- From: Adam Powers via GitHub <sysbot+gh@w3.org>
- Date: Mon, 27 Feb 2017 19:38:04 +0000
- To: public-webauthn@w3.org
apowers313 has just created a new issue for
https://github.com/w3c/webauthn:
== Credential CBOR ==
A few thoughts on simplifying the attestation credential CBOR in
[Section 5.3.1](https://www.w3.org/TR/webauthn/#sec-attestation-data):
* Convert the CBOR map to a CBOR array / list with values at
well-known positions in the array: 0 = alg; 1 = x; 2 = y; etc. This
makes the final size smaller, since CBOR maps use strings for the
indexes. Currently the difference is only two bytes ("alg" = 3 bytes;
"x" = 1 byte; "1" = 1 byte; total 5 bytes as opposed to 3 bytes when
using array indexes), but if new algorithms are added that have long
strings for keys it may make a bigger difference.
* The CDDL currently specifies using "biguint" and "uint" for the
various crypto parameters. These are essentially [semantically
tagged](https://tools.ietf.org/html/rfc7049#section-2.4) byte strings.
I would suggest just using byte strings instead of "biguint" and
"uint". Although the current spec is is more semantically correct,
adding semantic tags is just extra overhead and only creates
difficulties when trying to encode / decode with off-the-shelf CBOR
libraries.
Please view or discuss this issue at
https://github.com/w3c/webauthn/issues/366 using your GitHub account
Received on Monday, 27 February 2017 19:38:11 UTC