RFC 9804: Simple Public Key Infrastructure (SPKI) S-Expressions

https://datatracker.ietf.org/doc/rfc9804/

2•eadmund•6h ago

Comments

eadmund•6h ago

After 29 years, Rivest’s S-expression draft is an RFC.

They are a straightforward, easy-to-parse S-expression format whose canonical representation is useful for cryptography. They are suitable as a general replacement for JSON, XML, HTML, ASN.1 and more.

eadmund•6h ago

This JSON (taken from https://www.w3schools.com/js/js_json_intro.asp):

    {"name":"John", "age":30, "car":null}

could be this S-expression:

    ((name John)
     (age 30)
     (car ()))

The canonical representation (suitable for cryptographic hashing) would be ((4:name4:John)(3:age2:30)(3:car())).

eadmund•6h ago

This XML (from https://www.w3schools.com/xml/note.xml):

    <note>
      <to>Tove</to>
      <from>Jani</from>
      <heading>Reminder</heading>
      <body>Don't forget me this weekend!</body>
    </note>

could be this S-expression:

    (note
     (to Tove)
     (from Jani)
     (heading Reminder)
     (body "Don't forget me this weekend"))

But if every note must have a body, this might make even more sense:

    (note
     (to Tove)
     (from Jani)
     (heading Reminder)
     "Don't forget me this weekend")

eadmund•6h ago

The DER-encoded ASN.1 byte sequence Base64-encoded to MBMCAQUWDkFueWJvZHkgdGhlcmU/ could be represented as:

    ((tracking-number 5)
     (question "Anybody there?"))

While we are all familiar with opaque X.509 certificates such as (from https://www.fm4dd.com/openssl/source/PEM/certs/512b-rsa-exam...):

an SPKI certificate might be:

    (sequence
        (public-key
         (rsa-pkcs1-md5
          (e #11#)
          (n
           |ALNdAXftavTBG2zHV7BEV59gntNlxtJYqfWIi2kTcFIgIPSjKlHleyi9s
           5dDcQbVNMzjRjF+z8TrICEn9Msy0vXB00WYRtw/7aH2WAZx+x8erOWR+yn
           1CTRLS/68IWB6Wc1x8hiPycMbiICAbSYjHC/ghq2mwCZO7VQXJENzYr45|)))
        (do hash md5)
        (cert
         (issuer (hash md5 |+gbUgUltGysNgewRwu/3hQ==|))
         (subject
          (keyholder (hash md5 |+gbUgUltGysNgewRwu/3hQ==|)))
         (tag
          (* set
           (name "Carl M. Ellison")
           (street "207 Grindall St.")
           (city "Baltimore MD")
           (zip "21230-4103")))
         (not-after "1998-04-15_00:00:00"))
        (signature
         (hash md5 |54LeOBILOUpskE5xRTSmmA==|)
         (hash md5 |+gbUgUltGysNgewRwu/3hQ==|)
         |HU6ptoaEd7v4rTKBiRrpJBqDKWX9fBfLY/MeHyJRryS8iA34+nixf+8Yh/
         buBin9xgcu1lIZ3Gu9UPLnu5bSbiJGDXwKlOuhTRG+lolZWHaAd5YnqmV9h
         Khws7UM4KoenAhfouKshc8Wgb3RmMepi6t80Arcc6vIuAF4PCP+zxc=|)))

Note that this is not a translation of the X.509 certificate above, though — I pulled it from <https://datatracker.ietf.org/doc/html/draft-ietf-spki-cert-e...>. Note that this is a very 90s example: MD5 and a bespoke data format instead of SHA-2 and ISO 8601.

I think it’s clear that an SPKI certificate is much, much more readable.

Improved load balancing with machine learning

DevSummit Boston: Key Lessons from Shipping AI Products Beyond the Hype – InfoQ

Under China's Threat, Taiwan Needs Its Own Power Sources More Than Ever

Stalking the Statistically Improbable Restaurant with Data

Even before the Xbox layoffs, there was 'tension' at Halo Studios

Are we only conscious while we're learning?

Porting Software as a Learning Hack – "Writing an Interpreter in Go" in Rust

SAP CEO Says Europe Needs More Applied AI, Not Another Stargate

Esports Suite Launches on UK Aircraft Carrier

Gemini CLI: First Impressions and Experiments with Parallelization

Ford CEO: Blue-Collar Workers 'Safe' but AI Will Replace Half of White-Collars

Young Consulting finds even more folks affected in breach mess – now over 1M

XenevaOS – Modern Computing Reimagined

Unlock the Power of Biodiversity Monitoring

Virtual Clothing With AI Help you Success

Building the Best Ship Maintenance AI and Robots

The Robot Using AI to Ink Your Next Tattoo

Show HN: Mochia, a virtual pet browser game, built with Rust, SolidJS, Postgres

High-dose ascorbic acid increases intercourse frequency and improves mood (2002)

Repository for Cursor Security Rules designed to improve the security

Every person in the Netherlands has PFAS in their blood, most above health limit

Curzio Malaparte's Shock Tactics

QuAIL: The Only AI Agent Orchestration Platform Built for Finance

Show HN: Flywheelr – White-glove thought leadership for personal brand building

Software engineering with LLMs in 2025: reality check

A 500-Calorie 'Carbohydrate Revolution' Banished the Bonk

Sharded vs. Distributed: The Math Behind Resilience and High Availability

Ask HN: How do I prevent execs from obsessing over copy-protection?

Ask HN: How do you keep voice AI latency low while load spikes?

Development Containers

RFC 9804: Simple Public Key Infrastructure (SPKI) S-Expressions

Comments

Improved load balancing with machine learning

DevSummit Boston: Key Lessons from Shipping AI Products Beyond the Hype – InfoQ

Under China's Threat, Taiwan Needs Its Own Power Sources More Than Ever

Stalking the Statistically Improbable Restaurant with Data

Even before the Xbox layoffs, there was 'tension' at Halo Studios

Are we only conscious while we're learning?

Porting Software as a Learning Hack – "Writing an Interpreter in Go" in Rust

SAP CEO Says Europe Needs More Applied AI, Not Another Stargate

Esports Suite Launches on UK Aircraft Carrier

Gemini CLI: First Impressions and Experiments with Parallelization

Ford CEO: Blue-Collar Workers 'Safe' but AI Will Replace Half of White-Collars

Young Consulting finds even more folks affected in breach mess – now over 1M

XenevaOS – Modern Computing Reimagined

Unlock the Power of Biodiversity Monitoring

Virtual Clothing With AI Help you Success

Building the Best Ship Maintenance AI and Robots

The Robot Using AI to Ink Your Next Tattoo

Show HN: Mochia, a virtual pet browser game, built with Rust, SolidJS, Postgres

High-dose ascorbic acid increases intercourse frequency and improves mood (2002)

Repository for Cursor Security Rules designed to improve the security

Every person in the Netherlands has PFAS in their blood, most above health limit

Curzio Malaparte's Shock Tactics

QuAIL: The Only AI Agent Orchestration Platform Built for Finance

Show HN: Flywheelr – White-glove thought leadership for personal brand building

Software engineering with LLMs in 2025: reality check

A 500-Calorie 'Carbohydrate Revolution' Banished the Bonk

Sharded vs. Distributed: The Math Behind Resilience and High Availability

Ask HN: How do I prevent execs from obsessing over copy-protection?

Ask HN: How do you keep voice AI latency low while load spikes?

Development Containers