<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en">
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
<title>
GitLab
</title>
<style>img {
max-width: 100%; height: auto;
}
</style>
</head>
<body>
<div class="content">
<div></div>
<p dir="auto">The <a href="https://tools.ietf.org/html/rfc6376#section-3.6.1" rel="nofollow noreferrer noopener" target="_blank">DKIM base specification</a> states for the k= flag “The "rsa" key type indicates that an ASN.1 DER-encoded [ITU-X660-1997] RSAPublicKey (see [RFC3447], Sections 3.1 and A.1.1) is being used in the "p=" tag.". The p= flag is a single, base64 encoded string. The key-data is imported using <a href="https://www.gnutls.org/manual/html_node/Abstract-key-API.html#gnutls_005fpubkey_005fimport" rel="nofollow noreferrer noopener" target="_blank">gnutls_pubkey_import</a>.</p>
<ul dir="auto">
<li>Write in the documentation that gnutls_pubkey_import deals with ASN.1 data</li>
</ul>
<p dir="auto"><a href="https://tools.ietf.org/html/rfc8463#section-4.2" rel="nofollow noreferrer noopener" target="_blank">RFC8463 extends</a> the base DKIM specification: “The p= value in the key record is the Ed25519 public key encoded in base64.”</p>
<p dir="auto">Passing the ed25519 key over gnutls_pubkey_import returns -73 (GNUTLS_E_ASN1_TAG_ERROR) in _asn1_strict_der_decode(), with the key from DNS TXT 201803e._domainkey.kitterman.com .</p>
<p dir="auto">As RFC 8463 doesn’t say anything about ASN.1 I guess ed25519 is not ASN.1 DER encoded, contrary to RSAPublicKey.</p>
<p dir="auto">What function shall be used to import that data? / How shall the key from DNS be imported into a public key, after the base64 decoding?</p>
<p dir="auto">For gnutls_pubkey_import_ecc_raw() the documentation states “In EdDSA curves the y parameter will be NULL and the other parameters will be in the native format for the curve.” What are the other parameters? There is only one other parameter - “x”.</p>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #777777;">
—
<br>
Reply to this email directly or <a href="https://gitlab.com/gnutls/gnutls/issues/613">view it on GitLab</a>.
<br>
You're receiving this email because of your account on gitlab.com.
If you'd like to receive fewer emails, you can
<a href="https://gitlab.com/sent_notifications/fd85962b856ff8203bd030a7d59a6f9e/unsubscribe">unsubscribe</a>
from this thread or
adjust your notification settings.
<script type="application/ld+json">{"@context":"http://schema.org","@type":"EmailMessage","action":{"@type":"ViewAction","name":"View Issue","url":"https://gitlab.com/gnutls/gnutls/issues/613"}}</script>
</p>
</div>
</body>
</html>