Re: [Curdle] AlgorithmIdentifier parameters in draft-ietf-curdle-pkix-03

str4d <str4d@i2pmail.org> Mon, 20 February 2017 12:17 UTC

Return-Path: <str4d@i2pmail.org>
X-Original-To: curdle@ietfa.amsl.com
Delivered-To: curdle@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id BDC19129462 for <curdle@ietfa.amsl.com>; Mon, 20 Feb 2017 04:17:12 -0800 (PST)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -0.452
X-Spam-Level:
X-Spam-Status: No, score=-0.452 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_BRBL_LASTEXT=1.449, SPF_PASS=-0.001] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id RumqtsDpY_b9 for <curdle@ietfa.amsl.com>; Mon, 20 Feb 2017 04:17:11 -0800 (PST)
Received: from mail01.sigterm.no (mail01.sigterm.no [193.150.121.27]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 29E791293E4 for <curdle@ietf.org>; Mon, 20 Feb 2017 04:17:10 -0800 (PST)
Received: from smtp.postman.i2p (unknown [193.150.121.26]) by postman.meeh.i2p (Postfix) with ESMTP id 30EA32E010D for <curdle@ietf.org>; Mon, 20 Feb 2017 13:17:05 +0100 (CET)
X-Virus-Scanned: clamav-milter 0.97 on milter.postman.i2p
To: Ilari Liusvaara <ilariliusvaara@welho.com>
References: <20170218131518.D515DADF18@smtp.postman.i2p> <20170218222709.493F3ADF01@smtp.postman.i2p> <20170219172559.1E86EADF00@smtp.postman.i2p> <20170219221416.84597ADEFF@smtp.postman.i2p>
X-Mailer: smtp.postman.i2p - Official I2P Mailer
From: str4d <str4d@i2pmail.org>
MIME-Version: 1.0
In-Reply-To: <20170219221416.84597ADEFF@smtp.postman.i2p>
Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="WAw2WUo9Cupa3d1Nm3XTXSOer97pAfqRL"
Message-Id: <20170220094630.B49F2ADEFE@smtp.postman.i2p>
Date: Mon, 20 Feb 2017 09:46:30 +0000
Archived-At: <https://mailarchive.ietf.org/arch/msg/curdle/h8WYkluEc58u5KWvtrQbQtQvFxA>
Cc: curdle@ietf.org
Subject: Re: [Curdle] AlgorithmIdentifier parameters in draft-ietf-curdle-pkix-03
X-BeenThere: curdle@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: "List for discussion of potential new security area wg." <curdle.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/curdle>, <mailto:curdle-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/curdle/>
List-Post: <mailto:curdle@ietf.org>
List-Help: <mailto:curdle-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/curdle>, <mailto:curdle-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 20 Feb 2017 12:17:13 -0000

On 02/20/2017 11:14 AM, Ilari Liusvaara wrote:
> On Sun, Feb 19, 2017 at 05:25:59PM +0000, str4d wrote:
>>
>> If I'm looking at the same JavaDoc as you [0], that method is for
>> iaik.asn1.structures.AlgorithmID, which is part of the proprietary
>> IAIK-JCE Provider. I am referring to sun.security.x509.AlgorithmId from
>> the Sun Provider bundled with Oracle Java, which does not have this method.
> 
> Ah, I found what I presume is code for the correct class.
> 
> The problematic method (derEncode) looks like it can take an override
> from subclass.

While that may help for implementing custom keystores outside my
library, it does not solve the incompatibility problem with the default
keystore: PKCS8Key's static methods instantiate the AlgorithmId class
directly, rather than taking an AlgorithmId parameter that could be
subclassed.