Optional /id

diff --git a/spec/cm/encrypted.cddl b/spec/cm/encrypted.cddl
index 4a888d787475509537a227f5a3dc51b14d0e1b056a02914e356c48b0b29ba5e9..ddc4d91daf266c1c1f1f6ed48a5841737c17dcd4128529f1647eebac950c9c6b 100644 (file)
--- a/spec/cm/encrypted.cddl
+++ b/spec/cm/encrypted.cddl
@@ -1,5 +1,5 @@
 cm-encrypted = {
-    id: uuid,
+    ? id: uuid,
     dem: dem,
     kem: [+ kem],
     ? payload: bytes,

diff --git a/spec/cm/encrypted.texi b/spec/cm/encrypted.texi
index 5c5c9576b50bf98317a8e495d979104da335bb18a120e485411787b5ebc01181..3744d6b3494582d1fe6f5f7e12e8308d3018eacfe3492dadf1e7fe3dc5beb5e9 100644 (file)
--- a/spec/cm/encrypted.texi
+++ b/spec/cm/encrypted.texi
@@ -47,8 +47,9 @@ If KEM uses public-key based cryptography, then recipient's
 signatures at all. Optional @code{/kem/*/to}, public key's fingerprint,
 may provide a hint to quickly search for the key on the recipient's side.
 
-@code{/id} is used in KEMs for domain separation. UUIDv4 is recommended.
-Can be null for privacy reasons.
+Optional @code{/id} is used in KEMs for domain separation and envelope
+identification. UUIDv4 is recommended. If absent, then null UUID is used
+in KDF.
 
 @node Key wrapping
 @cindex key wrapping