2021-07-27 2026-04-08 less than -65536 Private Use -65536 to -257 Specification Required -256 to 255 Standards Action 256 to 65535 Specification Required greater than 65535 Expert Review Göran Selander Reserved for Private Use less than -65536 AS 1 text string kid 2 byte string audience 5 text string scope 9 text or byte string cnonce 39 byte string less than -65536 Private Use -65536 or greater Expert Review Göran Selander Reserved for Private Use less than -65536 invalid_request 1 RFC 6749, Section 5.2 invalid_client 2 RFC 6749, Section 5.2 invalid_grant 3 RFC 6749, Section 5.2 unauthorized_client 4 RFC 6749, Section 5.2 unsupported_grant_type 5 RFC 6749, Section 5.2 invalid_scope 6 RFC 6749, Section 5.2 unsupported_pop_key 7 incompatible_ace_profiles 8 less than -65536 Private Use -65536 or greater Expert Review Göran Selander Reserved for Private Use less than -65536 password 0 RFC 6749, Section 4.3.2 authorization_code 1 RFC 6749, Section 4.1.3 client_credentials 2 RFC 6749, Section 4.4.2 refresh_token 3 RFC 6749, Section 6 less than -65536 Private Use -65536 or greater Expert Review Göran Selander Reserved for Private Use less than -65536 Bearer 1 PoP 2 less than -65536 Private Use -65536 to -257 Specification Required -256 to 255 Standards Action 256 to 65535 Specification Required greater than 65535 Expert Review Göran Selander Reserved for Private Use less than -65536 coap_dtls Profile for delegating client Authentication and Authorization for Constrained Environments by establishing a Datagram Transport Layer Security (DTLS) or Transport Layer Security (TLS) channel between resource-constrained nodes. 1 coap_oscore Profile for using OSCORE to secure communication between constrained nodes using the Authentication and Authorization for Constrained Environments framework. 2 mqtt_tls Profile for delegating Client authentication and authorization using MQTT for the Client and Broker (RS) interactions and HTTP for the AS interactions. TLS is used for confidentiality and integrity protection and server authentication. Client authentication can be provided either via TLS or using in-band PoP validation at the MQTT application layer. 3 less than -65536 Private Use -65536 or greater Expert Review Göran Selander Reserved for Private Use less than -65536 access_token 1 byte string expires_in 2 unsigned integer req_cnf 4 map RFC9201, Section 3.1 audience 5 text string cnf 8 map RFC9201, Section 3.2 scope 9 text or byte string client_id 24 text string client_secret 25 byte string response_type 26 text string redirect_uri 27 text string state 28 text string code 29 byte string error 30 integer error_description 31 text string error_uri 32 text string grant_type 33 unsigned integer token_type 34 integer username 35 text string password 36 text string refresh_token 37 byte string ace_profile 38 integer cnonce 39 byte string nonce1 40 bstr rs_cnf 41 map RFC9201, Section 3.2 nonce2 42 bstr ace_client_recipientid 43 bstr ace_server_recipientid 44 bstr sign_info 45 Null or array kdcchallenge 46 byte string ecdh_info 47 Null or array kdc_dh_creds 48 Null or array less than -65536 Private Use -65536 or greater Expert Review Göran Selander Reserved for Private Use less than -65536 iss 1 text string sub 2 text string aud 3 text string exp 4 integer or floating-point number nbf 5 integer or floating-point number iat 6 integer or floating-point number cti 7 byte string cnf 8 map RFC9201, Section 4 scope 9 text or byte string active 10 True or False token 11 byte string client_id 24 text string error 30 integer error_description 31 text string error_uri 32 text string token_type_hint 33 text string token_type 34 integer username 35 text string ace_profile 38 integer cnonce 39 byte string exi 40 unsigned integer less than -65536 Private Use -65536 to -257 Specification Required -256 to 255 Standards Action With Expert Review 256 to 65535 Specification Required greater than 65535 Expert Review Strings of length 1 Standards Action With Expert Review Strings of length 2 Specification Required Strings of length greater than 2 Expert Review Göran Selander Reserved for Private Use less than -65536 id 0 byte string OSCORE Input Material Identifier version 1 unsigned integer OSCORE Version ms 2 byte string OSCORE Master Secret value hkdf 3 text string / integer COSE Algorithms Values (HMAC-based) OSCORE HKDF value alg 4 text string / integer COSE Algorithms Values (AEAD) OSCORE AEAD Algorithm value salt 5 byte string an input to OSCORE Master Salt value contextId 6 byte string OSCORE ID Context value group_SenderId 7 byte string OSCORE Sender ID assigned to a member of an OSCORE group cred_fmt 8 integer COSE Header Parameters Labels (integer) Format of authentication credentials to be used in the OSCORE group gp_enc_alg 9 text string / integer COSE Algorithms Values OSCORE Group Encryption Algorithm Value sign_alg 10 text string / integer COSE Algorithms Values OSCORE Signature Algorithm Value sign_params 11 array COSE Algorithms Capabilities, COSE Key Types Capabilities, COSE Elliptic Curves Values OSCORE Signature Algorithm Parameters ecdh_alg 12 text string / integer COSE Algorithms Values OSCORE Pairwise Key Agreement Algorithm Value ecdh_params 13 array COSE Algorithms Capabilities, COSE Key Types Capabilities, COSE Elliptic Curves Values OSCORE Pairwise Key Agreement Algorithm Parameters less than -65536 Private Use -65536 to -257 Specification Required -256 to 255 Standards Action With Expert Review 256 to 65535 Specification Required greater than 65535 Expert Review Strings of length 1 Standards Action With Expert Review Strings of length 2 Specification Required Strings of length greater than 2 Expert Review Francesca Palombini, Marco Tiloca, Rikard Höglund Reserved for Private Use less than -65536 gid 0 array gname 1 array of tstr guri 2 array of tstr scope 3 bstr get_creds 4 Null or array client_cred 5 bstr cnonce 6 bstr gkty 7 int or tstr key 8 See the ACE Groupcomm Key Types registry num 9 int ace_groupcomm_profile 10 int exp 11 uint exi 12 uint creds 13 array peer_roles 14 array peer_identifiers 15 array group_policies 16 map kdc_cred 17 bstr kdc_nonce 18 bstr kdc_cred_verify 19 bstr rekeying_scheme 20 int group_senderId 21 bstr client_cred_verify 24 bstr creds_repo 25 tstr control_uri 26 tstr mgt_key_material 27 bstr control_group_uri 28 tstr sign_info 29 Null or array kdcchallenge 30 bstr ecdh_info 31 array kdc_dh_creds 32 array sign_enc_key 33 bstr stale_node_ids 34 array less than -65536 Private Use -65536 to -257 Specification Required -256 to 255 Standards Action With Expert Review 256 to 65535 Specification Required greater than 65535 Expert Review Strings of length 1 Standards Action With Expert Review Strings of length 2 Specification Required Strings of length greater than 2 Expert Review Francesca Palombini, Marco Tiloca, Rikard Höglund Reserved for Private Use less than -65536 Reserved 0 This value is reserved Group_OSCORE_Input_Material object 1 "coap_group_oscore_app", registered in A Group_OSCORE_Input_Material object encoded as described in less than -65536 Private Use -65536 to -257 Specification Required -256 to 255 Standards Action With Expert Review 256 to 65535 Specification Required greater than 65535 Expert Review Francesca Palombini, Marco Tiloca, Rikard Höglund Reserved for Private Use less than -65536 Reserved This value is reserved 0 coap_group_oscore_app Application profile to provision keying material for participating in group communication protected with Group OSCORE as per 1 less than -65536 Private Use -65536 to -257 Specification Required -256 to 255 Standards Action With Expert Review 256 to 65535 Specification Required greater than 65535 Expert Review Strings of length 1 Standards Action With Expert Review Strings of length 2 Specification Required Strings of length greater than 2 Expert Review Francesca Palombini, Marco Tiloca, Rikard Höglund Reserved for Private Use less than -65536 Sequence Number Synchronization Method 0 int or tstr Method for recipient group members to synchronize with sequence numbers of sender group members. Its value is taken from the "Value" column of the "Sequence Number Synchronization Method" registry Key Update Check Interval 1 int Polling interval in seconds, for group members to check at the KDC if the latest group keying material is the one that they store Expiration Delta 2 uint Number of seconds from 'exp' until a UTC date/time, after which group members MUST stop using the group keying material that they store to decrypt incoming messages less than -65536 Private Use -65536 to -257 Specification Required -256 to 255 Standards Action With Expert Review 256 to 65535 Specification Required greater than 65535 Expert Review Strings of length 1 Standards Action With Expert Review Strings of length 2 Specification Required Strings of length greater than 2 Expert Review Francesca Palombini, Marco Tiloca, Rikard Höglund Reserved for Private Use less than -65536 less than -65536 Private Use -65536 to -257 Specification Required -256 to 255 Standards Action With Expert Review 256 to 65535 Specification Required greater than 65535 Expert Review Francesca Palombini, Marco Tiloca, Rikard Höglund less than -65536 Reserved for Private Use 0 Operation permitted only to group members 1 Request inconsistent with the current roles 2 Authentication credential incompatible with the group configuration 3 Invalid proof-of-possession evidence 4 No available individual keying material 5 Group membership terminated 6 Group deleted 7 Signatures not used in the group 8 Operation permitted only to signature verifiers 9 Group currently not active less than -65536 Private Use -65536 to -257 Specification Required -256 to 255 Standards Action With Expert Review 256 to 65535 Specification Required greater than 65535 Expert Review Francesca Palombini, Marco Tiloca, Rikard Höglund Reserved for Private Use less than -65536 0 Point-to-Point The KDC individually targets each node to rekey, using the pairwise secure communication association with that node less than -65536 Private Use -65536 to -257 Specification Required -256 to 255 Standards Action With Expert Review 256 to 65535 Specification Required greater than 65535 Expert Review Marco Tiloca Reserved for Private Use less than -65536 Unassigned -65536..-1 full_set 0 array diff_set 1 array cursor 2 Null or unsigned integer more 3 True or False less than -65536 Private Use -65536 to -257 Specification Required -256 to 255 Standards Action With Expert Review 256 to 65535 Specification Required greater than 65535 Expert Review Marco Tiloca less than -65536 Reserved for Private Use -65536..-1 Unassigned 0 Invalid parameter value 1 Invalid set of parameters 2 Out of bound cursor value 0-65535 Expert Review greater than 65535 Private Use Unassigned 0 Reserved This value is reserved 1 Requester Send protected requests; receive protected responses 2 Responder Send protected responses; receive protected requests 3 Monitor Receive protected requests; never send protected messages 4 Verifier Verify signature of intercepted messages protected with the group mode 5-65535 Unassigned Unassigned greater than 65535 Reserved for Private Use Reserved for Private Use