[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [saag] Common labeled security (comment on CALIPSO, labeled NFSv4)



Nico,

I usually try to find the corresponding ITU spec because I think ITU gives out all of it's ASN.1 modules freely? Anyway, here's a link to the ITU-T X.841 Spec:
http://www.itu.int/ITU-T/asn1/database/itu-t/x/x841/2000/index.html

The one thing that's missing from the module is definitions for security categories. Some suggested categories were defined in Annex B, but it's an informative annex so there's no ASN.1 freely available (they wouldn't allow them in the normative text/module). Those categories are based on FIPS 188 (the syntax is not the same).

Note that some of the syntax for labels has made it's way to some IDs/RFCs notably RFC 2634.

spt

Nicolas Williams wrote:
On Fri, Apr 03, 2009 at 03:51:46PM -0400, Santosh Chokhani wrote:
NSA document on SPIF also had ASN.1 module for SPIF.

Ah, good!  A link would be great.

May be you can use the applicable concepts to get a head start on XML.

If the ASN.1 module can be obtained freely then the XML follows
trivially (and, as I said, has already been done).
_______________________________________________
saag mailing list
saag at ietf.org
https://www.ietf.org/mailman/listinfo/saag


Note Well: Messages sent to this mailing list are the opinions of the senders and do not imply endorsement by the IETF.