Skip to content

Commit

Permalink
Reference BRs for algorithm object identifier encodings (#251)
Browse files Browse the repository at this point in the history
No need to duplicate these encodings in our own documents;
cross-referencing the BRs is sufficient.
  • Loading branch information
aarongable authored Oct 25, 2024
1 parent ad0699f commit f39852b
Showing 1 changed file with 2 additions and 14 deletions.
16 changes: 2 additions & 14 deletions CP-CPS.md
Original file line number Diff line number Diff line change
Expand Up @@ -1044,23 +1044,11 @@ See section 7.1.

#### 7.1.3.1 SubjectPublicKeyInfo

The `AlgorithmIdentifier` field of the `SubjectPublicKeyInfo` field of ISRG Certificates has the following (hex-encoded) DER bytes, corresponding to the key type:

| Type | Hex AlgorithmIdentifier |
| ----------- | -------------------------------------------- |
| RSA | `300d06092a864886f70d0101010500` |
| ECDSA P-256 | `301306072a8648ce3d020106082a8648ce3d030107` |
| ECDSA P-384 | `301006072a8648ce3d020106052b81040022` |
| ECDSA P-521 | `301006072a8648ce3d020106052b81040023` |
The `AlgorithmIdentifier` field of the `SubjectPublicKeyInfo` field of ISRG Certificates is byte-for-byte identical with one of the hexadecimal encodings specified by Section 7.1.3.1 of the Baseline Requirements.

#### 7.1.3.2 Signature AlgorithmIdentifier

When used in the context of a signature, fields of type `AlgorithmIdentifier` of all objects signed by ISRG CAs have the following (hex-encoded) DER bytes, corresponding to the issuer's key type and signature algorithm:

| Type | Hex AlgorithmIdentifier |
| ---------------- | -------------------------------- |
| RSA with SHA-256 | `300d06092a864886f70d01010b0500` |
| ECDSA P-384 | `300a06082a8648ce3d040303` |
When used in the context of a signature, fields of type `AlgorithmIdentifier` of all objects signed by ISRG CAs are byte-for-byte identical with one of the hexadecimal encodings specified by Section 7.1.3.2 of the Baseline Requirements.

### 7.1.4 Name forms

Expand Down

0 comments on commit f39852b

Please sign in to comment.