RFC 9679: CBOR Object Signing and Encryption (COSE) Key Thumbprint
In plain English — editorial summary, not part of the RFC
This specification defines a method for computing a hash value over a CBOR Object Signing and Encryption (COSE) Key. It specifies which fields within the COSE Key structure are included in the cryptographic hash computation, the process for creating a canonical representation of these fields, and how to hash the resulting byte sequence. The resulting hash value, referred to as a "thumbprint", can be used to identify or select the corresponding key.
Document record
- Document ID
- RFC9679
- Published
- December 2024
- Authors
- K. Isobe; H. Tschofenig; O. Steele
- Status
- PROPOSED STANDARD
- Stream
- IETF
- Area
- sec
- Pages
- 13
- Also known as
- —
Related documents
Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.
- RFC 9678Forward Secrecy Extension to the Improved Extensible Authentication Protocol Method for Authentication and Key Agreement (EAP-AKA' FS)Current
March 2025
- RFC 9683Remote Integrity Verification of Network Devices Containing Trusted Platform ModulesCurrent
December 2024
- RFC 9684A YANG Data Model for Challenge-Response-Based Remote Attestation (CHARRA) Procedures Using Trusted Platform Modules (TPMs)Current
December 2024
- RFC 9688Use of the SHA3 One-Way Hash Functions in the Cryptographic Message Syntax (CMS)Current
November 2024
- RFC 9690Use of the RSA-KEM Algorithm in the Cryptographic Message Syntax (CMS)Current
February 2025
- RFC 9662Updates to the Cipher Suites in Secure SyslogCurrent
October 2024
- RFC 9700Best Current Practice for OAuth 2.0 SecurityCurrent
January 2025
- RFC 9701JSON Web Token (JWT) Response for OAuth Token IntrospectionCurrent
January 2025
Also filed under
About this page
The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.
Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.
Data sources · Editorial policy · Report a correction · What is an RFC?