CipherValue should be base64Binary not ds:CryptoBinary

Folks,

In the Schema for Section 3.2 we define CipherValue to be of type
ds:CryptoBinary, but it should be defined as base64Binary.
ds:CryptoBinary implies that the encoded quantity is a bignum and cannot
have leading zero bytes, and this isn't true CipherValue.  It is quite
possible, of course, for random ciphertext to have leading zero octets.


All the other occurrences of ds:CryptoBinary are in the schema for D-H
keys (Section 5.5.1), and these should remain ds:CryptoBinary as they
are true bignums.

					--bal

Received on Thursday, 9 August 2001 12:44:54 UTC