[pkix] [Errata Verified] RFC6960 (6165)

The following errata report has been verified for RFC6960,
"X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP". 

--------------------------------------
You may review the report below and at:
https://www.rfc-editor.org/errata/eid6165

--------------------------------------
Status: Verified
Type: Technical

Reported by: Yury Strozhevsky <[email protected]>
Date Reported: 2020-05-11
Verified by: Deb Cooley (IESG)

Section: 1

Original Text
-------------
---

Corrected Text
--------------
   o  Appendix B.1 provides correct KeyHash type processing description. Now SHA-1 hash must be calculated for responder's public key ASN.1 value without tag, length and unused bits.


Notes
-----
The RFC6960 changes OCSP protocol in part of KeyHash type calculation. In RFC2560 there is the description:
   KeyHash ::= OCTET STRING -- SHA-1 hash of responder's public key
   (excluding the tag and length fields)

But in Appendix B.1, which is the major OCSP descriptive module, stated:
KeyHash ::= OCTET STRING -- SHA-1 hash of responder's public key
                         -- (i.e., the SHA-1 hash of the value of the
                         -- BIT STRING subjectPublicKey [excluding
                         -- the tag, length, and number of unused
                         -- bits] in the responder's certificate)

The difference is in what would be under SHA-1 hash. In RFC2560 KeyHash would be calculated for entire BIT STRING value, with "unused bits" byte (first byte in BIT STRING value), but Appendix B.1 in RFC6960 states that SHA-1 hash must be calculated for BIT STRING value without "unused bits".

--------------------------------------
RFC6960 (draft-ietf-pkix-rfc2560bis-20)
--------------------------------------
Title               : X.509 Internet Public Key Infrastructure Online Certificate Status Protocol - OCSP
Publication Date    : June 2013
Author(s)           : S. Santesson, M. Myers, R. Ankney, A. Malpani, S. Galperin, C. Adams
Category            : PROPOSED STANDARD
Source              : Public-Key Infrastructure (X.509)
Stream              : IETF
Verifying Party     : IESG

_______________________________________________
pkix mailing list -- [email protected]
To unsubscribe send an email to [email protected]