[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Calculation of SASL GS2 mechanism names
At 08:19 AM 11/14/2006, Simon Josefsson wrote:
>Alexey Melnikov <alexey.melnikov@xxxxxxxxx> writes:
>
>> The answer to my question might be obvious, but why can't we just use
>> SHA1 on a dot separated representation of a GSS-API OID?
>
>That would seem to work, and would avoid the complexities and pitfalls
>of DER-encoding.
>
>It would still be necessary to base32 encode and truncate the string,
>though, since mechanism names are limited to 20 characters.
>
>/Simon
If we go this way, the following ABNF can be used to describe
an OID in dotted-decimal form.
numericoid = number 1*( DOT number )
number = DIGIT / ( LDIGIT 1*DIGIT )
DIGIT = %x30 / LDIGIT ; "0"-"9"
LDIGIT = %x31-39 ; "1"-"9"
Regards, Kurt