RFC Errata


Errata Search

 
Source of RFC  
Summary Table Full Records

Found 1 record.

Status: Reported (1)

RFC 9679, "CBOR Object Signing and Encryption (COSE) Key Thumbprint", December 2024

Source of RFC: cose (sec)

Errata ID: 8390
Status: Reported
Type: Technical
Publication Format(s) : TEXT, PDF, HTML

Reported By: Carsten Bormann
Date Reported: 2025-04-22

Section 5.4 says:

as the "x5t" (X.509 certificate SHA-1 thumbprint) [RFC9360] 
value defined for X.509 certificate objects does.

It should say:

as the "x5t" (X.509 certificate thumbprint) [RFC9360] 
value defined for X.509 certificate objects does.

Notes:

The hash function name "SHA-1" is spurious here.
RFC 9360 calls "x5t" a "Hash of an X.509 certificate" or goes into more detail by saying "x5t:
This header parameter identifies the end-entity X.509 certificate by a hash value (a thumbprint). ".
So calling "x5t" an "X.509 certificate thumbprint" is not wrong.
However, there is nothing in RFC 9360 about SHA-1, and SHA-1 is outdated enough that this misreference borders on a technical mistake.

Report New Errata



Advanced Search