Re: Cert Ontology

On Tue 2013-Mar-19, at 09:20, Henry Story <henry.story@bblfish.net> wrote:

>
> On 19 Mar 2013, at 09:49, Mo McRoberts <Mo.McRoberts@bbc.co.uk> wrote:
>
>> curiously, the ASN.1 modules for RSA and DSA (in the context of PKIX) differ in terms of naming…
>>
>> where RSA speaks of 'modulus' and 'publicExponent', DSA is exclusively 'p', 'q', and 'g' for the parameters and 'y' for the key itself.
>>
>> I can't help but wonder if consistency should perhaps outweigh friendlier naming (such that 'p' in an DSA key structure maps to 'p' in a set of RDF triples).
>>
>> rdfs:label and rdfs:comment within the ontology of course can go a long way in clarifying things…
>
> This seems to be what the XMLSIG standard does
>
> http://www.w3.org/TR/xmldsig-core/#sec-DSAKeyValue
>
> Next one would have to specify what the types of the values for each of those relations are. Are they integers or hexBinaries, hexBinaries for very long integers - since that is the only way to encode those in a hexadecidmal format that can save a bit of space. Ie: what is the domain of those values?


>From openssl dsa -in <key> -text, they all look pretty long:

pub:
    6b:4c:12:1a:bf:ce:c6:67:4d:80:52:69:1e:9b:2d:
    5f:52:8d:84:cf:ed:11:47:2c:77:ff:ac:5c:3a:d1:
    4f:bc:e0:0b:a1:9a:b6:45:68:ee:4b:1f:0f:57:c4:
    26:e6:49:55:43:55:0c:3d:52:38:58:26:fc:43:f6:
    94:7e:e3:5d:e8:61:56:20:98:41:31:29:21:1d:68:
    c2:65:b3:3d:a7:83:99:b8:62:fb:99:c4:1d:08:4b:
    0c:55:80:4a:c0:33:1d:e3:3d:59:c2:87:9c:4e:96:
    74:63:95:3d:2e:4c:e1:57:77:18:24:7c:25:56:f4:
    73:7b:1d:6e:00:0f:54:aa
P:
    00:a2:14:56:2a:ec:fd:2e:d0:27:df:ec:9b:ae:e9:
    b2:d4:20:09:92:2b:38:b3:22:69:35:f8:cd:c0:8a:
    14:14:a6:41:29:f3:44:f2:01:bb:05:1a:69:5d:7f:
    3b:a1:2c:a8:bb:65:d0:a2:fc:52:b4:37:13:53:bd:
    14:5e:83:52:78:cf:e4:2c:da:d5:1c:2f:18:10:94:
    8d:9e:a1:80:ea:76:8c:ba:ca:7a:e4:71:06:0f:59:
    8c:8f:c5:97:1e:38:6f:e3:6e:02:3f:25:40:fd:da:
    66:1e:7c:62:9f:20:3e:87:39:d2:a7:50:48:46:da:
    28:ec:50:0f:7e:18:08:77:b3
Q:
    00:d8:1c:26:56:38:80:9f:ea:2d:62:33:15:d9:b7:
    ae:2a:8e:cc:d4:fd
G:
    07:90:e6:75:ca:9d:02:d9:b4:e3:54:72:c5:26:e9:
    d8:43:75:85:48:80:ca:58:c4:39:79:08:56:de:10:
    e2:f4:16:56:1c:f4:cb:d4:c8:0e:e8:86:b7:94:ed:
    b2:b0:70:5f:22:16:5f:1d:82:cd:46:e8:1f:dd:7b:
    d4:bb:fa:12:9f:60:fa:63:47:84:b8:f3:f6:73:50:
    83:40:58:05:fd:98:b4:1f:4d:03:c9:07:d6:6c:00:
    f3:d9:42:14:6d:85:f8:65:fe:05:08:cd:40:ca:ac:
    e0:96:04:0e:9d:af:60:14:11:01:d8:d6:5f:7b:fc:
    87:e1:f0:50:b1:bf:72:31

M.

--
Mo McRoberts - Analyst - BBC Archive Development,
Zone 1.08, BBC Scotland, 40 Pacific Quay, Glasgow G51 1DA,
MC3 D5, Media Centre, 201 Wood Lane, London W12 7TQ,
0141 422 6036 (Internal: 01-26036) - PGP key CEBCF03E



-----------------------------
http://www.bbc.co.uk
This e-mail (and any attachments) is confidential and
may contain personal views which are not the views of the BBC unless specifically stated.
If you have received it in
error, please delete it from your system.
Do not use, copy or disclose the
information in any way nor act in reliance on it and notify the sender
immediately.
Please note that the BBC monitors e-mails
sent or received.
Further communication will signify your consent to
this.
-----------------------------

Received on Tuesday, 19 March 2013 09:27:31 UTC