Re: difference between RFC 1423 and X.509

> But when you look into X.509 ANNEX H, object identifier for 'rsa'
> is defined in following way
>
> rsa OBJECT IDENTIFIER ::=  {
>      joint-iso-ccitt(2) ds(5) 
>      modules(1)  /********/
>      algorithm(8)
>      encryptionAlgorithm(1) 1
> }
>
>
>
> Has this been noticed before? If so, what is the conclusion? I suppose this 
> is an error in RFC 1423. 
>
> Nada Kapidzic
> COST Computer Security Technologies
> Stockholm, Sweden

Nada-

I think you may be confusing the object identifier for the algorithm
with the object identifier for the ASN.1 module in which the algorithm
is defined.

The object identifier that you have cited above is for the
"AlgorithmObjectIdentfiers" ASN.1 *module* which appears in X.509
ANNEX H and defines the "rsa" algorithm.

Looking in X.509 ANNEX H and in X.501 ANNEX B (which defines the
"algorithm" object identifier) the "rsa" object identifier is defined
as:

    rsa OBJECT IDENTIFIER ::= {encryptionAlgorithm 1}
    encryptionAlgorithm OBJECT IDENTIFIER ::= {algorithm 1}
    algorithm OBJECT IDENTIFIER ::= {ds 8}
    ds OBJECT IDENTIFIER ::= {joint-iso-ccitt ds(5)}

If you put all these definitions together, you'll get the object
identifier which is cited in RFC 1423.

-DB