Countersignature Attribute

S/MIME Implementors:

See the comment from John Pawling below.

I agree that the  the text is not clear.  Looking back at the
original PKCS#7 v1.5 text, there is no insight to be found.  So, I
would like to hear from implementors, especially S/MIME v2
implementors.  How is this handled?

Another interpreation of the PKCS#7 v1.5 text is:

A countersignature attribute can have multiple attribute values.  The syntax is defined as a SET OF AttributeValue, and there must be one or more instances of AttributeValue present.

The UnsignedAttributes syntax is defined as a SET OF Attributes.  The UnsignedAttributes in a signerInfo may include multiple instances of the countersignature attribute.

Russ


At 10:39 AM 8/4/98 -0400, John Pawling wrote:
>[snip]
>5) Sec 11.4, Countersignature: Please change as follows:
>
>OLD: "A countersignature attribute can have multiple attribute
values."
>
>NEW: "The UnsignedAttributes syntax is defined as a SET OF
Attributes.  
>The UnsignedAttributes in a signerInfo MAY include multiple instances
>of the countersignature attribute.  The Attribute syntax defines
>attrValues as a SET OF AttributeValue.  A countersignature
attribute 
>MUST only include a single instance of AttributeValue. There MUST NOT
>be zero or multiple instances of AttributeValue present in the 
>attrValues SET OF AttributeValue."
>[snip]