[Cryptography] Is ASN.1 still the thing?

Peter Gutmann pgut001 at cs.auckland.ac.nz
Fri Nov 17 05:17:39 EST 2017


Santosh Chokhani <santosh.chokhani at gmail.com> writes:

>Wow.  That is magic.  Do not decode a certificate but verify signature and
>extract fields.

How about "do a string search through the encoded cert data until you find the
OID for the public key, then extract the key components from the bytes that
follow and use those".  That's what you get when the spec mandates the use of
a full-blown PKI and the target hardware is a Cortex M0 or an MSP430.

Peter.


More information about the cryptography mailing list