pem-dev
[Top] [All Lists]

Lack of Clarity in RFC 1423 ?

1993-03-05 09:59:00
Perhaps I missed something, but para. 4.2.1 in RFC 1423
lacks some clarity in my view:

When saying "To prepare a MIC for RSAEncryption ..." (page 10),
the "digestAlgorithm AlgorithmIdentifier" is mentioned, but it
is not said which object identifier should be used for the
digest algorithm. It simply refers to PKCS #1.

PKCS #1 (June 3, 1991) says that md2 has the OIW-defined object
identifier { 1 3 14 7 2 2 1 }.

The TIS implementation, however, indicates that the RFC 1423
defined object identifier of RSA-MD2 is being used, which is
{ 1 2 840 113549 2 2 }.

Either the TIS implementation is wrong, or the difference to 
PKCS #1 should be noted in RFC 1423.

Wolfgang Schneider

<Prev in Thread] Current Thread [Next in Thread>