<h3>Special Instructions</h3> <p>If you do not support Offline mode, do not perform this  test.</p> <h3>Description</h3> <p>The XDR_Offline_Transmission test is a test of ITI  transaction 15 using the offline transmission option (SMTP). A Document Source  supplies at least one document and submits that document to a Document Recipient.  This test covers a single submission set and a single document; options on the  Document Source are covered in different tests.</p>  <p>This test shall be run over an unsecured network using the  email system of your choice. Plagiarizing from the ITI TF: <ul>   <li>This test will use the cyphersuite:  S/MIME_RSA_WITH_AES_128_CBC_SHA</li>   <li>The email shall be digitally signed by the  sender, by&nbsp; one level detached signature,  applied BEFORE the encryption. This digitla signature shall be interpreted to  mean that the sender is attesting to their authorization to disclose the  information to the intended recipient(s).</li>   <li>As explained in S/MIME, the sender will generate  a unique session key, encrypt the payload of the message using the symmetrical  AES algorithm, encrypt the key using the RSA asymmetrical algorithm with each  one of the receiver(s) public key and attach the result to the message. Each  one of the receiver(s) will decrypt this result using its private key, revealing  the session key, and decrypt the payload of the message.</li> </ul> </p>  <h3>Evaluation</h3> <p>The Connectathon monitor will visit the Document Recipient  and examine log files looking for evidence that the document was successfully transmitted  and extracted. The monitor should ask the Recipient to show the email interface  with the received mail and look for these items:  <ul>   <li>From: e-mail address (no specific value)</li>   <li>To: e-mail address (no specific value)</li>   <li>Date: reasonable value</li>   <li>Subject: Must start with XDS/1.0/PnR. Shall not  contain PHI</li>  </ul> </p> <p>Monitor should also ask Document Recipient to show evidence  that the transmitted document was properly signed and the proper cyphersuite  was used.</p> <p>The monitor should examine the XDS meta-data that was  transmitted as part of the document.</p>