Dave:
How about adding a size constraint to the ASN.1. Do we envision
ever needing an empty set of authenticated or unauthenticated
attributes?
AuthAttributes ::= SET SIZE(1..MAX) OF AuthAttribute
UnauthAttributes ::= SET SIZE(1..MAX) OF UnauthAttribute
I added SIZE in four places. Here is the updated ASN.1:
AuthAttributes ::= SET SIZE (1..MAX) OF AuthAttribute
AuthAttribute ::= SEQUENCE {
attrType OBJECT IDENTIFIER,
critical BOOLEAN DEFAULT FALSE,
attrValues SET SIZE (1..MAX) OF AttributeValue }
UnauthAttributes ::= SET SIZE (1..MAX) OF UnauthAttribute
UnauthAttribute ::= SEQUENCE {
attrType OBJECT IDENTIFIER,
attrValues SET SIZE (1..MAX) OF AttributeValue }
AttributeValue ::= ANY
Russ