View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0009352Part 83: UAFX Offline EngineeringSpecpublic2024-01-12 11:342024-09-13 11:44
ReporterEmanuel Kolb Assigned ToTodd Snide  
PrioritynormalSeverityminorReproducibilityhave not tried
Status resolvedResolutionfixed 
Product Version1.00.02 
Target Version1.00.03Fixed in Version1.00.03 
Summary0009352: Allow RSASSA_PSS padding scheme for Descriptor signatures
Description

RSASSA_PSS pading scheme is defined in RFC9231.
The scheme should be added to the OE profiles (part 84), but part 83 also needs an update:

  • add RFC9231 to the references
  • RFC9231 references a newer version of XMLDSIG than written in part83. Need to analyze this and maybe upgrade the version in part83
TagsNo tags attached.

Relationships

related to 0009371 assignedBob Lattimer Part 84: UAFX Profiles Support RSASAA-PSS in offline engineering descriptor signatures 

Activities

Martin Dickopp

2024-06-12 09:10

reporter   ~0021309

There are three (relevant) XMLDSIG versions: The original 1.0 version (https://www.w3.org/TR/2002/REC-xmldsig-core-20020212/), a minor update to the 1.0 version ("Second Edition", https://www.w3.org/TR/2008/REC-xmldsig-core-20080610/), and the 1.1 version (https://www.w3.org/TR/2013/REC-xmldsig-core1-20130411/). Part 83 currently references the original 1.0 version, while RFC 9231 references the 1.1 version. The changes in the Second Edition with respect to 1.0 are described in https://www.w3.org/TR/2008/REC-xmldsig-core-20080610/explain.html; the changes in 1.1 w.r.t. the Second Edition are described in https://www.w3.org/TR/2013/NOTE-xmldsig-core1-explain-20130411/.

It seems to me that none of the changes are relevant to our use case, so we could reference 1.1 (https://www.w3.org/TR/2013/REC-xmldsig-core1-20130411/) in part 83.

The examples in Annex I seem to be based on version 1.0, so we might want to update them. In particular, they use the Canonical XML 1.0 canonicalization algorithm, which is no longer recommended (but still allowed). The current canonicalization algorithm is Canonical XML 1.1.

Emanuel Kolb

2024-09-12 12:29

manager   ~0021709

Fixed with the input from Martin

Issue History

Date Modified Username Field Change
2024-01-12 11:34 Emanuel Kolb New Issue
2024-01-12 11:34 Emanuel Kolb Status new => assigned
2024-01-12 11:34 Emanuel Kolb Assigned To => Emanuel Kolb
2024-01-25 15:24 Emanuel Kolb Relationship added related to 0009371
2024-06-12 09:10 Martin Dickopp Note Added: 0021309
2024-09-12 12:28 Emanuel Kolb Assigned To Emanuel Kolb => Todd Snide
2024-09-12 12:29 Emanuel Kolb Status assigned => resolved
2024-09-12 12:29 Emanuel Kolb Resolution open => fixed
2024-09-12 12:29 Emanuel Kolb Fixed in Version => 1.00.03
2024-09-12 12:29 Emanuel Kolb Note Added: 0021709
2024-09-13 11:44 Emanuel Kolb Product Version 1.00.03 => 1.00.02