Re: Cert Ontology

On 19 March 2013 10:27, Mo McRoberts <Mo.McRoberts@bbc.co.uk> wrote:

>
> On Tue 2013-Mar-19, at 09:20, Henry Story <henry.story@bblfish.net> wrote:
>
> >
> > On 19 Mar 2013, at 09:49, Mo McRoberts <Mo.McRoberts@bbc.co.uk> wrote:
> >
> >> curiously, the ASN.1 modules for RSA and DSA (in the context of PKIX)
> differ in terms of naming…
> >>
> >> where RSA speaks of 'modulus' and 'publicExponent', DSA is exclusively
> 'p', 'q', and 'g' for the parameters and 'y' for the key itself.
> >>
> >> I can't help but wonder if consistency should perhaps outweigh
> friendlier naming (such that 'p' in an DSA key structure maps to 'p' in a
> set of RDF triples).
> >>
> >> rdfs:label and rdfs:comment within the ontology of course can go a long
> way in clarifying things…
> >
> > This seems to be what the XMLSIG standard does
> >
> > http://www.w3.org/TR/xmldsig-core/#sec-DSAKeyValue
> >
> > Next one would have to specify what the types of the values for each of
> those relations are. Are they integers or hexBinaries, hexBinaries for very
> long integers - since that is the only way to encode those in a
> hexadecidmal format that can save a bit of space. Ie: what is the domain of
> those values?
>
>
> From openssl dsa -in <key> -text, they all look pretty long:
>
> pub:
>     6b:4c:12:1a:bf:ce:c6:67:4d:80:52:69:1e:9b:2d:
>     5f:52:8d:84:cf:ed:11:47:2c:77:ff:ac:5c:3a:d1:
>     4f:bc:e0:0b:a1:9a:b6:45:68:ee:4b:1f:0f:57:c4:
>     26:e6:49:55:43:55:0c:3d:52:38:58:26:fc:43:f6:
>     94:7e:e3:5d:e8:61:56:20:98:41:31:29:21:1d:68:
>     c2:65:b3:3d:a7:83:99:b8:62:fb:99:c4:1d:08:4b:
>     0c:55:80:4a:c0:33:1d:e3:3d:59:c2:87:9c:4e:96:
>     74:63:95:3d:2e:4c:e1:57:77:18:24:7c:25:56:f4:
>     73:7b:1d:6e:00:0f:54:aa
> P:
>     00:a2:14:56:2a:ec:fd:2e:d0:27:df:ec:9b:ae:e9:
>     b2:d4:20:09:92:2b:38:b3:22:69:35:f8:cd:c0:8a:
>     14:14:a6:41:29:f3:44:f2:01:bb:05:1a:69:5d:7f:
>     3b:a1:2c:a8:bb:65:d0:a2:fc:52:b4:37:13:53:bd:
>     14:5e:83:52:78:cf:e4:2c:da:d5:1c:2f:18:10:94:
>     8d:9e:a1:80:ea:76:8c:ba:ca:7a:e4:71:06:0f:59:
>     8c:8f:c5:97:1e:38:6f:e3:6e:02:3f:25:40:fd:da:
>     66:1e:7c:62:9f:20:3e:87:39:d2:a7:50:48:46:da:
>     28:ec:50:0f:7e:18:08:77:b3
> Q:
>     00:d8:1c:26:56:38:80:9f:ea:2d:62:33:15:d9:b7:
>     ae:2a:8e:cc:d4:fd
>

Thanks, yes I think Q is the shortest and can be 160, 224 or 256 bits which
is too big for most Longs


> G:
>     07:90:e6:75:ca:9d:02:d9:b4:e3:54:72:c5:26:e9:
>     d8:43:75:85:48:80:ca:58:c4:39:79:08:56:de:10:
>     e2:f4:16:56:1c:f4:cb:d4:c8:0e:e8:86:b7:94:ed:
>     b2:b0:70:5f:22:16:5f:1d:82:cd:46:e8:1f:dd:7b:
>     d4:bb:fa:12:9f:60:fa:63:47:84:b8:f3:f6:73:50:
>     83:40:58:05:fd:98:b4:1f:4d:03:c9:07:d6:6c:00:
>     f3:d9:42:14:6d:85:f8:65:fe:05:08:cd:40:ca:ac:
>     e0:96:04:0e:9d:af:60:14:11:01:d8:d6:5f:7b:fc:
>     87:e1:f0:50:b1:bf:72:31
>
> M.
>
> --
> Mo McRoberts - Analyst - BBC Archive Development,
> Zone 1.08, BBC Scotland, 40 Pacific Quay, Glasgow G51 1DA,
> MC3 D5, Media Centre, 201 Wood Lane, London W12 7TQ,
> 0141 422 6036 (Internal: 01-26036) - PGP key CEBCF03E
>
>
>
> -----------------------------
> http://www.bbc.co.uk
> This e-mail (and any attachments) is confidential and
> may contain personal views which are not the views of the BBC unless
> specifically stated.
> If you have received it in
> error, please delete it from your system.
> Do not use, copy or disclose the
> information in any way nor act in reliance on it and notify the sender
> immediately.
> Please note that the BBC monitors e-mails
> sent or received.
> Further communication will signify your consent to
> this.
> -----------------------------
>