Re: Straw Poll: encoding of authenticated attributes in cms-auth-enveloped ID

[pgut001@xxxxxxxxxxxxxxxxx (Peter Gutmann)]

Peter Sylvester <Peter.Sylvester@xxxxxxxxxx> writes:

>I am not sure but why the AuthAttributes are there before the content?
>Although a messagedigest is not part of the AuthAttributes, this means
>that whene an AuthAttributes for SignedData or AuthenticatedData
>requires reading the data, this gets difficult to use. I am thinking
>for example a timestamp as attribute.

I've grumbled about that too.  It's an artefact of the way CMC handles
authenticated data, but it makes things really difficult for anything that
isn't CMC.  In particular it makes one-pass processing and streaming
implementations impossible, which was a specific design feature of the CMS
format.

Peter.