java - ASN.1 Encoding-Decoding -
i developing client-server program, client in java/c , server in c. have transport cryptographic data(like client should pass data server encrypt/decrypt, compute digest etc) , server has return result client.
in scenario, realize importance of using transport protocol identify data , pass data efficiently.
with regard, question is: asn.1 protocol use? know supported bc(on java) , openssl on c. idea transport data between client , server using asn.1 notation?
can please give me starting points this? if have better idea of existing protocol please let me know.
thanks!!
what bc , openssl support small part of asn.1. in fact long time there no full asn.1 implementation available, @ least public. telcos , telephone equipment manufactors have rather complete asn.1 implementations. @ moment advanced asn.1 implementation available public developed part of osmocom project, harald welte blogged it: http://laforge.gnumonks.org/weblog/2011/04/12#20110412-mapv1_available
and make matters worse, asn.1, in particular highly redundant encoding schemes (there @ least 3 different ways encode strings in asn.1) used cause several security issues in last years, due problems caused in processing x509 certificates. x509 broken technology hell, , imho better avoided. sure, ssl depends on it, getting certificate signed a "trusted" ca doesn't mean anything; ca can sign domain, , after looking through, browser trusts default no longer trusted browser.
so make long story short: asn.1 broken , should avoided in new designs. it's major widespread use outside of telephone networks x509 broken, too. i'd not use it. use json, bson, protocol buffers, netstrings or sane.
Comments
Post a Comment