java - ASN.1 Encoding-Decoding -


i developing client-server program, client in java/c , server in c. have transport cryptographic data(like client should pass data server encrypt/decrypt, compute digest etc) , server has return result client.

in scenario, realize importance of using transport protocol identify data , pass data efficiently.

with regard, question is: asn.1 protocol use? know supported bc(on java) , openssl on c. idea transport data between client , server using asn.1 notation?

can please give me starting points this? if have better idea of existing protocol please let me know.

thanks!!

what bc , openssl support small part of asn.1. in fact long time there no full asn.1 implementation available, @ least public. telcos , telephone equipment manufactors have rather complete asn.1 implementations. @ moment advanced asn.1 implementation available public developed part of osmocom project, harald welte blogged it: http://laforge.gnumonks.org/weblog/2011/04/12#20110412-mapv1_available

and make matters worse, asn.1, in particular highly redundant encoding schemes (there @ least 3 different ways encode strings in asn.1) used cause several security issues in last years, due problems caused in processing x509 certificates. x509 broken technology hell, , imho better avoided. sure, ssl depends on it, getting certificate signed a "trusted" ca doesn't mean anything; ca can sign domain, , after looking through, browser trusts default no longer trusted browser.

so make long story short: asn.1 broken , should avoided in new designs. it's major widespread use outside of telephone networks x509 broken, too. i'd not use it. use json, bson, protocol buffers, netstrings or sane.


Comments

Popular posts from this blog

c# - how to write client side events functions for the combobox items -

exception - Python, pyPdf OCR error: pyPdf.utils.PdfReadError: EOF marker not found -