Has anobody noticed that there is a difference between "rsa" object
identifier defined in RFC 1423, and the same identifier defined in X.509
ANNEX H.
In PEM RFC 1423, in chapter 4.1.1 RSA Keys, two ASN.1 object identifiers
are defined for identification of RSA keys. They are:
1) rsa OBJECT IDENTIFIER ::= {
joint-iso-ccitt(2) ds(5) algorithm(8)
encryptionAlgorithm(1) 1
}
and
2) rsaEncryption OBJECT IDENTIFIER ::= {
iso(1) member-body(2) US(840) rsadsi(113549) pkcs(1)
pkcs-1(1) 1
}
But when you look into X.509 ANNEX H, object identifier for 'rsa'
is defined in following way
rsa OBJECT IDENTIFIER ::= {
joint-iso-ccitt(2) ds(5)
modules(1) /********/
algorithm(8)
encryptionAlgorithm(1) 1
}
Has this been noticed before? If so, what is the conclusion? I suppose this
is an error in RFC 1423.
Nada Kapidzic
COST Computer Security Technologies
Stockholm, Sweden