View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0007782Part 83: UAFX Offline EngineeringSpecpublic2022-02-24 18:502022-03-31 12:17
ReporterTodd Snide Assigned ToTodd Snide  
PrioritynormalSeveritymajorReproducibilityhave not tried
Status closedResolutionno change required 
Product Version1.00.00 RC2 
Target Version1.00.00 RC2Fixed in Version1.00.00 RC2 
Summary0007782: No possibility to add data to a Descriptor without signing the whole Descriptor again
Description

In Chapter 7.7 it is implied that it is not possible to add data to a Descriptor without signing the whole descriptor again.
Is there any means to do this? Or does one have to put another descriptor around the first one to achieve this?
This is the fourth paragraph and the bulleted items.

on behalf of Thomas Enzinger

TagsSecurity

Activities

Todd Snide

2022-03-04 15:11

developer   ~0016191

No changes made, the signature is for the whole document. If one changes the document the signature will be broken. Adding information means creating a new descriptor. The old descriptor can contained or referenced by the new descriptor.

Emanuel Kolb

2022-03-31 12:17

manager   ~0016511

clarified with Thomas

Issue History

Date Modified Username Field Change
2022-02-24 18:50 Todd Snide New Issue
2022-03-04 09:08 Emanuel Kolb Tag Attached: Security
2022-03-04 15:11 Todd Snide Assigned To => Todd Snide
2022-03-04 15:11 Todd Snide Status new => resolved
2022-03-04 15:11 Todd Snide Resolution open => no change required
2022-03-04 15:11 Todd Snide Fixed in Version => 1.00.00 RC2
2022-03-04 15:11 Todd Snide Note Added: 0016191
2022-03-31 12:17 Emanuel Kolb Status resolved => closed
2022-03-31 12:17 Emanuel Kolb Note Added: 0016511