<h3>Special Instructions</h3> <p>If you do not support Offline mode, do not perform this test.</p> <h3>Description</h3> <p>The XDR_Offline_Transmission test is a test of ITI transaction 15 using the offline transmission option (SMTP). A Document Source supplies at least one document and submits that document to a Document Recipient. This test covers a single submission set and a single document; options on the Document Source are covered in different tests.</p> <p>This test shall be run over an unsecured network using the email system of your choice. Plagiarizing from the ITI TF: <ul> <li>This test will use the cyphersuite: S/MIME_RSA_WITH_AES_128_CBC_SHA</li> <li>The email shall be digitally signed by the sender, by&nbsp; one level detached signature, applied BEFORE the encryption. This digitla signature shall be interpreted to mean that the sender is attesting to their authorization to disclose the information to the intended recipient(s).</li> <li>As explained in S/MIME, the sender will generate a unique session key, encrypt the payload of the message using the symmetrical AES algorithm, encrypt the key using the RSA asymmetrical algorithm with each one of the receiver(s) public key and attach the result to the message. Each one of the receiver(s) will decrypt this result using its private key, revealing the session key, and decrypt the payload of the message.</li> </ul> </p> <h3>Evaluation</h3> <p>The Connectathon monitor will visit the Document Recipient and examine log files looking for evidence that the document was successfully transmitted and extracted. The monitor should ask the Recipient to show the email interface with the received mail and look for these items: <ul> <li>From: e-mail address (no specific value)</li> <li>To: e-mail address (no specific value)</li> <li>Date: reasonable value</li> <li>Subject: Must start with XDS/1.0/PnR. Shall not contain PHI</li> </ul> </p> <p>Monitor should also ask Document Recipient to show evidence that the transmitted document was properly signed and the proper cyphersuite was used.</p> <p>The monitor should examine the XDS meta-data that was transmitted as part of the document.</p>