# Re: JDK's Security API recommendations

David Brownell (db@Eng)
Fri, 28 Aug 1998 08:23:48 -0700

- Messages sorted by: [ date ][ thread ][ subject ][ author ]
- Next message: Jan Luehe: "Re: Problem with KeyStore"
- Previous message: Roy Jones: "Using Java Plug-in and trying to talk to an HTTPS URL."
- Maybe in reply to: Roni Korenshtein: "JDK's Security API recommendations"

Roni Korenshtein wrote:
>
> > For example, NIST and OIW define the result of a DSA signature
> > to be an ASN.1 SEQUENCE of "r" and "s", and PKCS#1 specifies
> > the format of an RSA signature.
>
> Jan, I don't think the JDK specifies in what format
> a signature byte array should be returned.

It's actually in the specification for what it means
to get a signature object of a particular type, like
"DSA" (DSS) or "RSA with SHA1". Has been since early
in the JDK 1.1 development cycle.

The rationale was more or less that we had no examples
of cases where more than one format got used for a given
algorithm. Maybe Sun has such examples now.

- Dave

- Next message: Jan Luehe: "Re: Problem with KeyStore"
- Previous message: Roy Jones: "Using Java Plug-in and trying to talk to an HTTPS URL."
- Maybe in reply to: Roni Korenshtein: "JDK's Security API recommendations"