Subject: Re: replacement for signedAndEnvelopedData for CMS with external encrypted data

From: Russ Housley <[email-masked]>
Date: Sat, 03 Sep 2005 15:51:52 -0400

Alicia:

Have you come up with a way to support SignedAndEnvelopedData that does not 
include the vulnerability that was described last week?

Russ

At 10:24 AM 8/29/2005, Alicia da Conceicao wrote:
>If anyone has any reasonable work around for SignedAndEnvelopedData that
>works with detached encrypted data and still meets the CMS standards,
>please let me know.  Otherwise it may be useful to look at ammending
>the CMS specification to include SignedAndEnvelopedData.