CipherReference transforms

The CipherReference element specifies a URI from which to retrieve a
CipherValue,
optionally including transforms to obtain it. This is described in 3.2.1,
http://www.w3.org/Encryption/2001/Drafts/xmlenc-core/#sec-CipherReference

I would expect it to always return a value of CryptoBinary, thus being
equivalent to CipherData in
outcome. This would result in a base64 encoded value (4.0.1 in
http://www.w3.org/2000/09/xmldsig#sec-CoreSyntax)

The section says that a base64 decode is required to obtain the octets, and
shows the use of a decode transform in the example.

Do we need this decode? What is the rationale behind this?

thanks

< Frederick

hirsch@zolera.com