> I’m looking at COSE versus more traditional alternatives, pros and
> cons, and a huge cons would be access to open source implementations
> and libraries.
>
> Anybody know of a good source of information about COSE libraries and
> open source implementations?I implement enough COSE (Sign1 only) to do RFC8366/Constrained-Vouchers at: https://github.com/AnimaGUS-minerva/ChariWTs I also use https://github.com/AnimaGUS-minerva/cbor-rust from https://github.com/franziskuskiefer/cbor-rust (Mozilla). I think that you'll find that COSE is rather a swiss-army-knife kit, and that many users will implement (and test) what they need, and leave the rest aside. Given the constrained focus of COSE, you may never see an all-singing library. Also, the way in which COSE integrates with CBOR libraries probably depends heavily on exactly how the data will be used. -- Michael Richardson <[email protected]> . o O ( IPv6 IøT consulting ) Sandelman Software Works Inc, Ottawa and Worldwide
signature.asc
Description: PGP signature
_______________________________________________ COSE mailing list [email protected] https://www.ietf.org/mailman/listinfo/cose
