[TLS] Re: TLS 1.2 draft

EKR <ekr@networkresonance.com> writes:

>      - Replaced the PKCS#1 text with references to PKCS#1 v2. This also
>    includes DigestInfo encoding [issues 1 and 22]

The new text is:

   In RSA signing, the opaque vector contains the signature generated
   using the RSASSA-PKCS1-v1_5 signature scheme defined in [PKCS1B].  As
   discussed in [PKCS1B], the DigestInfo MUST be DER encoded and for
   digest algorithms without parameters (which include SHA-1) the
   DigestInfo.AlgorithmIdentifier.parameters field SHOULD be omitted but
   implementations MUST accept both without parameters and with NULL
   parameters. Note that earlier versions of TLS used a different RSA
   signature scheme which did not include a DigestInfo encoding.

The PKCS#1 v2.1 with erratas, RFC 3447 and IEEE 1363a-2004 includes
hash identifier for SHA-1 that corresponds to a present NULL
parameter:

      SHA-1:   (0x)30 21 30 09 06 05 2b 0e 03 02 1a 05 00 04 14 || H.

Right now, GnuTLS generates NULL and only accepts NULL values.  Mike's
server generate NULL, and if I remember correctly, it was based on
OpenSSL.  I am not aware of any other TLS 1.2 servers or clients that
are available for testing.

/Simon

_______________________________________________
TLS mailing list
TLS@lists.ietf.org
https://www1.ietf.org/mailman/listinfo/tls