Is ASN.1 strictly a crypto algorithm?

[toscalix]

Background

• Wikipadia article about ASN.1
• ISO Standard [ISO/IEC 8824-1:2021](ISO/IEC 8824-1:2021), including the RSS
• NCBI
• Articles
  • From Technology Appraisals Ltd
  • From SDG Digital

Description

ASN.1, Abstract Syntax Notation One, is an International Standards Organization (ISO) data representation format used to achieve interoperability between platforms. NCBI uses ASN.1 for the storage and retrieval of data such as nucleotide and protein sequences, structures, genomes, PubMed records, and more. It permits computers and software systems of all types to reliably exchange both the data structure and content.

DoD

I would like to have the confirmation of a cryptographer on this one.

• [ ] Cryptographer confirmed
  • Cryptographer name:
  • Cryptographer contact:

[juliancoccia]

My two cents:

ASN.1 is often used to define structures for cryptographic objects (like keys, signatures, etc) in protocols and standards. its use in cryptographic systems and protocols can affect the ECCN classification of the software that implements it.

While ASN.1 is a notation, specific implementations of ASN.1 encoders/decoders in software could potentially be subject to export controls Therefore, while not an actual cryptographic algorithm, detecting presence of ASN.1 is very relevant for the ECCN classification use case.

[toscalix]

Then it might be worth keeping it here in this data set but not in the SPDX list.