> On Jul 22, 2026, at 12:31 PM, Göran Selander > <[email protected]> wrote: > > • Laurence: I didn’t understand what is unclear with: "Hash of a > C509Certificate”. C509Certificate is a CBOR array with 11 elements, i.e., > starting with 0x8B. How does “CBOR-encoded C509Certificate” make that more > clear?
These parameters are very independent, right? If you are sending/receiving c5t, you are not sending/receiving c5b or c5c. The point is to remove mention of C509CertData from the paragraph discussing c5t because it has nothing to do with c5t. A c5t is a COSE_CertHash, an array of 2 with a hash algorithm ID and a bstr containing the hash. If you are sending or receiving a c5t, you are not using C509CertData at all. The mention of C509CertData makes one think that maybe you should bstr wrap the C509Certificate before hashing. It leaves one trying to figure out why it is mentioned. (I suppose I may be missing something, but I couldn’t come up with any reason that it would be mentioned). If you are sending or receiving c5b or c5c, that is different, then you are using C509CertData because it is part of a COSE_C509. LL _______________________________________________ COSE mailing list -- [email protected] To unsubscribe send an email to [email protected]
