digitalbazaar / forge

A native implementation of TLS in Javascript and tools to write crypto-based and network-heavy webapps
https://digitalbazaar.com/
Other
5.01k stars 767 forks source link

CMS specs non-compliant generation of PKCS#7 EnvelopedData #1050

Open bchmnn opened 9 months ago

bchmnn commented 9 months ago

While trying to parse DERs of PKCS#7 EnvelopedData using RustCrypto, I found that node-forge generates CMS spec non-compliant ASN.1 structures.

Since the details have already been discussed in the RustCrypto/formats repo, I'll link it here: https://github.com/RustCrypto/formats/issues/1231.