Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Address Roman's reference nit #496

Merged
merged 2 commits into from
Oct 3, 2023
+9 −9
Merged

Address Roman's reference nit #496

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
99d2e60
Address Roman's reference nit
chris-wood Oct 2, 2023
df51070
Update draft-ietf-privacypass-protocol.md
chris-wood Oct 2, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
18 changes: 9 additions & 9 deletions draft-ietf-privacypass-protocol.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -703,15 +703,15 @@ pkI, respectively, used to produce tokens. Each key SHALL be generated
securely, for example as specified in FIPS 186-5 {{?DSS=DOI.10.6028/NIST.FIPS.186-5}}.
These keys MUST NOT be reused in other protocols.

The key identifier for an Issuer Private and Public Key (skI, pkI), denoted `token_key_id`,
is computed as SHA256(encoded_key), where encoded_key is a DER-encoded
SubjectPublicKeyInfo {{?RFC5280}} (SPKI) object carrying pkI as a DER-encoded
RSAPublicKey value in the the subjectPublicKey field. Additionally, the SPKI object
MUST use the id-RSASSA-PSS object identifier in the algorithm field within the
SPKI object, the parameters field MUST contain a RSASSA-PSS-params value,
and MUST include the hashAlgorithm, maskGenAlgorithm, and saltLength values.
The saltLength MUST match the output size of the hash function associated with
the public key and token type.
The key identifier for an Issuer Private and Public Key (skI, pkI),
denoted `token_key_id`, is computed as SHA256(encoded_key), where encoded_key
is a DER-encoded SubjectPublicKeyInfo {{?RFC5280}} (SPKI) object carrying pkI
as a DER-encoded RSAPublicKey value {{?RFC5756}} in the subjectPublicKey
field. Additionally, the SPKI object MUST use the id-RSASSA-PSS object
identifier in the algorithm field within the SPKI object, the parameters field
MUST contain a RSASSA-PSS-params value, and MUST include the hashAlgorithm,
maskGenAlgorithm, and saltLength values. The saltLength MUST match the output
size of the hash function associated with the public key and token type.

An example sequence of the SPKI object (in ASN.1 format, with the actual public key
bytes truncated) for a 2048-bit key is below:
Expand Down
Loading