3 ms·
What are the problems with ASN.1? It seems to work in 5G and LTE just fine? ASN.1 is simply a way to have portable data structures — are your problems with ASN.
by __turbobrew__ 5y ago
What are the problems with ASN.1? It seems to work in 5G and LTE just fine? ASN.1 is simply a way to have portable data structures — are your problems with ASN.1 that it cannot effectively implement portable data structures or is your problem with the systems that have been built upon ASN.1?
- e12e 5y agoI seem to recall the issue was with the tooling around generating clients and servers and preserving type information - but it's been almost 20 years and I don't have my notes on hand. I also think there were some nfs security issues relating to asn.1
- e12e 5y agoMight have been something along the lines of this: https://www.infosecmatter.com/metasploit-module-library/?mm=auxiliary/dos/freebsd/nfsd/nfsd_mount https://www.infosecmatter.com/metasploit-module-library/?mm=... I guess that (and related errors in openssl and bouncy castle) might not be due to problems with asn.1 per se, but rather difficulty in writing safe libraries for parsing in C.