Re: I-D ACTION:draft-ietf-smime-examples-02.txt

Hi all,

I've tried to verify the examples and found a several points where I
think the problems are:

1. [Example 5.1] Signature algorithm identifier should be id-dsa-with-sha1
(1 2 840 10040 4 3) instead of dsa (1 2 840 10040 4 1) (see 12.2.1 /
RFC2630)

2. Signature verification of DSS messages without signed attributes [Example
5.1] and [Example 5.6] failed. However the signature in the [Example 5.4]
and all RSA signatures were OK. For signature verification I used MS Base
DH/DSS Provider.

3. [Example 6.1] KeyEncryptionAlgorithmIdentifier in KeyAgreeRecipientInfo
is encoded as dhPublicNumber (1 2 840 10046 2 1) instead of id-alg-ESDH (see
12.3.1.1 / RFC2630)

4. I was not able to decrypt CEKs in [6.2] and [6.3] because
BobPrivRSAEncrypt.pri is just a copy of CarlPrivRSASign.pri and of course
doesn't match BobRSA public key.

Alexey Shamov