[lamps] Re: [EXTERNAL] Re: WG Last Call for draft-ietf-lamps-csr-attestation-09

[Michael StJohns <[e-mail]>]

On 5/23/2024 3:59 PM, Russ Housley wrote:
> Mike:
>
>> In my case, I deal with both ASN1 SIGNED objects and flat signed objects of various flavors.   If I see the [0] tag, I know I can continue the parsing of the structure without first looking up the meaning of the OID and figuring out what the meaning of the various bits are (Syntax parsing vs semantic assignment).  I can pass a parsed ASN1 tree structure to the validator/object creator associated with the OID rather than stopping after parsing the top level.
> The ASN.1 tools that I use do not allow processing as you describe.

Try doing this in limited memory on a smart card.  Deferring special 
processing (e.g. related to the OID) until as late as possible 
simplifies things immensely.

I've dealt with attestation from big to large over the last 10-12 years 
and mostly I don't have the opportunity to just call an external 
function to evaluate an attestation blob as seems to be the main model 
for this document. That said, I realize I've lost that argument a long 
time ago.  That had the unfortunate side effect of making this document 
mostly useless for the cases in which I've been involved.  So while I 
won't support its publication, I won't oppose it and I probably won't 
ever use it.

BTW - I think Carl and you are about a year late in bringing up this 
reformulation of CertChoices - the current form was discussed and pretty 
much agreed upon in the design team about that long ago or should have 
been changed at that point.  Either this document is ready for last call 
(and *shrug* it probably is) or its time to go back and reopen a lot 
more than just the CertChoices discussion.   Given that this was 
supposed to be done about 2 years ago... well.. obviously it's not 
really all that critical we actually issue this document anytime soon.

If instead you want to close out the design team, and move this document 
into the mainstream of Lamps for further discussion prior to doing a 
Last Call, that may actually be a better approach than continuing this 
last call.

Later, Mike