Re: Calculation of SASL GS2 mechanism names

[Simon Josefsson <jas@xxxxxxxxxxx>]

Alexey Melnikov <alexey.melnikov@xxxxxxxxx> writes:

> The answer to my question might be obvious, but why can't we just use
> SHA1 on a dot separated representation of a GSS-API OID?

That would seem to work, and would avoid the complexities and pitfalls
of DER-encoding.

It would still be necessary to base32 encode and truncate the string,
though, since mechanism names are limited to 20 characters.

/Simon