Visual RFC.
ALL RFCs / RFC 6376
Read the RFC ↗
RFC 6376 / MECHANISM GUIDE

Canonicalization

02

Simple and relaxed algorithms define which message formatting changes affect the signed bytes.

Related RFCs and changes

“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.

DIAGRAM§ 3.4 ↗
RFC 6376 · § 3.4EXAMPLE
3 / 3
CanonicalizationSimple and relaxed algorithms define which message formatting changes affect the signed bytes.CanonicalizationSubject: Hello worldrelaxed rulessubject:Hello worldHash the same canonical bytes at both ends
03
Hash canonical bytes

Both sides must obtain the same signed input.

Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
KEY POINT

Header and body canonicalization are selected separately.

  • Header and body canonicalization are selected separately.
  • Relaxed header processing normalizes specified whitespace and field-name case.
  • Canonicalization is not permission for arbitrary content changes.
DETAILS

Examples are illustrative. Consult the linked RFC and its errata for implementation details.

Read the RFC section ↗

Diagrams simplify the RFC. Read the linked sections for complete requirements.

Privacy
All chapters in this RFC
  1. Signing domain and selector
  2. Canonicalization
  3. Body hash and selected headers
  4. DNS key verification
  5. Mutation and trust limits
RFC 9700 / CHAPTERS

Chapters

For full details, tables, algorithms, and exceptions, read the original RFC.

RFC status and corrections ↗