Skip to main content

6. Implementation Considerations

  • The subjectPublicKey in SubjectPublicKeyInfo MUST be the compressed public-key format.
  • When deriving the EPSK from the BSK, zero-byte padding MUST NOT be added to the DER-encoded BSK public key.
  • SHA-256 MUST be used with RFC 5869 to derive the EPSK from the BSK.
  • The BSK public key MUST NOT be freely available on the network.