letsencrypt/website

Doubt regarding a-warm-welcome-to-asn1-and-der.md

Closed this issue · 4 comments

Hello, this is just a request for clarification.

In the page a-warm-welcome-to-asn1-and-der.md the following sentence appears:

In DER, a SET must be encoded in ascending order by the serialized value of each element.

I am not implying that this is not right, but I would like to understand which is the related normative source. The only applicable standard I know of, that is X.690 (ISO 8825-1), just says (under §10.3):

The encodings of the component values of a set value shall appear in an order determined by their tags ...

Is this wording equivalent to yours? It does not seem so to me, but maybe I am missing something.

Please help me understand ....

No matter, I've found myself the answer in section §11.6 of X.690.

Bye.

section §11.6 of X.690.

Just for completeness, You're talking about https://www.itu.int/rec/T-REC-X.690-202102-I/en, right?

11.6 Set-of components

The encodings of the component values of a set-of value shall appear in ascending order, the encodings being compared as octet strings with the shorter components being padded at their trailing end with 0-octets.
NOTE – The padding octets are for comparison purposes only and do not appear in the encodings

Exactly.