On Oct 6, 2025, at 15:35, Thomas Fossati <[email protected]> wrote:
>
> So, given the ambiguity surrounding the encoding of COSE_X509
Can you explain the “ambiguity”?
So far, nothing restricts the encoding, so any well-formed CBOR can be used.
Is there a reason to want this to be different?
If you are talking about Section 9 of RFC 9052, please read again:
9. CBOR Encoding Restrictions
This document limits the restrictions it imposes on how the CBOR
Encoder needs to work. The new encoding restrictions are aligned
with the Core Deterministic Encoding Requirements specified in
Section 4.2.1 of RFC 8949 [STD94]. It has been narrowed down to the
following restrictions:
* The restriction applies to the encoding of the Sig_structure, the
Enc_structure, and the MAC_structure.
* (...The actual restrictions...)
The three structures are used for creating signing inputs, not for any data
that goes over the wire.
Grüße, Carsten
_______________________________________________
COSE mailing list -- [email protected]
To unsubscribe send an email to [email protected]
