Skip to content

Commit 6209726

Browse files
committed
Remove sig:Reference target type, document target type semantics
sig:Reference conflates location with commitment. Add notes explaining default (semantic digest), structural digest (locks obscuration state), and detached bytes (non-Envelope objects).
1 parent 4c4e8e5 commit 6209726

1 file changed

Lines changed: 8 additions & 3 deletions

File tree

papers/bcr-2026-xxx-signature-qualifiers.md

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -260,10 +260,15 @@ This range is intended for inclusion in the “community, specification required
260260

261261
| Code Point | Term | Kind | Description |
262262
|-----------:|--------------------------------|------|-----------------------------------------------------------------------------|
263-
| 1680 | `sig:EnvelopeSemanticDigest` | enum | Target is the semantic digest of a Gordian Envelope. |
263+
| 1680 | `sig:EnvelopeSemanticDigest` | enum | Target is the semantic digest of a Gordian Envelope (default). |
264264
| 1681 | `sig:EnvelopeStructuralDigest` | enum | Target is the structural digest of a Gordian Envelope. |
265-
| 1682 | `sig:DetachedBytesDigest` | enum | Target is a digest of detached bytes. |
266-
| 1683 | `sig:Reference` | enum | Target is a `Reference` (`ur:reference`, CBOR tag `#6.40025`) per [BCR-2024-011](bcr-2024-011-reference.md). |
265+
| 1682 | `sig:DetachedBytesDigest` | enum | Target is a digest of detached bytes (non-Envelope object). |
266+
267+
`sig:EnvelopeSemanticDigest` is the default and most common target type. The semantic digest is stable across elision, encryption, and compression — a signature over a semantic digest remains valid regardless of how the envelope is later obscured or revealed.
268+
269+
`sig:EnvelopeStructuralDigest` is used only when the signer intends the signature to be invalidated if the envelope's obscuration state changes. Because the structural digest incorporates whether each node is elided, encrypted, or compressed, any change to the envelope's disclosure — revealing an elided assertion, decrypting an encrypted one, or decompressing a compressed one — will change the structural digest and invalidate the signature. This is appropriate when the signer wants to lock down a specific presentation of the envelope. When validating such a signature, the envelope's structural digest must be used, not its semantic digest.
270+
271+
`sig:DetachedBytesDigest` is used when signing objects that are not Gordian Envelopes, such as files, binary artifacts, or other opaque byte sequences.
267272

268273
---
269274

0 commit comments

Comments
 (0)