On Mon, Jan 12, 2015 at 04:45:57PM -0800, Jan Pechanec wrote: > On Mon, 12 Jan 2015, Nico Williams wrote: > >unfortunately they left other I18N details out. > > hi Nico, the PKCS#11 specification says those strings are > UTF-8 back in the last version that is still current (2.20) from 2004 > (didn't check earlier versions). [...] Huh. Why did I remember octet strings?? Version 2.01 (1997) did have plain octet strings with no character set nor codeset defined. But still, 2004 is pretty late. > I think that saying that characters from US-ASCII set SHOULD > be used for labels and names since the PKCS#11 spec is not clear about > the normalization should be safe here. Yes. Nico --