Re: [lamps] Call for adoption of draft-housley-hash-of-root-key-cert-extn

[Russ Housley <[e-mail]>]

Rich:

Thanks for the support.

> >It has been suggested that the WG adopt draft-housley-hash-of-root-key-cert-extn as the starting point for this work.
>  
> SET did this for their root a long time ago.  Maybe re-use the OID?
>  
> At any rate, I support this.

I looked at this, and they used a cumbersome syntax.

hashedRootKey EXTENSION ::= {               -- Only in root certificates
   SYNTAX         HashedRootKeySyntax
   CRITICAL       TRUE
   IDENTIFIED BY id-set-hashedRootKey
}

HashedRootKeySyntax ::= RootKeyThumb

RootKeyThumb ::= SEQUENCE {
   rootKeyThumbprint  DD { SubjectPublicKeyInfo{{SupportedAlgorithms}} }
}

Where DD expands to a CMS DigestedData.

I think you will find the syntax in the Internet-Draft much more straightforward.

Russ