[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Calculation of SASL GS2 mechanism names



At 08:19 AM 11/14/2006, Simon Josefsson wrote:

>Alexey Melnikov <alexey.melnikov@xxxxxxxxx> writes:
>
>> The answer to my question might be obvious, but why can't we just use
>> SHA1 on a dot separated representation of a GSS-API OID?
>
>That would seem to work, and would avoid the complexities and pitfalls
>of DER-encoding.
>
>It would still be necessary to base32 encode and truncate the string,
>though, since mechanism names are limited to 20 characters.
>
>/Simon

If we go this way, the following ABNF can be used to describe
an OID in dotted-decimal form.

        numericoid = number 1*( DOT number )
        number  = DIGIT / ( LDIGIT 1*DIGIT )
        DIGIT   = %x30 / LDIGIT       ; "0"-"9"
        LDIGIT  = %x31-39             ; "1"-"9"

Regards, Kurt