org.bouncycastle.asn1.plants
Interface MTCObjectIdentifiers

public interface MTCObjectIdentifiers

OID constants for Merkle Tree Certificates (draft-ietf-plants-merkle-tree-certs).

These are the production values allocated in draft-07 under the PKIX arcs and unchanged in draft-08: id-alg-mtcProof and id-pe-mtcCertificationAuthority-SHA256 are registered by Section 13.1 of the draft, while draft-08 moved the definition of id-rdna-trustAnchorID, with the same value, to Section 4.1 of draft-ietf-tls-trust-anchor-ids. The interim placeholders under Cloudflare's IANA PEN that earlier drafts used for experimentation have been removed and are not aliased.

Field Summary

static ASN1ObjectIdentifier	id_alg_mtcProof id-alg-mtcProof, the signatureAlgorithm of a Merkle Tree Certificate (Section 6.2 of the draft): 1.3.6.1.5.5.7.6.67.
static ASN1ObjectIdentifier	id_pe_mtcCertificationAuthority_SHA256 id-pe-mtcCertificationAuthority-SHA256, the CA certificate extension for a Merkle Tree CA whose issuance logs hash with SHA-256 (Section 5.5 of the draft): 1.3.6.1.5.5.7.1.38.
static ASN1ObjectIdentifier	id_pkix id-pkix OID: 1.3.6.1.5.5.7
static ASN1ObjectIdentifier	id_rdna_trustAnchorID id-rdna-trustAnchorID, the RDN attribute carrying a CA ID as a RELATIVE-OID in the issuer and subject fields (Section 5.1 of the draft; the attribute is defined by Section 4.1 of draft-ietf-tls-trust-anchor-ids): 1.3.6.1.5.5.7.25.3.

Field Detail

id_pkix

public static final ASN1ObjectIdentifier id_pkix

id-pkix OID: 1.3.6.1.5.5.7

id_alg_mtcProof

public static final ASN1ObjectIdentifier id_alg_mtcProof

id-alg-mtcProof, the signatureAlgorithm of a Merkle Tree Certificate (Section 6.2 of the draft): 1.3.6.1.5.5.7.6.67.

id_rdna_trustAnchorID

public static final ASN1ObjectIdentifier id_rdna_trustAnchorID

id-rdna-trustAnchorID, the RDN attribute carrying a CA ID as a RELATIVE-OID in the issuer and subject fields (Section 5.1 of the draft; the attribute is defined by Section 4.1 of draft-ietf-tls-trust-anchor-ids): 1.3.6.1.5.5.7.25.3.

id_pe_mtcCertificationAuthority_SHA256

public static final ASN1ObjectIdentifier id_pe_mtcCertificationAuthority_SHA256

id-pe-mtcCertificationAuthority-SHA256, the CA certificate extension for a Merkle Tree CA whose issuance logs hash with SHA-256 (Section 5.5 of the draft): 1.3.6.1.5.5.7.1.38. The hash function is identified by the extension type; other hash functions would be given their own extension OID.