PKCS#12 Proposal: Clarification of Question in TC

[John Leiseboer <JL@quintessencelabs.com>]

Clarifying my comment on the TC call today regarding whether operations such as Register should state that the PKCS#12 key format type should return an error.

The Register operation has required inputs of Object Type, Template-Attribute and an Object (Certificate, Symmetric Key, Private Key, etc.).

Taking a Private Key as the subject of registration, for example, the Private Key Object contains a Key Block. The Key Block is a structure containing a Key Value, and must contain a Key Format Type.

So my question, re-phrased, is this:

Should operations, such as Register, that take as input a Key Object, where the Key Block specifies a Key Type of PKCS#12 return an error? If so, should the standard state that it is an error to attempt to Register a PKCS#12 key type?

John

John Leiseboer | Chief Technology Officer | QuintessenceLabs | W: quintessencelabs.com
E: jl@quintessencelabs.com | M(AU): +61 409 487 510 | M(US): +1 202 294 6825 | Skype: jleiseboer
AU: 15 Denison St | Deakin | ACT 2601 | T: +61 2 6260 4922
US: Suite 220 | 175 Bernal Road | San Jose CA 95119 | T: +1 650 870 9920