"Dr. Pala" <madwolf@xxxxxxxxxx> writes: > My guess this is needed because of the types of the parameters are > limited and I wonder if it would it be feasible to define a parameter > type that would allow to transfer internal representations instead of > having to encode/decode the data to/from DER ... ? Unfortunately, no. The AlgorithmIdentifier parameter field contents is highly algorithm dependent, and may not even be DER. There's no generic way to know, not even to know how that should be parametrised if it came to that. The sane way from libcrypto perspective is to leave the interpretation to the provider implementation. Cheers, Richard -- Richard Levitte levitte@xxxxxxxxxxx OpenSSL Project http://www.openssl.org/~levitte/
