isakmp sig payload encoding

[Jeff Pickering <jpickering@phase2net.com>]

I need a spec interpretation for encoding of a DSS signature
in oakley phase1.

Section 5.1 of the IKE document says that "DSS signatures MUST be
encoded as r followed by s". Does this mean:

a) a BER constructed sequence consisting of 2 integers, or
b) 2 BER encoded integers, or
c) 2 raw unencoded integers because the key will specify the
   length of the integers?

All comments appreciated.

jeff

---

Follow-Ups:

• isakmp sig payload encoding
• From: Tero Kivinen <kivinen@ssh.fi>

---

• Prev by Date: Re: Revised drafts -- Arch, AH, ESP
• Next by Date: Re: IPsec and Fragmentation
• Prev by thread: Re: Serous system failure
• Next by thread: isakmp sig payload encoding
• Index(es):
  • Main
  • Thread