W3C home > Mailing lists > Public > public-xmlsec@w3.org > February 2009

Re: ACTION-219: ECPointType

From: Thomas Roessler <tlr@w3.org>
Date: Fri, 20 Feb 2009 22:54:18 +0100
To: Brian LaMacchia <bal@exchange.microsoft.com>
Message-Id: <0A116491-309F-4600-8728-D32302CFF138@w3.org>
Cc: XMLSec WG Public List <public-xmlsec@w3.org>
On 20 Feb 2009, at 22:49, Brian LaMacchia wrote:

>  The Hash element is an optional element that specifies the hash  
> algorithm used to generate the
>  elliptic curve E and/or base point G verifiably at random.  If the  
> Hash element is present then the
>  optional Seed element in the Curve element must also be present.
>
> COMMENT 1: I added the second sentence that if you specify the Hash  
> element you must also specify the Seed element, because the Hash  
> element doesn't make sense without the Seed element (they get used  
> together to verify the curve was generated randomly)

It would seem more in line with the overall style of XML Signature to  
put the hash algorithm into an attribute, and the Seed into a child of  
Hash.  Having the two of them as siblings makes some sense when there  
is a default hash algorithm specified.

So, I'd suggest something like this:

   <Hash Algorithm="http://...">
	<Seed>asdfasdf</Seed>
   </Hash>

... instead of the current approach.

Does this make sense, or am I missing something?

Or would something like...

   <Seed Algorithm="http://...">asdfasdf</Seed>

make more sense?
Received on Friday, 20 February 2009 21:54:28 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Monday, 7 December 2009 10:43:57 GMT