OASIS PKCS 11 TC

 View Only

  • 1.  Meaning of deprecated in the specification

    Posted 01-30-2025 09:13

    Hi,

    I've noticed in spec that we use the term "deprecated" with no real definition of what it means.  Is it defined elsewhere?  I recall some discussions around this topic, but I don't remember where it ended up.

    Most places in the spec where "deprecated" is used, there is no additional context provided.  However in two places we do make additional statements.

    Table 6, Token Information Flags

    For CKF_SECONDARY_AUTHENTICATION, we state "Deprecated; new implementations MUST NOT set this flag)

    Section 6.1.14 PKCS#1 v1.5 RSA signature with hashing

    The note under table 47 states that that some of the mechanisms "are deprecated with PKCS#11 3.20. New implementations shall not use these mechanism anymore.".

    First, should we align on the use of "MUST NOT" and "shall"?  Do we use the two different wordings intentionally?  I suspect this is just a historical difference that was never noticed.

    Second, what is the desired outcome if these statements are violated? 

    Thanks

    Darren



    ------------------------------
    Darren Johnson
    THALES
    ------------------------------


  • 2.  RE: Meaning of deprecated in the specification

    Posted 03-31-2025 20:36
    Cleaning up old emails - I don't recall discussing this topic in our meetings, did we? If not, this would be a good topic for 3.3 :)

    Valerie

    On Jan 30, 2025, at 6:13 AM, Darren Johnson via OASIS <Mail@mail.groups.oasis-open.org> wrote:





    Original Message


  • 3.  RE: Meaning of deprecated in the specification

    Posted 04-01-2025 03:18

    Hi Valerie,

    we did indeed not discuss this topic yet, thus it is still a work item for 3.3.

    Same is true for ML_DSA external mu [EXTERNAL] PKCS#11 mechanism with hash value 𝜇 for calculating an ML-DSA signature | OASIS PKCS 11 TC where we've had a few comments but not aligned on way forward yet.



    ------------------------------
    Best regards,
    Dieter
    ------------------------------

    Original Message


Related Content