RSA-OAEP vs. RSA-OAEP-MGF1P

[Cantor, Scott]

> I checked the algorithm support spec before posting. I don't read it as
> permitting that interpretation as it stands.

I'm still reading my code, but I think what I thought it meant was "any parameters are unspecified", so not exactly "all possibl parameters are supported".

So I apparently concluded that in practice, saying nothing would be as interoperable as listing all the digests since that doesn't mean "I don't support anything". It definitely doesn't mean that it only supports SHA-1.

> Right. I suppose you might want it to mean "MGF1 plus any of the
> DigestMethods I mentioned earlier" but that's a lot of coupling.

The spec doesn't mean that certainly, but I probably meant that in practice in what I was generating.

-- Scott