proposed XML Encryption 1.1 changes related to OAEP

Attached are Redline and clean roll-ups of proposed changes to XML Encryption 1.1 based on our list and call discussion.

Changes:

1. define new optional attribute to EncryptionMethod to convey MGF for OAEP

2. change URI for RSA-OAEP not to assume specific MGF (e.g. decouple to allow change to MGF). This is a significant change to decouple MGF definition from algorithm definition

3. Clarify RSA-OAEP section wording to clarify that digest is specified in DigestMethod Algorithm attribute, MGF in MGF attribute with default of MGF1 with SHA1 if not specified, and Label is optionally in OAEPparams XML element.

4. Incorporated outstanding changes from Scott that were previously agreed but not implemented (I believe)

http://lists.w3.org/Archives/Public/public-xmlsec/2011Sep/0043.html

Comment?

regards, Frederick

Frederick Hirsch
Nokia