[ https://issues.jboss.org/browse/ELY-618?page=com.atlassian.jira.plugin.sy... ] Ilia Vassilev commented on ELY-618: ----------------------------------- [~fjuma] Correct me if I'm wrong, but the whole logic in DEREncoder is designed for tag numbers <= 30 (single octet). According to the spec [1], tag numbers > 30 needs multiple octets and the implementation in {{DEREncoder.writeTag()}} method is intended to do this. Unfortunately, the logic only works on single octet tags (tag number <= 30). The good think is that all of the tags in {{ASN1.java}} are single octet and work fine with the current implementation. The public methods {{startExplicit(int number), startExplicit(int clazz, int number), encodeImplicit(int number), encodeImplicit(int clazz, int number)}} take tag number but the implementation will only work on tags <= 30. If we decide to keep the current implementation (tag number <= 30), we can remove some of the logic in {{DEREncoder.writeTag()}} method and add checks in the public methods. To implement the full spec, some redesign is needed. [1] https://www.itu.int/ITU-T/studygroups/com17/languages/X.690-0207.pdf (page 4) -- This message was sent by Atlassian JIRA (v7.5.0#75005)