[Cryptography] Is ASN.1 still the thing?

Carl Wallace carl at redhoundsoftware.com
Sun Nov 19 17:58:36 EST 2017


On 11/19/17, 4:59 PM, "cryptography on behalf of Phillip Hallam-Baker"
<cryptography-bounces+carl=redhoundsoftware.com at metzdowd.com on behalf of
phill at hallambaker.com> wrote:
><snip>
>Checking to get this right is time consuming and difficult to get
>right. A crap ASN.1 decoder can be done in a week, a really good one
>with every possible corner case is enormous and might take a year. So
>just don't use ASN.1 it is utterly awful.

As you know, that's easier said than done. Having good test suites like
the old NISCC test suites to aid developers would be an easier landing
spot. 
>




More information about the cryptography mailing list