View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0010546 | 10000-006: Mappings | Spec | public | 2025-09-30 13:18 | 2025-10-07 15:46 |
| Reporter | BjarneBostrom | Assigned To | Randy Armstrong | ||
| Priority | normal | Severity | minor | Reproducibility | always |
| Status | assigned | Resolution | open | ||
| Product Version | 1.05.04 | ||||
| Summary | 0010546: Clarification on ECC key derivations lengths regarding salts, bit vs. bytes | ||||
| Description | The 1.05.04 Part 6 section 6.8.1 (https://reference.opcfoundation.org/Core/Part6/v105/docs/6.8) defines ECC handshake for calculating the symmetric keys. It has the following things (skipping rest): I cannot find does L length mean in bits or in bytes. For example for ECC-brainpoolP256r1 on https://profiles.opcfoundation.org/profile/2066 the following is listed: Those also miss are they bits or bytes. I think they can be inferred to be in bits, (since e.g. AES128-CBC later on the page says key size is 128 bits). However, I would assume most programming languages to use bytes. Also, for RSA case the page mentioning deriving keys for it in https://reference.opcfoundation.org/Core/Part6/v105/docs/6.7.5 does tell in bytes, plus it uses different terms from the Profiles (" SigningKeyLength (from the DerivedSignatureKeyLength); "). In RSA to my knowledge it doesn't really matter, since everyone still has the same amount of data regardless do they think in bits or bytes, since the "number itself" isn't part of the data. But with ECC it does matter, because the salt would be different if '256' is encoded vs. '32'. Also the ECC tables look a lot similar to the RSA tables, but the ECC tables directly use the terms from the Profiles, thus the ambiguity. Most programming languages use bytes, but Profiles page uses bits (in this case, some other unitless values are in bytes e.g. nonce lengths), which one it is here? Thus, each place in the spec and Profiles page that lists key sizes should always have bits or bytes as the units, just in case. P.S. | ||||
| Tags | No tags attached. | ||||
| Commit Version | |||||
| Fix Due Date | |||||
| related to | 0010551 | assigned | Randy Armstrong | 10000-007: Profiles | Clarification on ECC key derivations lengths regarding salts, bit vs. bytes |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2025-09-30 13:18 | BjarneBostrom | New Issue | |
| 2025-10-07 15:44 | Jim Luth | Note Added: 0023449 | |
| 2025-10-07 15:44 | Jim Luth | Assigned To | => Randy Armstrong |
| 2025-10-07 15:44 | Jim Luth | Status | new => assigned |
| 2025-10-07 15:46 | Jim Luth | Issue cloned: 0010551 | |
| 2025-10-07 15:46 | Jim Luth | Relationship added | related to 0010551 |