formats

formats copied to clipboard

der: Encoding higher tag number

6

Hello, I have an use case where I need to DER-encode ASN.1 message using greater than 30 for tag number. I noticed in some comments that "This library deliberately does...

xaqq

Add STB (Belarus standarts) to const-oid

1

Added OIDS from Republic of Belarus standarts (STB) https://github.com/bcrypto/bake/blob/master/spec/bake-module-v1.asn (for example, one file)

makavity

PasswordRecipientInfoBuilder for CMS

6

This provides a builder for CMS' `PasswordRecipientInfo` according to RFC 3211. In contrast to the `KeyTransRecipientInfoBuilder` the key-encryption algorithm must be provided by the user (who has to provide an...

bkstein

x509-cert: fix KeyUsage on leaf certificates builder

10

I tried to abide by the ETSI policy. https://www.etsi.org/deliver/etsi_en/319400_319499/31941202/02.03.01_60/en_31941202v020301p.pdf The policy recommends to make KeyUsage bits 0, 1, (2 and/or 4) exclusive. This is meant to avoid making signing of...

baloo

x509-cert: local zlint failures

1

I tried running the `x509-cert` test suite on my mac using `zlint` installed from Homebrew and I'm encountering the following: ``` $ zlint --version ZLint version 3.6.2 $ cargo test...

tarcieri

x509-cert: certificate verification support

6

dayday2019

der: preservation of order in sets during reencode

6

Hi. Recently I ran into this PKCS7/CMS structure which contains what seems like non-canonical signed/authenticated attributes. It was failing signature verification in Rust code and after closer look, it seems...

metthal

[question] how to handle application tags that preceed other values

9

I'm currently in the process of writing a kerberos encoder/decoder using this DER crate. In https://www.rfc-editor.org/rfc/rfc4120#section-5.4.1 the specification is: ``` AS-REQ ::= [APPLICATION 10] KDC-REQ TGS-REQ ::= [APPLICATION 12] KDC-REQ...

Firstyear

pkcs7+der: mixed BER/DER encoding with undefined length

17

Hi, while looking into the `pkcs7` crate for a CMS usecase around the Apple world I discovered that their detached signatures use the BER indefinite length encoding for some of...

smndtrl

x509-cert: Creating x509 certificates without allocations

25

Hello, I'm interested in using `x509-cert` in an environment where no heap allocation is possible. I'm still new to Rust but if I understand correctly, `x509-cert` is working well in...

NicsTr