> You *should* be able to follow basically the same process 
> multiple times 
> and add a new EncryptedKey for each public key.
How? XENCCipher doesn't have addKEK() method, only setKEK(). What method
I should use to add all other keys? I'm trying this:

XSECCryptoKey   * kek = NULL;
HCRYPTKEY hkey;
for (int i=0; i<numOfPublicKeys; i++) {
    CryptImportPublicKeyInfo(win32RSACSP, MY_ENCODING_TYPE,
         &(pCert[i]->pCertInfo->SubjectPublicKeyInfo), &hkey);

    kek = new WinCAPICryptoKeyRSA(win32RSACSP, hkey);
    cipher->addKEK(kek);
}

> The XENCEncryptedKey class has a method ::setRecipient(XMLCh*) which 
> will set a "recipient" attribute for the EncryptedKey 
> element.  That can 
> be used as a hint to the application as to who the particular 
> EncryptedKey is aimed at.
What is a difference in purpose between Recepient attribute of
xenc:EncryptedKey element and ds:KeyName element, if there is any?

Thank you,
Milan


Reply via email to