com.novosec.pkix.asn1.cmp

 Challenge ::= SEQUENCE {
 owf                 AlgorithmIdentifier  OPTIONAL,   -- MUST be present in the first Challenge; MAY be omitted in any subsequent Challenge in POPODecKeyChallContent (if omitted,
 -- then the owf used in the immediately preceding Challenge is to be used).
 witness             OCTET STRING,                    -- the result of applying the one-way function (owf) to a randomly-generated INTEGER, A.

 PKIBody ::= CHOICE {
 ir      [0]  CertReqMessages,        --Initialization Request
 ip      [1]  CertRepMessage,         --Initialization Response
 cr      [2]  CertReqMessages,        --Certification Request
 cp      [3]  CertRepMessage,         --Certification Response
 p10cr   [4]  CertificationRequest,   --imported from [PKCS10]
 popdecc [5]  POPODecKeyChallContent, --pop Challenge
 popdecr [6]  POPODecKeyRespContent,  --pop Response
 kur     [7]  CertReqMessages,        --Key Update Request
 kup     [8]  CertRepMessage,         --Key Update Response
 krr     [9]  CertReqMessages,        --Key Recovery Request
 krp     [10] KeyRecRepContent,       --Key Recovery Response
 rr      [11] RevReqContent,          --Revocation Request
 rp      [12] RevRepContent,          --Revocation Response
 ccr     [13] CertReqMessages,        --Cross-Cert.

 POPODecKeyRespContent ::= SEQUENCE OF INTEGER   -- One INTEGER per encryption key certification request (in the same order as these requests appear in CertReqMessages).

 RevDetails ::= SEQUENCE {
 certDetails         CertTemplate,                -- allows requester to specify as much as they can about the cert.