Revision Summary Date Revision History Revision Class Comments 3/2/2007 1.0 Major Updated and revised the technical content. 4/3/2007 1.1 Minor Clarified the meaning of the technical content. 5/11/2007 2.0 Major Updated and revised the technical content. 6/1/2007 2.1 Minor Clarified the meaning of the technical content. 7/3/2007 3.0 Changed to unified format; minor updates to technical content 8/10/2007 4.0 Major Updated and revised the technical content. 9/28/2007 5.0 Major Updated and revised the technical content. 10/23/2007 5.1 Minor Clarified the meaning of the technical content. 1/25/2008 5.1.1 Editorial Changed language and formatting in the technical content.
3/14/2008 6.0 Major update to technical content. 6/20/2008 7.0 Major Updated and revised the technical content. 7/25/2008 7.0.1 Editorial Changed language and formatting in the technical content. 8/29/2008 7.0.2 Editorial Changed language and formatting in the technical content. 10/24/2008 8.0 Major Updated and revised the technical content. 12/5/2008 9.0 Updated and revised the technical content. 1/16/2009 10.0 Major Updated and revised the technical content. 2/27/2009 10.0.1 Editorial Changed language and formatting in the technical content. 4/10/2009 11.0 Major Updated and revised the technical content. 5/22/2009 11.0.1 Editorial Changed language and formatting
in the technical content. 7/2/2009 11.0.2 Editorial Changed language and formatting in the technical content. 8/14/2009 11.0.3 Editorial Changed language and formatting in the technical content. 9/25/2009 11.1 Minor Clarified the meaning of the technical content. 11/6/2009 11.1.1 Editorial Changed language and formatting in the technical content. 12/18/2009 11.2 Minor Clarified the meaning of the technical content. 1/29/2010 11.2.1 Editorial Changed language and formatting in the technical content. 3/12/2010 12.0 Updated and revised the technical content. 4/23/2010 12.0.1 Editorial Changed language and formatting in the technical content.
of the technical content. 6/17/2011 17.1 Minor Clarified the meaning of the technical content. 9/23/2011 17.1 None No changes to the meaning, language, or formatting of the technical content. 12/16/2011 18.0 Major Updated and revised the technical content. 3/30/2012 18.0 None No changes to the meaning, language, or formatting of the technical content. 7/12/2012 18.0 None No changes to the meaning, language, or formatting of the technical content. 10/25/2012 18.0 None No changes to the meaning, language, or formatting of the technical content. 1/31/2013 18.0 None No changes to the meaning, language, or formatting
of the technical content. 8/8/2013 19.0 Major Updated and revised the technical content. 11/14/2013 19.0 None No changes to the meaning, language, or formatting of the technical content. 2/13/2014 19.0 None No changes to the meaning, language, or formatting of the technical content. 5/15/2014 19.0 None No changes to the meaning, language, or formatting of the technical content. 6/30/2015 20.0 Major Significantly changed the technical content. 10/16/2015 20.0 None No changes to the meaning, language, or formatting of the technical content. 7/14/2016 20.1 Minor Clarified the meaning of the technical content.
If the version 3 wrapping format was chosen, encrypt the AccessCheck structure using the AES algorithm as specified in [FIPS197], with EncKey as the key and EncIV as the initialization vector. Construct a version 2 or version 3 structure (specified in section and section 2.2.2.2 respectively) based on the choice of wrapping format in step 1. Copy the client secret to Secret, and copy its length to cbSecret. Concatenate EncKey and EncIV (generated in step 5) and place the result in the PayloadKey field. Encrypt the EncryptedSecret structure created in step 7, using the server's ClientWrap public key and using the RSA algorithm PKCS1 v1.5 padding as specified in section 7.2, and then reverse the byte order of the result. Construct the client-side wrapped secret as specified in section 2.2.2. Populate the dwVersion field based on the result of step 1, the cbEncryptedSecret and EncryptedSecret fields based on the result of step 8, and the cbAccessCheck and AccessCheck fields based on the result of step 7. Retrieve the of the server public key from the SubjectUniqueID field of the server's ClientWrap public key certificate, as specified in section 2.2.1, and place it in the guidKey field of the wrapped secret constructed in step 10. Timer Events None. Other Local Events None.
Index A Abstract data model 36 28 28 28 server ( 28, 36) 20 21 15 B backupkey remote interface ( 28, 36) 29 29 C 12 15 47 Client 36 28 28 28 36 initialization ( 29, 36) 39 message processing ( 29, 36) overview ( 28, 36) 37 sequencing rules ( 29, 36) 39 timers ( 28, 36) 18 13 23 17 D Data - abstract 36 28 28 28 server ( 28, 36) Data types 17 17 E 19 19 Events local 39 36 39 36 timer 39 36 39 36 Examples 40 40 F 16 43 G 6 I 43 41 41 11 Initialization client ( 29, 36) server ( 29, 36) Interfaces - client 36 Interfaces - server 28 6 L Local events 39 36 M Message processing client ( 29, 36) 29 37 36 Messages 17 17 Methods 29 37 N 10 O 11