<HTML><HEAD></HEAD>
<BODY dir=ltr>
<DIV dir=ltr>
<DIV style="FONT-SIZE: 12pt; FONT-FAMILY: 'Calibri'; COLOR: #000000">
<DIV>Which section are you talking about? </DIV>
<DIV> </DIV>
<DIV>Nat</DIV>
<DIV> </DIV>
<DIV
style="BORDER-TOP-COLOR: #000000; BORDER-BOTTOM-COLOR: #000000; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 4px solid; BORDER-RIGHT-COLOR: #000000">
<DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'>
<DIV style="FONT: 10pt tahoma">
<DIV style="font-color: black"><B>From:</B> <A title=hasanthi@wso2.com
href="mailto:hasanthi@wso2.com">Hasanthi Purnima Dissanayake</A> </DIV>
<DIV><B>Sent:</B> Tuesday, May 26, 2015 12:24 PM</DIV>
<DIV><B>To:</B> <A title=openid-specs-ab@lists.openid.net
href="mailto:openid-specs-ab@lists.openid.net">openid-specs-ab@lists.openid.net</A>
</DIV>
<DIV><B>Subject:</B> [Openid-specs-ab] Generating salt value in OpenID Connect
SessionMangement</DIV></DIV></DIV></DIV>
<DIV
style="BORDER-TOP-COLOR: #000000; BORDER-BOTTOM-COLOR: #000000; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 4px solid; BORDER-RIGHT-COLOR: #000000">
<DIV
style='FONT-SIZE: small; TEXT-DECORATION: none; FONT-FAMILY: "Calibri"; FONT-WEIGHT: normal; COLOR: #000000; FONT-STYLE: normal; DISPLAY: inline'>
<DIV dir=ltr>
<DIV><SPAN style="FONT-FAMILY: arial,helvetica,sans-serif">Hi
team,<BR></SPAN></DIV>
<DIV><SPAN style="FONT-FAMILY: arial,helvetica,sans-serif">I'm working with spec
[1] and according to the it the OP iframe is generating a salt value by
splitting the session_state value that sent by the RP iframe. So we should send
a salt value from RP to OP. So what I'm going to do is sending the mes variable
from RP to OP with following format as ;<BR></SPAN></DIV>
<DIV><PRE><SPAN style="FONT-FAMILY: arial,helvetica,sans-serif"><CODE>var mes = CryptoJS.SHA256(client_id + origin + opss + salt) + "." + salt;<BR></CODE></SPAN></PRE><PRE><SPAN style="FONT-FAMILY: arial,helvetica,sans-serif"><CODE>instead of </CODE> <BR>var mes = client_id + " " + session_state; which is mentioned in the spec.<BR></SPAN></PRE><PRE><SPAN style="FONT-FAMILY: arial,helvetica,sans-serif">Please advice me on this.</SPAN><BR></PRE>Thanks
and Regards,<BR></DIV>
<DIV>
<DIV>
<DIV>
<DIV class=gmail_signature>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr>
<DIV>
<DIV dir=ltr><SPAN lang=DE
style="FONT-SIZE: 10pt; FONT-FAMILY: adihaus; COLOR: gray"></SPAN><SPAN
style='FONT-SIZE: 11pt; FONT-FAMILY: "Calibri","sans-serif"; COLOR: rgb(31,73,125)'></SPAN><SPAN
lang=DE
style="FONT-SIZE: 10pt; FONT-FAMILY: adihaus; COLOR: gray"></SPAN><SPAN><SPAN><FONT
color=#888888>
<P style="MARGIN-BOTTOM: 0pt; MARGIN-TOP: 0pt; LINE-HEIGHT: 1.15" dir=ltr><SPAN
style='FONT-FAMILY: "trebuchet ms",sans-serif; COLOR: rgb(102,102,102)'>Hasanthi<FONT
color=#888888> Dissanayake</FONT></SPAN><BR></P>
<P style="MARGIN-BOTTOM: 0pt; MARGIN-TOP: 0pt; LINE-HEIGHT: 1.15" dir=ltr><SPAN
style="VERTICAL-ALIGN: baseline; BACKGROUND-COLOR: transparent"><FONT
color=#666666 face="trebuchet ms, sans-serif">Software Engineer |
WSO2</FONT></SPAN></P>
<P style="MARGIN-BOTTOM: 0pt; MARGIN-TOP: 0pt; LINE-HEIGHT: 1.15" dir=ltr><SPAN
style="VERTICAL-ALIGN: baseline; BACKGROUND-COLOR: transparent"><SPAN
style='FONT-FAMILY: "trebuchet ms",sans-serif; COLOR: rgb(102,102,102); LINE-HEIGHT: normal'>E</SPAN>:
<A style='FONT-FAMILY: "trebuchet ms",sans-serif; LINE-HEIGHT: normal'
href="mailto:niroshika@wso2.com"
target=_blank>mailto:niroshika@wso2.com</A><FONT color=#666666
face="trebuchet ms, sans-serif"><BR></FONT></SPAN></P><FONT color=#666666
face="trebuchet ms, sans-serif"><SPAN
style="VERTICAL-ALIGN: baseline; BACKGROUND-COLOR: transparent">M
:0718407133|</SPAN><A style="TEXT-DECORATION: none; COLOR: rgb(17,85,204)"
href="http://wso2.com/" target=_blank><SPAN
style="VERTICAL-ALIGN: baseline; BACKGROUND-COLOR: transparent"> </SPAN><SPAN
style="TEXT-DECORATION: underline; VERTICAL-ALIGN: baseline; BACKGROUND-COLOR: transparent">http://wso2.com</SPAN></A><SPAN
style="VERTICAL-ALIGN: baseline; BACKGROUND-COLOR: transparent">
<BR></SPAN></FONT></FONT></SPAN></SPAN></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV></DIV>
<P>
<HR>
_______________________________________________<BR>Openid-specs-ab mailing
list<BR>Openid-specs-ab@lists.openid.net<BR>http://lists.openid.net/mailman/listinfo/openid-specs-ab<BR></DIV></DIV></DIV></DIV></BODY></HTML>