Skip to content

Commit 4ab5d24

Browse files
committed
re-orders asn.1 module to appendix and use automatic appendix naming/tooling
1 parent 2ecb3c1 commit 4ab5d24

File tree

1 file changed

+32
-42
lines changed

1 file changed

+32
-42
lines changed

draft-ietf-oauth-status-list.md

Lines changed: 32 additions & 42 deletions
Original file line numberDiff line numberDiff line change
@@ -1502,41 +1502,7 @@ IANA is requested to register the following OID "1.3.6.1.5.5.7.3.TBD" in the "SM
15021502

15031503
IANA is requested to register the following OID "1.3.6.1.5.5.7.0.TBD" in the "SMI Security for PKIX Module Identifier" registry (1.3.6.1.5.5.7.0), this OID is defined in section [](#asn1-module).
15041504

1505-
# Appendix A. ASN.1 Module {#asn1-module}
1506-
{:numbered="false"}
1507-
1508-
The following module adheres to ASN.1 specifications {{X.680}} and {{X.690}}.
1509-
1510-
~~~
1511-
<CODE BEGINS>
1512-
1513-
OauthStatusSigning-EKU
1514-
{ iso(1) identified-organization(3) dod(6) internet(1)
1515-
security(5) mechanisms(5) pkix(7) id-mod(0)
1516-
id-mod-oauth-status-signing-eku (TBD) }
1517-
1518-
DEFINITIONS IMPLICIT TAGS ::=
1519-
BEGIN
1520-
1521-
-- OID Arc
1522-
1523-
id-kp OBJECT IDENTIFIER ::=
1524-
{ iso(1) identified-organization(3) dod(6) internet(1)
1525-
security(5) mechanisms(5) pkix(7) kp(3) }
1526-
1527-
-- OAuth Extended Key Usage
1528-
1529-
id-kp-oauthStatusSigning OBJECT IDENTIFIER ::= { id-kp TBD }
1530-
1531-
END
1532-
1533-
<CODE ENDS>
1534-
~~~
1535-
1536-
--- back
1537-
15381505
# Acknowledgments
1539-
{:numbered="false"}
15401506

15411507
We would like to thank
15421508
Andrii Deinega,
@@ -1565,13 +1531,43 @@ Torsten Lodderstedt
15651531

15661532
for their valuable contributions, discussions and feedback to this specification.
15671533

1534+
--- back
1535+
1536+
# ASN.1 Module {#asn1-module}
1537+
1538+
The following module adheres to ASN.1 specifications {{X.680}} and {{X.690}}.
1539+
1540+
~~~
1541+
<CODE BEGINS>
1542+
1543+
OauthStatusSigning-EKU
1544+
{ iso(1) identified-organization(3) dod(6) internet(1)
1545+
security(5) mechanisms(5) pkix(7) id-mod(0)
1546+
id-mod-oauth-status-signing-eku (TBD) }
1547+
1548+
DEFINITIONS IMPLICIT TAGS ::=
1549+
BEGIN
1550+
1551+
-- OID Arc
1552+
1553+
id-kp OBJECT IDENTIFIER ::=
1554+
{ iso(1) identified-organization(3) dod(6) internet(1)
1555+
security(5) mechanisms(5) pkix(7) kp(3) }
1556+
1557+
-- OAuth Extended Key Usage
1558+
1559+
id-kp-oauthStatusSigning OBJECT IDENTIFIER ::= { id-kp TBD }
1560+
1561+
END
1562+
1563+
<CODE ENDS>
1564+
~~~
1565+
15681566
# Size comparison {#size-comparison}
1569-
{:unnumbered}
15701567

15711568
The following tables show a size comparison for a Status List (compressed byte array as defined in [](#status-list-byte-array) and a compressed Byte Array of UUIDs (as an approximation for a Certificate Revocation List). Readers must be aware that these are not sizes for complete Status List Tokens in JSON/CBOR nor Certificate Revocation Lists (CRLs), as they don't contain metadata, certificates and signatures.
15721569

15731570
## Status List size for varying sizes and revocation rates
1574-
{:unnumbered}
15751571

15761572
| Size | 0.01% | 0.1% | 1% | 2% | 5% | 10% | 25% | 50% | 75% | 100% |
15771573
| 100k | 81 B | 252 B | 1.4 KB | 2.3 KB | 4.5 KB | 6.9 KB | 10.2 KB | 12.2 KB | 10.2 KB | 35 B |
@@ -1581,7 +1577,6 @@ The following tables show a size comparison for a Status List (compressed byte a
15811577
{: title="Status List Size examples for varying sizes and revocation rates"}
15821578

15831579
## Compressed array of UUIDv4 (128 bit UUIDs) for varying sizes and revocation rates
1584-
{:unnumbered}
15851580

15861581
This is a simple approximation of a Certificate Revocation List using an array of UUIDs without any additional metadata (128 bit UUID per revoked entry).
15871582

@@ -1593,14 +1588,12 @@ This is a simple approximation of a Certificate Revocation List using an array o
15931588
{: title="Size examples for 128 bit UUIDs for varying sizes and revocation rates"}
15941589

15951590
# Test vectors for Status List encoding {#test-vectors}
1596-
{:unnumbered}
15971591

15981592
All examples here are given in the form of JSON or CBOR payloads. The examples are encoded according to [](#status-list-json) for JSON and [](#status-list-cbor) for CBOR. The CBOR examples are displayed as hex values.
15991593

16001594
All values that are not mentioned for the examples below can be assumed to be 0 (VALID). All examples are initialized with a size of 2^20 entries.
16011595

16021596
## 1 bit Status List
1603-
{:unnumbered}
16041597

16051598
The following example uses a 1 bit Status List (2 possible values):
16061599

@@ -1631,7 +1624,6 @@ CBOR encoding:
16311624
~~~~~~~~~~
16321625

16331626
## 2 bit Status List
1634-
{:unnumbered}
16351627

16361628
The following example uses a 2 bit Status List (4 possible values):
16371629

@@ -1662,7 +1654,6 @@ CBOR encoding:
16621654
~~~~~~~~~~
16631655

16641656
## 4 bit Status List
1665-
{:unnumbered}
16661657

16671658
The following example uses a 4 bit Status List (16 possible values):
16681659

@@ -1697,7 +1688,6 @@ CBOR encoding:
16971688
~~~~~~~~~~
16981689

16991690
## 8 bit Status List
1700-
{:unnumbered}
17011691

17021692
The following example uses a 8 bit Status List (256 possible values):
17031693

0 commit comments

Comments
 (0)