%% You should probably cite rfc8152 instead of this I-D.
@techreport{ietf-cose-msg-09,
    number =    {draft-ietf-cose-msg-09},
    type =      {Internet-Draft},
    institution =   {Internet Engineering Task Force},
    publisher = {Internet Engineering Task Force},
    note =      {Work in Progress},
    url =       {https://datatracker.ietf.org/doc/draft-ietf-cose-msg/09/},
    author =    {Jim Schaad},
    title =     {{CBOR Encoded Message Syntax}},
    pagetotal = 99,
    year =      2015,
    month =     dec,
    day =       17,
    abstract =  {Concise Binary Object Representation (CBOR) is data format designed for small code size and small message size. There is a need for the ability to have the basic security services defined for this data format. This document specifies procesing for signatures, message authentication codes, and encryption using CBOR. This document also specifies a represention for cryptographic keys using CBOR.},
}