> On Jul 22, 2026, at 12:31 PM, Göran Selander 
> <[email protected]> wrote:
> 
>     • Laurence: I didn’t understand what is unclear with: "Hash of a 
> C509Certificate”. C509Certificate is a CBOR array with 11 elements, i.e., 
> starting with 0x8B. How does “CBOR-encoded C509Certificate” make that more 
> clear?

These parameters are very independent, right? If you are sending/receiving c5t, 
you are not sending/receiving c5b or c5c. 

The point is to remove mention of C509CertData from the paragraph discussing 
c5t because it has nothing to do with c5t. A c5t is a COSE_CertHash, an array 
of 2 with a hash algorithm ID and a bstr containing the hash. If you are 
sending or receiving a c5t, you are not using C509CertData at all.

The mention of C509CertData makes one think that maybe you should bstr wrap the 
C509Certificate before hashing. It leaves one trying to figure out why it is 
mentioned. (I suppose I may be missing something, but I couldn’t come up with 
any reason that it would be mentioned).

If you are sending or receiving c5b or c5c, that is different, then you are 
using C509CertData because it is part of a COSE_C509.

LL

_______________________________________________
COSE mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to