Optional signing nonce

diff --git a/spec/cm/signed.cddl b/spec/cm/signed.cddl
index f515e01300b4eb6049eea3c2cec5a2c9c9470e87d33b65add9f5b776f57ae1c3..2a223e563762f9108215fcae439cf798774fb051eaa23ac27436cf03d69a975c 100644 (file)
--- a/spec/cm/signed.cddl
+++ b/spec/cm/signed.cddl
@@ -22,7 +22,8 @@ fpr = bytes .size 32
 
 sig-tbs = {
     sid: fpr, ; signer's public key fingerprint
-    ? encrypted-to: [+ fpr], ; recipient's public key fingerprints
     ? when: tai64 / tai64n,
+    ? nonce: bytes, ; some optional random bytes
+    ? encrypted-to: [+ fpr], ; recipient's public key fingerprints
     * text => any
 }