"Manger, James" <james.h.man...@team.telstra.com> writes: > Hi Simon, two technical typos: > > The example cert in 8.2 has the wrong OID for the signature. > Cert has { 1 3 101 100 1 } [encoding 06 04 2B656401] > Text has { 1 3 101 101 } [encoding 06 03 2B6565] for id-EdDSASignature
Hi James. Good catch -- I believe that is a typo in the implementation. I'll let Nikos fix that, but we'll update the examples in the document. > OIDs use space-separated (not dot-separated) numbers in ASN.1. > Section 4: > Wrong { 1.3.101.100 } > Right { 1 3 101 100 } > Section 7 > Wrong { 1.3.101.101 } > Right { 1 3 101 101 } Fixed, thank you. > The cert's notBefore field is a UTCTime value (2-digit year), while > the notAfter field is a GeneralizedTime value (4-digit year). I don't > think I has seen that before, but it is valid. I suspect the logic in GnuTLS to pick one encoding over the other looks at the date to see if it fits in a UTCTime value or not. It shouldn't be related to EdDSA. /Simon > -- > James Manger > > > -----Original Message----- > From: pkix [mailto:pkix-boun...@ietf.org] On Behalf Of Simon Josefsson > Sent: Wednesday, 23 September 2015 6:33 PM > To: p...@ietf.org; tls@ietf.org > Subject: [pkix] Updated EdDSA/Ed25519 PKIX document > > Hi all, > > I have pushed out a new version of the document describing EdDSA public keys, > signatures and certificates for PKIX. The change in -03 include the addition > of the prehash mode, test vectors generated by GnuTLS, and a section > recommending certain human readable names. > > https://tools.ietf.org/html/draft-josefsson-pkix-eddsa-03 > > I've started a thread to discuss whether it is wortwhile to be able to use > the same Ed25519 key for both PureEdDSA mode and HashEdDSA signing, and I'd > appreciate feedback on whether people are interested in this and generally if > it is a good idea or not. The complexity involved make me shy away a bit > from it, but it is fun to consider. The thread is here: > https://moderncrypto.org/mail-archive/curves/2015/000630.html > > /Simon > > _______________________________________________ > pkix mailing list > p...@ietf.org > https://www.ietf.org/mailman/listinfo/pkix >
signature.asc
Description: PGP signature
_______________________________________________ TLS mailing list TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls