Skip to content

Commit

Permalink
Update note about object identifiers
Browse files Browse the repository at this point in the history
Don't refer to object identifiers which are no longer used, and note
that JWK can be used to bind a key to a specific algorithm and hash.
  • Loading branch information
twiss authored and sideshowbarker committed Apr 25, 2023
1 parent fb5196b commit 97497c9
Showing 1 changed file with 5 additions and 10 deletions.
15 changes: 5 additions & 10 deletions spec/Overview.html
Original file line number Diff line number Diff line change
Expand Up @@ -14266,16 +14266,11 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
</table>
<div class=note>
<p>
For "id-RSASSA-PSS" and "id-RSAES-OAEP",
[[RFC5756]] recommends implementations should not include parameters
when PSS is used with a `subjectPublicKeyInfo`, and MUST NOT include parameters when OAEP
is used. However, when OAEP is used as part of a key transport (as an `AlgorithmIdentifier`),
implementations MUST include the parameters.
</p>
<p>
The {{KeyFormat/"spki"}} key format in this specification implies
`subjectPublicKeyInfo` and thus may not be appropriate when what is needed is an
`AlgorithmIdentifier` for transport.
The object identifiers used by this specification do not
include information about the specific algorithm and hash
that the key is intended to be used with. If this is
required, it's recommended that the {{KeyFormat/"jwk"}}
key format is used instead.
</p>
</div>
</section>
Expand Down

0 comments on commit 97497c9

Please sign in to comment.