RSA-OAEP vs. RSA-OAEP-MGF1P

[Ian Young]

> On 3 Feb 2015, at 16:46, Cantor, Scott <cantor.2 at osu.edu> wrote:
> 
> So, I'm wrong about what this means. The SP's intention here if it doesn't specify any parameters is that all of the variants are supported.
> 
> That may not be correct per spec, I'd have to read it, but since I implemented this around the same time I wrote the spec, that would be a little surprising.

I checked the algorithm support spec before posting. I don't read it as permitting that interpretation as it stands.

> It occurs to me that obviously the SP couldn't support some arbitrary extension DigestMethod or MGF URI

Right. I suppose you might want it to mean "MGF1 plus any of the DigestMethods I mentioned earlier" but that's a lot of coupling.

    -- Ian




-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5250 bytes
Desc: not available
Url : http://shibboleth.net/pipermail/dev/attachments/20150203/f91d988a/attachment.bin