Re: [pkcs11] Action item #13

[Robert Relyea <rrelyea@redhat.com>]

On 8/6/21 2:14 PM, Robert Relyea wrote:
> I don't know how Jonathan is sending email, but it's showing up in a 
> weird embeded, forwarded email. With some doing, I've stripped out 
> what I think was in the heart of Jonathan's email:
I sent the previous email without imbedded comments so others can use it 
to give their impot
> On 7/22/21 11:39 AM, Jonathan Schulze-Hewett wrote:
>
> > All,
> >
> > What does "DER-encoded octet value wrapped inside a DER-octet header 
> > of the
> > b-bit public key value in little endian order as defined in RFC 8032" 
> > mean?
Hmmm. Good point. I it sounds like it's is trying to say "the RFC 8032 
value is wrapped by DER octet wrapped by DER octet, but 1) "DER octet 
value wrapped inside" is wrong, and I believe we just mean a single 
DER-Encoded value.
> > Sections 6.3.5, 6.3.6, 6.3.7, and 6.3.8 were updated to this language 
> > because
> > they were inconsistent. They are now consistent across CKA_EC_POINT 
> > public key
> > values and CKA_VALUE private key values. They all start with the same
> > "DER-encoded octet value wrapped inside a DER-octet header..." whereas
> > previously they either had just "b-bit private key value in little 
> > endian
> > order" or "DER-encoding of the b-bit public key".
> >
> > Are they an "ASN.1 DER-encoded OCTET STRING containing the b-bit..." 
> > or does
> > this mean something else?
I think that's what is intended, but you are right, the english doesn't 
quite work. Did we have something think that "DER-encoding" didn't 
include the header?
> > Thanks,
> > Jonathan