RE: MIC calculation discrepancy?

Michael Milner <[email protected]> Wed, 27 Aug 2003 12:00:53 -0700 (PDT)

Newsgroups	gmane.ietf.ediint
Message-ID	<[email protected]>

Thanks for your help.

I'm attaching wmrequest.bin which is the signed,
encrypted request to Walmart. I'm also attaching
testcase.bin which is the signed data that was
encrypted with Walmart's certificate.

The MIC returned is always different -- even though I
am encrypting the same data each time. (I suppose
Walmart is somehow calculating the MIC on the
encrypted data?!)

p.s. Am using SHA1.

Thanks.

Michael



__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com

wmrequest.bin (text/plain, 3 KB)

POST / HTTP/1.0
Host: gem.wal-mart.com:5080
User-Agent: Test Agent
AS2-To: *****
AS2-From: *****
AS2-Version: 1.0
Date: Wed, 27 Aug 2003 14:25:04 GMT
Subject: TEST IGNORE TEST
Message-Id: x@y
Disposition-Notification-To: *****
Disposition-Notification-Options: signed-receipt-protocol=optional, pkcs7-signature; signed-receipt-micalg=optional, sha1
Content-Type: application/pkcs7-mime; smime-type=enveloped-data; name="smime.p7m"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7m"
Content-Length: 2512
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testcase.bin (text/plain, 1.4 KB)

MIME-Version: 1.0
Content-Type: multipart/signed;
 protocol="application/pkcs7-signature";  
	boundary="abcdeabcdeabcde"; micalg=sha1


--abcdeabcdeabcde
Content-Type: application/edi-x12
Content-Disposition: Attachment; filename=rfc1767.edi

TEST - IGNORE
--abcdeabcdeabcde
Content-Type: application/pkcs7-signature;  	name="smime.p7s"
Content-Disposition: attachment; filename="smime.p7s"
Content-Transfer-Encoding: base64
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--abcdeabcdeabcde--