RSA-OAEP vs. RSA-OAEP-MGF1P

[Ian Young]

I note that the Shibboleth SP generates the following algorithm metadata in most cases:

<EncryptionMethod Algorithm="http://www.w3.org/2009/xmlenc11#rsa-oaep"/>
<EncryptionMethod Algorithm="http://www.w3.org/2001/04/xmlenc#rsa-oaep-mgf1p"/>

The second of these is uncontentious; it indicates that the SP supports that key transport algorithm which involves an implicit selection of a mask generation function of MGF1 with SHA-1 as the digest algorithm.

It's not so clear to me what the former indicates, though. Just using that algorithm alone for key transport isn't valid, as you need to indicate which mask generation function and digest algorithm you want to use. Indeed, the v3 IdP does just that and selects MGF1 with SHA-1 so everything is nicely compatible.

Shouldn't the SP be explicitly indicating which MGFs and digest algorithms it supports for use with RSA-OAEP though?

    -- Ian




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5250 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/dev/attachments/20150203/cac6f27f/attachment.bin