6. Implementation Considerations
- The subjectPublicKey in SubjectPublicKeyInfo MUST be the compressed public-key format.
- When deriving the EPSK from the BSK, zero-byte padding MUST NOT be added to the DER-encoded BSK public key.
- SHA-256 MUST be used with RFC 5869 to derive the EPSK from the BSK.
- The BSK public key MUST NOT be freely available on the network.