%% You should probably cite rfc8152 instead of this I-D.
@techreport{ietf-cose-msg-20,
    number =    {draft-ietf-cose-msg-20},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-ietf-cose-msg/20/},
    author =    {Jim Schaad},
    title =     {{CBOR Object Signing and Encryption (COSE)}},
    pagetotal = 119,
    year =      2016,
    month =     oct,
    day =       11,
    abstract =  {Concise Binary Object Representation (CBOR) is data format designed for small code size and small message size. There is a need for the ability to have basic security services defined for this data format. This document defines the CBOR Object Signing and Encryption (COSE) specification. This specification describes how to create and process signature, message authentication codes and encryption using CBOR for serialization. This specification additionally specifies how to represent cryptographic keys using CBOR.},
}