Subject: pkinit-20 comments

From: Love <[email-masked]>
Date: Tue, 03 Aug 2004 10:48:54 +0200

> PKINIT uses the following algorithm identifiers [2] for encrypting
> the reply key with the temporary key:
> 
> 
>     des-ede3-cbc           (three-key 3DES, CBC mode)
>     rc2-cbc                (RC2, CBC mode)

AES ? And really, should this section just be requirements on the CMS
package, not listing of oid's ?

> example, the certificate may include an Enxtended Key Usage (EKU) OID

Enxtended -> Extended

Love