> I just found OAEP-MGF-constants in the code but they were never used.

Pretty sure that's wrong.

I see this code in the algorithm handler code for RSA-OAEP:

        const XMLCh* mgfalg = encryptionMethod->getMGF();
        if (mgfalg && *mgfalg) {
            maskGenerationFunc mgf;
            if (!XSECmapURIToMaskGenerationFunc(mgfalg, mgf)) {
                // error
            }
            rsa->setMGF(mgf);
        }

That should be mapping from the constants to the right MGF implementation, and 
those are in an enum in the constants header.

-- Scott

Reply via email to