RFC 9995: CBOR Object Signing and Encryption (COSE) Hash Envelope
In plain English — editorial summary, not part of the RFC
This document defines new CBOR Object Signing and Encryption (COSE) header parameters for signaling a payload as an output of a hash function. This mechanism enables faster validation, as access to the original payload is not required for signature validation. Additionally, hints of the hashed payload's content format and availability are defined, providing references to optional discovery mechanisms that can help to find the original payload content.
Document record
- Document ID
- RFC9995
- Published
- July 2026
- Authors
- O. Steele; S. Lasker; H. Birkholz
- Status
- PROPOSED STANDARD
- Stream
- IETF
- Area
- sec
- Pages
- 8
- Also known as
- —
Related documents
Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.
- RFC 9999Remote ATtestation procedureS (RATS) Conceptual Message Wrapper (CMW)Current
July 2026
- RFC 10002Certificate Management over CMS (CMC)Current
July 2026
- RFC 9987Secure Shell (SSH) Agent ProtocolCurrent
May 2026
- RFC 10003Certificate Management over CMS (CMC): Transport ProtocolsCurrent
July 2026
- RFC 10004Certificate Management over CMS (CMC): Compliance RequirementsCurrent
July 2026
- RFC 10007Clarification to Processing Key Usage Values During Certificate Revocation List (CRL) ValidationCurrent
June 2026
- RFC 9980Post-Quantum Cryptography in OpenPGPCurrent
June 2026
- RFC 10013Entity Attestation Token (EAT) Measured ComponentCurrent
July 2026
Also filed under
About this page
The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.
Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.
Data sources · Editorial policy · Report a correction · What is an RFC?