Comment Comment by BradleyChatha > You can parse DER perfectly well without a schema, it's a self-describing format.If the schema uses IMPLICIT tags then - unless I'm missing something - this isn't (easily) possible.The most you'd be able to tell is whether the TLV contains a primitive or constructed value.This is a pretty good resource on custom tagging, and goes over how IMPLICIT works: https://www.oss.com/asn1/resources/asn1-made-simple/asn1-qui...> Because of OpenSSL's dominance, a lot of "DER" in the wild was really a mixture of DER and BER:sweat: That might explain why some of the root certs on my machine appear to be BER encoded (barring decoder bugs, which is honestly more likely). parent BradleyChatha 1 year ago
If the schema uses IMPLICIT tags then - unless I'm missing something - this isn't (easily) possible.
The most you'd be able to tell is whether the TLV contains a primitive or constructed value.
This is a pretty good resource on custom tagging, and goes over how IMPLICIT works: https://www.oss.com/asn1/resources/asn1-made-simple/asn1-qui...
> Because of OpenSSL's dominance, a lot of "DER" in the wild was really a mixture of DER and BER
:sweat: That might explain why some of the root certs on my machine appear to be BER encoded (barring decoder bugs, which is honestly more likely).