PKCS12-2 test inconsistency regarding Certificate Serial Number

[Conrado Gouvea <conradoplg@kryptus.com>]

Dear KMIP TC,

The test PKCS12-2 looks weird.

First, it calls Locate withÂCertificateSerialNumber equal toÂ020900d2f5bad76a5ac8f9, and it's supposed to succeed.

Then, it callsÂGetAttributes which returnsÂCertificateSerialNumber equal toÂ00d2f5bad76a5ac8f9.

I understand that it's supposed to be the DER encoding of the field. But the first is the whole DER-encoded INTEGER, while the second is only the value of the ASN.1 tag.

Which one is supposed to be correct? I think this should be clarified in the next spec update.

Best regards,

Conrado Gouvea Cryptography Specialist conradoplg@kryptus.com +55 (19) 3112-5000 www.kryptus.com

Este e-mail e quaisquer anexos podem conter informaÃÃo confidencial, proprietÃria, privilegiada, classificada ou protegida por Lei. A informaÃÃo aqui contida à destinada exclusivamente para os destinatÃrios nominados (ou para a pessoa responsÃvel por entregar a informaÃÃo para o destinatÃrio). Se vocà nÃo à o destinatÃrio pretendido desta mensagem entÃo vocà nÃo està autorizado a ler, imprimir, reter, copiar ou disseminar esta mensagem na Ãntegra ou mesmo parcialmente. Se vocà recebeu este e-mail erroneamente, por favor notifique o remetente e remova a mesma de sua caixa postal e dispositivos.

This e-mail and any attachments may contain information that is confidential, proprietary, privileged or otherwise protected by law. The information contained herein is solely intended for the named addressee (or a person responsible for delivering it to the addressee).If you are not the intended recipient of this message, you are not authorized to read, print, retain, copy or disseminate this message or any part of it. If you have received this e-mail in error, please notify the sender immediately by return e-mail and delete it from your computer.