Brian Sipos

Concatenated tstr/bstr fragments

5

The definition in [Section G.4 of RFC8610](https://tools.ietf.org/html/rfc8610#appendix-G.4) allows whitespace-separated `tstr` and `bstr` fragments to be treated as one whole concatenated value. When I attempt to use this with the tool...

Download fails when host cert is signed by private CA

3

## Affected Puppet, Ruby, OS and module versions/distributions - Puppet: 5.3.10 - Ruby: 2.0.0.648 - Distribution: CentOS 7 - Module version: 4.4.0 ## How to reproduce (e.g Puppet code you...

No handling of X509 Name Constraints

1

### Summary The current X509 decoder and data model does not attempt to handle the [Name Constraints](https://www.rfc-editor.org/rfc/rfc5280.html#section-4.2.1.10) extension value. This means that any certificate which contains the extension marked as...

On Ubuntu 22.04 the virtualenv doesn't have bin/pip available

1

When I follow the installation instructions and run `make -f lib/setup.mk` the setup gets part way through and then fails out with the message: ``` $REPO/lib/.venv/bin/pip install -r lib/requirements.txt bash:...

Provide public API to determine decoder item offsets

5

I would like to be able to extract the encoded form of a CBOR item from within a (possibly deep) structure. One way to do this is to determine the...

Input of salt not available to EC-HKDF interfaces

1

The KDF interface has an optional "salt" parameter but when it is used by `EC2` and `OKP` classes there is no way to provide a salt alongside or as part...

Standard key conversion to/from cryptography library

1

Currently the `EC2Key` and `OKPKey` classes use the `cryptography` library internally to do work but don't expose API to use these intermediate representations. When interoperating between `cose` and other libraries...

For direct key-wrap algorithms like A128KW, the current implementation of `KeyWrap._compute_kek()` returns just the `k` value and assumes that the `key_ops` is WrapOp or UnwrapOp for `encrypt()` and `decrypt()` respectively....

Missing explanation of how to access multiple values in a BPTREE_MULTI

1

There is an explanation for how to declare a `BPTREE_DEF*` separately from a `BPTREE_MULTI_DEF*` and how it affects the storage logic and key uniqueness, but I don't see a way...

I have a project with some javascript entrypoints containing a top line of ``` #!/usr/bin/env node ``` which seems to be a common (but maybe not well specified) extension to...