The line says, "Construct a new NULL-terminated string consisting of single-byte characters." Do the single-byte characters mean UTF-8 strings which are equivalent to ASCII Does it imply that Japanese passwords are not allowed If the restriction exists, it should be clearly documented.

Clarify the meaning of "single-byte characters" and the implication.

Line 17 on page 1158 Part 4 Clause 2.15.1.28

te

Proposed Disposition of DIS 29500 Comment JP-0050 (Modified: 2008-01-02) Agreed; a change is needed here as this line was not intended to imply any such restriction. This conversion is a simple legacy algorithm that is described on the following lines, but which does not restrict the size of the original password string. To correct this, the following changes will be made in Part 4, §2.15.1.28, page 1,158, line 17: Construct a new NULL-terminated string consisting of single-byte characters values using the algorithm described by the following bullet. The input to this algorithm should be a series of UTF-16 characters : Get the single-byte values by iterating through the Unicode characters of the truncated password. For each character, if the low byte is not equal to 0, take it. Otherwise, take the high byte. Also, in order to improve the general quality of the hash when used with Unicode characters above the Latin-1 Unicode subrange (characters above U+00FF), this legacy hashing algorithm will be made optional. This change is covered by the response to CL-0027 (and several other national bodies’ comments).