RSA-OAEP vs. RSA-OAEP-MGF1P

[Cantor, Scott]

> Right, but as the MGF1P variant was MTI in 1.0 and functionally identical,
> there's no advantage that I can see in also saying that you support the same
> bundle of algorithms under another name (the unparameterised generic
> one). So if the size of the metadata is a concern at all you'd suppress the
> more general algorithm specifier unless you did want to parameterise it.

I see what you mean, yes, that makes sense.

-- Scott