[Cryptography] Is ASN.1 still the thing?

Nico Williams nico at cryptonector.com
Sat Nov 18 16:51:02 EST 2017


On Sat, Nov 18, 2017 at 11:57:08AM -0800, Bill Frantz wrote:
> It may be nonsense, but Carl Ellison was severely burned by this issue on a
> project before we started developing the SPKI spec. That experience, along
> with the large number of security flaws in ASN.1 implementations, made him
> hate ASN.1. Since he was a principle author of SPKI, we followed his wish to
> avoid ASN.1 like the plague. That's the history.

OK, thanks for that history.  It's too bad he misunderstood.  Reals are
irrelevant to PKIs, and ASN.1 and its encoding rules have nothing to do
with IEEE754 issues any more than any other set of encoding rules.


More information about the cryptography mailing list