Subject: Re: Question about the ASN.1 keying data

From: Pekka Nikander <[email-masked]>
Date: Tue, 10 Jun 2003 10:26:03 +0300

Pekka Nikander wrote
>> Assuming these changes, we got the following binary format.
>> This is fairly easy to implement, and also recognize
>> if the format does not match the expected one, and kick
>> such things to the user level.

Jonathan Wood wrote:
> This sounds like a good idea.
> 
> If the format does not match, why would you kick it to userland
> instead of rejecting it? In other words, under what circumstances
> would a valid SendKeyInformation not follow this format?

Well, the only reason for having ASN.1 in the first place
is to allow extensibility.  For example, it might be
desirable to use DSA keys instead of RSA keys.  Furthermore,
the second key (signerInfo) is there to allow proxy operations
etc.

In our implementation we plan to implement only the most
common case in the kernel, and all the rest in the user
level.

--Pekka Nikander

--------------------------------------------------------------------
To unsubscribe from this list, send email with "UNSUBSCRIBE" in the
body to <[email-masked]>.
Archive: http://standards.ericsson.net/lists/ietf-send/maillist.html
--------------------------------------------------------------------