RSA-OAEP vs. RSA-OAEP-MGF1P

[Cantor, Scott]

So, I'm wrong about what this means. The SP's intention here if it doesn't specify any parameters is that all of the variants are supported.

That may not be correct per spec, I'd have to read it, but since I implemented this around the same time I wrote the spec, that would be a little surprising.

It occurs to me that obviously the SP couldn't support some arbitrary extension DigestMethod or MGF URI, so in that sense maybe the spec or the code isn't quite correct, but in practice, it's a heck of a lot more compact this way.

-- Scott