bc-java
bc-java copied to clipboard
New feature: add support of draft-ietf-lamps-x509-shbs
Please consider to add the support of "Use of the HSS and XMSS Hash-Based Signature Algorithms in Internet X.509 Public Key Infrastructure" (https://datatracker.ietf.org/doc/draft-ietf-lamps-x509-shbs/).
Beside defining three new OBJECT IDENTIFIERs for the public key and signature HSS-LMS, XMSS, and XMSS^MT, the draft specifies also format of the SubjectPublicKeyInfo.subjectPublicKey field, which is different from the current BouncyCastle's implementation.
In current BC: SubjectPublicKeyInfo.subjectPublicKey = BitString-Wrap ( OctetString-Wrap( raw public key ) )
In the draft: SubjectPublicKeyInfo.subjectPublicKey = BitString-Wrap ( raw public key )