Skip to content

Commit 98b7739

Browse files
twisspanva
twiss
authored and
panva
committed
Fix SubjectPublicKeyInfo ASN.1 mappings
The SubjectPublicKeyInfo structure defined in RFC 5280 contains a subjectPublicKey BIT STRING field, which contains the public key. For RSA and ECC keys, this again contains a DER encoded structure, but for ML-DSA, ML-KEM and SLH-DSA keys, it contains the raw public key directly. So, we should state that rather than claiming that it again contains another BIT STRING.
1 parent 2696582 commit 98b7739

1 file changed

Lines changed: 18 additions & 18 deletions

File tree

‎index.html‎

Lines changed: 18 additions & 18 deletions
Original file line numberDiff line numberDiff line change
@@ -9098,7 +9098,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
90989098
<tbody>
90999099
<tr>
91009100
<td>id-ml-dsa-44 (2.16.840.1.101.3.4.3.17)</td>
9101-
<td>BIT STRING</td>
9101+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
91029102
<td>
91039103
"`ML-DSA-44`"
91049104
</td>
@@ -9108,7 +9108,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
91089108
</tr>
91099109
<tr>
91109110
<td>id-ml-dsa-65 (2.16.840.1.101.3.4.3.18)</td>
9111-
<td>BIT STRING</td>
9111+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
91129112
<td>
91139113
"`ML-DSA-65`"
91149114
</td>
@@ -9118,7 +9118,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
91189118
</tr>
91199119
<tr>
91209120
<td>id-ml-dsa-87 (2.16.840.1.101.3.4.3.19)</td>
9121-
<td>BIT STRING</td>
9121+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
91229122
<td>
91239123
"`ML-DSA-87`"
91249124
</td>
@@ -9128,7 +9128,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
91289128
</tr>
91299129
<tr>
91309130
<td>id-alg-ml-kem-512 (2.16.840.1.101.3.4.4.1)</td>
9131-
<td>BIT STRING</td>
9131+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
91329132
<td>
91339133
"`ML-KEM-512`"
91349134
</td>
@@ -9138,7 +9138,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
91389138
</tr>
91399139
<tr>
91409140
<td>id-alg-ml-kem-768 (2.16.840.1.101.3.4.4.2)</td>
9141-
<td>BIT STRING</td>
9141+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
91429142
<td>
91439143
"`ML-KEM-768`"
91449144
</td>
@@ -9148,7 +9148,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
91489148
</tr>
91499149
<tr>
91509150
<td>id-alg-ml-kem-1024 (2.16.840.1.101.3.4.4.3)</td>
9151-
<td>BIT STRING</td>
9151+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
91529152
<td>
91539153
"`ML-KEM-1024`"
91549154
</td>
@@ -9158,7 +9158,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
91589158
</tr>
91599159
<tr>
91609160
<td>id-slh-dsa-sha2-128s (2.16.840.1.101.3.4.3.20)</td>
9161-
<td>BIT STRING</td>
9161+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
91629162
<td>
91639163
"`SLH-DSA-SHA2-128s`"
91649164
</td>
@@ -9168,7 +9168,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
91689168
</tr>
91699169
<tr>
91709170
<td>id-slh-dsa-sha2-128f (2.16.840.1.101.3.4.3.21)</td>
9171-
<td>BIT STRING</td>
9171+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
91729172
<td>
91739173
"`SLH-DSA-SHA2-128f`"
91749174
</td>
@@ -9178,7 +9178,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
91789178
</tr>
91799179
<tr>
91809180
<td>id-slh-dsa-sha2-192s (2.16.840.1.101.3.4.3.22)</td>
9181-
<td>BIT STRING</td>
9181+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
91829182
<td>
91839183
"`SLH-DSA-SHA2-192s`"
91849184
</td>
@@ -9188,7 +9188,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
91889188
</tr>
91899189
<tr>
91909190
<td>id-slh-dsa-sha2-192f (2.16.840.1.101.3.4.3.23)</td>
9191-
<td>BIT STRING</td>
9191+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
91929192
<td>
91939193
"`SLH-DSA-SHA2-192f`"
91949194
</td>
@@ -9198,7 +9198,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
91989198
</tr>
91999199
<tr>
92009200
<td>id-slh-dsa-sha2-256s (2.16.840.1.101.3.4.3.24)</td>
9201-
<td>BIT STRING</td>
9201+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
92029202
<td>
92039203
"`SLH-DSA-SHA2-256s`"
92049204
</td>
@@ -9208,7 +9208,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
92089208
</tr>
92099209
<tr>
92109210
<td>id-slh-dsa-sha2-256f (2.16.840.1.101.3.4.3.25)</td>
9211-
<td>BIT STRING</td>
9211+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
92129212
<td>
92139213
"`SLH-DSA-SHA2-256f`"
92149214
</td>
@@ -9218,7 +9218,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
92189218
</tr>
92199219
<tr>
92209220
<td>id-slh-dsa-shake-128s (2.16.840.1.101.3.4.3.26)</td>
9221-
<td>BIT STRING</td>
9221+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
92229222
<td>
92239223
"`SLH-DSA-SHAKE-128s`"
92249224
</td>
@@ -9228,7 +9228,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
92289228
</tr>
92299229
<tr>
92309230
<td>id-slh-dsa-shake-128f (2.16.840.1.101.3.4.3.27)</td>
9231-
<td>BIT STRING</td>
9231+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
92329232
<td>
92339233
"`SLH-DSA-SHAKE-128f`"
92349234
</td>
@@ -9238,7 +9238,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
92389238
</tr>
92399239
<tr>
92409240
<td>id-slh-dsa-shake-192s (2.16.840.1.101.3.4.3.28)</td>
9241-
<td>BIT STRING</td>
9241+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
92429242
<td>
92439243
"`SLH-DSA-SHAKE-192s`"
92449244
</td>
@@ -9248,7 +9248,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
92489248
</tr>
92499249
<tr>
92509250
<td>id-slh-dsa-shake-192f (2.16.840.1.101.3.4.3.29)</td>
9251-
<td>BIT STRING</td>
9251+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
92529252
<td>
92539253
"`SLH-DSA-SHAKE-192f`"
92549254
</td>
@@ -9258,7 +9258,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
92589258
</tr>
92599259
<tr>
92609260
<td>id-slh-dsa-shake-256s (2.16.840.1.101.3.4.3.30)</td>
9261-
<td>BIT STRING</td>
9261+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
92629262
<td>
92639263
"`SLH-DSA-SHAKE-256s`"
92649264
</td>
@@ -9268,7 +9268,7 @@ <h2>Mapping between Algorithm and SubjectPublicKeyInfo</h2>
92689268
</tr>
92699269
<tr>
92709270
<td>id-slh-dsa-shake-256f (2.16.840.1.101.3.4.3.31)</td>
9271-
<td>BIT STRING</td>
9271+
<td>Raw public key bytes (no ASN.1 wrapping)</td>
92729272
<td>
92739273
"`SLH-DSA-SHAKE-256f`"
92749274
</td>

0 commit comments

Comments
 (0)