Re: Sample keys format

Blake Ramsdell wrote:
> 
> I have two questions about the key formats that should be used for the
> public and private keys.
> 
> 1. Should the public keys be in RFC2459 SubjectPublicKeyInfo format (that
> is, the AlgorithmIdentifier followed by BIT STRING wrapping the public key).
> 

As with Jim, no preference as long as its in the certificate.

> 2. Should the private keys be in PKCS #8 PrivateKeyInfo format:
> 

For DSA and DH is there any other format? For RSA there is PKCS#1 as an
alternative.

The other problem is whether there is a X9.42 DH private key format
specified anywhere at all? There is a fairly obvious extension of PKCS#3
DH PrivateKeyInfo format though.

Personally it doesn't matter, I can handle or convert any format.

Steve.
-- 
Dr Stephen N. Henson.   http://www.drh-consultancy.demon.co.uk/
Personal Email: [email protected] 
Senior crypto engineer, Celo Communications: http://www.celocom.com/
Core developer of the   OpenSSL project: http://www.openssl.org/
Business Email: [email protected] PGP key: via homepage.