structured data regarding any type of Artifacts, can be too large or too sensitive to be send to a remote Transparency Services over the Internet.
In these cases a Statement can also be hash, which becomes the payload included in COSE to-be-signed bytes.
A Signed Statement (cose-sign1) MUST be produced from the to-be-signed bytes according to {{Section 4.4 of RFC9052}}.

The arrows indicate the flow of information.
For example, Credentials are used to Sign Statements and Verify Signed Statements within the Transparency Service.

{{#fig-concept-relationship}} illustrates two Transparency Services and two Receipts as a single Signed Statement MAY be registered on more than one Transparency Services.
Each Transparency Service produces a Receipt.
A Transparent Statement MAY contain multiple Receipts, for each Transparency Service it was successfully Registered.

~~~aasvg
.----------.
| Artifact |
Expand Down Expand Up @@ -1076,10 +1087,6 @@ data:application/cose;base64,SGVsb...xkIQ==

# Signing Statements Remotely

Statements about digital Artifacts, containing digital Artifacts, or structured data regarding any type of Artifacts, can be too large or too sensitive to be send to a remote Transparency Services over the Internet.
In these cases a Statement can also be hash, which becomes the payload included in COSE to-be-signed bytes.
A Signed Statement (cose-sign1) MUST be produced from the to-be-signed bytes according to {{Section 4.4 of RFC9052}}.

~~~aasvg
.----+-----.
| Artifact |
Expand Down

0 comments on commit 604de7d

Please sign in to comment.