keyprov-3----Page:15
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20
|
Issue #4 (3) Recommendation: Ensure that DSKPP, in combination with PSKC, makes available all of the key metadata (e.g., KeyID and IssuerID) required of an application Leave it up to the application to extract the key identifier, attributes, and namespace from the DSKPP key container, and to format the data in accordance with the relevant key identifier specification It is always possible to generate a key identifier specification and leave it to use cases or a later profile to address If the key metadata is maintained in the key container, then the original base64Binary encoding of the key identifier can be used |