bc-java icon indicating copy to clipboard operation
bc-java copied to clipboard

New feature: add support of draft-ietf-lamps-x509-shbs

Open xipki opened this issue 10 months ago • 0 comments

Please consider to add the support of "Use of the HSS and XMSS Hash-Based Signature Algorithms in Internet X.509 Public Key Infrastructure" (https://datatracker.ietf.org/doc/draft-ietf-lamps-x509-shbs/).

Beside defining three new OBJECT IDENTIFIERs for the public key and signature HSS-LMS, XMSS, and XMSS^MT, the draft specifies also format of the SubjectPublicKeyInfo.subjectPublicKey field, which is different from the current BouncyCastle's implementation.

In current BC: SubjectPublicKeyInfo.subjectPublicKey = BitString-Wrap ( OctetString-Wrap( raw public key ) )

In the draft: SubjectPublicKeyInfo.subjectPublicKey = BitString-Wrap ( raw public key )

xipki avatar Feb 23 '25 21:02 xipki