Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Mirja comments #324

Merged
merged 6 commits into from Apr 14, 2021
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Jump to
Jump to file
Failed to load files.
Diff view
Diff view
Prev
Add clarifying notes to SignatureScheme registry
  • Loading branch information
richsalz committed Mar 31, 2021
commit 6beb8d7d7d28ce5459cc03d2fc25dbaca5d22333
@@ -2019,7 +2019,21 @@ the log.
## Signature Algorithms {#signature_algorithms}

IANA is asked to establish a registry of signature algorithm values, named
"CT Signature Algorithms", that initially consists of:
"CT Signature Algorithms"

The following notes should be added:

- This is a subset of the TLS SignatureScheme Registry, limited to those
algorithms that are appropriate for CT. A major advantage of this is
leveraging the expertise of the TLS working group and its designated
experts.

- The value `0x0403` appears twice. While this may be confusing,
it is okay because the verification
process is the same for both algorithms, and the choice of which to use
when generating a signature is purely internal to the log server.

The registry should initially consist of:

|--------------------------------+----------------------------------------------------+-------------------------------|
| SignatureScheme Value | Signature Algorithm | Reference / Assignment Policy |