search

cose-wg / CBOR-certificates

Other
11 stars 7 forks source link

draft-cose-cbor-revocation-management: optimizaion of fields in C509CertificateRevocationList #152

Open xipki opened 10 months ago

xipki commented 10 months ago

In the file draft-cose-cbor-revocation-management.md:

The C509CertificateRevocationList is defined as follows

 -- Not a mistake, but a typo in the original document, shall be C509CertificateRevocationList
TBSCertificateSigningRequest = (
   C509CertificateRevocationListType: int,
   issuer: Name,
   thisUpdate: Time,
   nextUpdate: Time,
   revokedCertificates: RevokedCertificates,
   crlExtensions: Extensions,
   issuerSignatureAlgorithm: AlgorithmIdentifier,
)

As discussed in #149, issuerSignatureAlgorithm field shall be before issuer. And since revokedCertificates may be very large, and crlExtensions may be required before parsing the whole revokedCertificates, I prefer to have crlExtensions before revokedCertificates.

Finally, we shall have the following structure

C509CertificateRevocationList = (
   C509CertificateRevocationListType: int,
   *** issuerSignatureAlgorithm: AlgorithmIdentifier, ***
   issuer: Name,
   thisUpdate: Time,
   nextUpdate: Time,
   *** crlExtensions: Extensions,***
   revokedCertificates: RevokedCertificates,
)