Merge pull request #52 from ietf-rats-wg/one-profile

Allow only one profile per CoRIM
ietf-rats-wg · Feb 28, 2023 · 51e3332 · 51e3332
2 parents 6cf700c + b8156f7
commit 51e3332
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 9 deletions.
diff --git a/cddl/corim-map.cddl b/cddl/corim-map.cddl
@@ -2,7 +2,7 @@ corim-map = {
   &(id: 0) => $corim-id-type-choice
   &(tags: 1) => [ + $concise-tag-type-choice ]
   ? &(dependent-rims: 2) => [ + corim-locator-map ]
-  ? &(profile: 3) => [ + profile-type-choice ]
+  ? &(profile: 3) => profile-type-choice
   ? &(rim-validity: 4) => validity-map
   ? &(entities: 5) => [ + corim-entity-map ]
   * $$corim-map-extension

diff --git a/cddl/examples/corim-design-cd.diag b/cddl/examples/corim-design-cd.diag
@@ -130,8 +130,7 @@
     / corim.href / 0 : 32("https://rims.example.com/path/to/file_adkfhaeria-dfka_efkj.rim")
    }
   ],
-  / corim.profile / 3 : [
+  / corim.profile / 3 :
    111(h'6086480186F84D010F06') / 2.16.840.1.113741.1.15.6 /
-  ]
  })
 )
diff --git a/cddl/examples/corim-firmware-cd.diag b/cddl/examples/corim-firmware-cd.diag
@@ -84,8 +84,7 @@
   }
   >> )
   ],
-  / corim.profile / 3 : [
+  / corim.profile / 3 :
     111( h'6086480186F84D010F06') / 2.16.840.1.113741.1.15.6 /
-  ]
  })
 )
diff --git a/draft-ietf-rats-corim.md b/draft-ietf-rats-corim.md
@@ -274,10 +274,11 @@ The following describes each child item of this map.
   possibly dependent, manifests or related files.  Described in
   {{sec-corim-locator-map}}
 
-* `profile` (index 3): One or more unique identifiers for the profiles of the
-  tags contained in this CoRIM.  All the listed profiles MUST be understood.
-  Failure to recognize a profile identifier MUST result in the rejection of the
-  entire processing.  Described in {{sec-corim-profile-types}}
+* `profile` (index 3): An optional profile identifier for the tags contained in
+  this CoRIM.  The profile MUST be understood by the CoRIM processor.  Failure
+  to recognize the profile identifier MUST result in the rejection of the
+  entire CoRIM.  If missing, the profile defaults to DICE.
+  Described in {{sec-corim-profile-types}}
 
 * `rim-validity` (index 4): Specifies the validity period of the CoRIM.
   Described in {{sec-common-validity}}