XML Signature section 6.4.2: Wrong ASN.1 designator for non sha-1 hashes? from Thomas Roessler on 2009-05-11 (public-xmlsec@w3.org from May 2009)

From: Thomas Roessler <tlr@w3.org>
Date: Mon, 11 May 2009 16:44:48 +0200
To: XMLSec WG Public List <public-xmlsec@w3.org>
Message-Id: <5A8514CE-E40A-4483-A49B-4CEF9FD4F005@w3.org>

Section 6.4.2 of XML Signature defines the RSA-* signature algorithms,  
but seems to refer to the ASN.1 BER algorithm designator for SHA1  
regardless of the hash algorithm that is used.

RFC 4051 (from which we leverage the algorithm identifier and  
definition) asks for the correct designator to be used.

Sounds like a bug to me.

--
Thomas Roessler, W3C  <tlr@w3.org>

Received on Monday, 11 May 2009 14:44:59 UTC