[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: Straw poll for Algorithm Identifiers in Subject Public Key Info.




David P. Kemp wrote on 01/16/2007 12:21:27 PM:

>
> > - The structured algorithm OID is maybe not the hardest to define
> > but the worse alternative in every other aspect.
>
> Agree.
>

Suppose that a subject has an ECMQV-only cert, and wishes to allow either SHA-256 or SHA-384 based KDFs, but no other KDFs.  Also, the EKU field says that the cert can be used for SMIME, IPSec, SSH, or TLS (suppose the private key is on the user's smart card).  The X9.62 "structured" approach allows for this.  How would the other approaches allow for this?

Regards,

Dan Brown
(905) 501-3857
http://www.certicom.com