Subject: RE: draft-ietf-pkix-rfc2511bis-00

From: Carlisle Adams <[email-masked]>
Date: Thu, 30 Nov 2000 15:51:17 -0500

Hi Ari,

RFC 2511 (and therefore rfc2511bis-00.txt) has the definitive syntax (the
section in 2510 discusses semantic interpretation).  Therefore, publicKeyMAC
is untagged.  I will try to remember to remove the tag from rfc2510bis as it
progresses.

Thanks for noticing this!

Carlisle.

> ----------
> From: 	Ari Kermaier[SMTP:[email-masked]]
> Sent: 	Thursday, November 30, 2000 2:20 PM
> To: 	[email-masked]
> Subject: 	RE: draft-ietf-pkix-rfc2511bis-00
> 
> A question of ASN.1 in CRMF:
> 
> draft-ietf-pkix-rfc2511bis-00 Section 4.4 has:
> 
>     POPOSigningKeyInput ::= SEQUENCE {
>         authInfo            CHOICE {
>             sender              [0] GeneralName,
>             -- used only if an authenticated identity has been
>             -- established for the sender (e.g., a DN from a
>             -- previously-issued and currently-valid certificate)
>             publicKeyMAC        PKMACValue },
>             -- used if no authenticated GeneralName currently exists for
>             -- the sender; publicKeyMAC contains a password-based MAC
>             -- on the DER-encoded value of publicKey
>         publicKey           SubjectPublicKeyInfo }  -- from CertTemplate
> 
> draft-ietf-pkix-rfc2510bis-01 Section 3.2.8 has:
> 
>       POPOSigningKeyInput ::= SEQUENCE {
>           authInfo            CHOICE {
>               sender              [0] GeneralName,
>               -- from PKIHeader (used only if an authenticated identity
>               -- has been established for the sender (e.g., a DN from a
>               -- previously-issued and currently-valid certificate))
>               publicKeyMAC        [1] PKMACValue
>               -- used if no authenticated GeneralName currently exists for
>               -- the sender; publicKeyMAC contains a password-based MAC
>               -- (using the protectionAlg AlgId from PKIHeader) on the
>               -- DER-encoded value of publicKey
>           },
>           publicKey           SubjectPublicKeyInfo    -- from CertTemplate
>       }
> 
> So -- is the publicKeyMAC choice tagged or not?
> 
> Ari Kermaier
>