On 2025-07-03, at 21:35, Sipos, Brian J. <[email protected]> wrote:
> 
> But the direct (-6) algorithm makes no such statement

RFC 9053:
6.1.1.  Direct Key
[…]
   When this algorithm is used, the "protected" field MUST be zero
   length.  The key type MUST be "Symmetric".

I’m certainly unhappy about the way the various mandates are spread over 
different documents, but this one appears to be there.

Grüße, Carsten

_______________________________________________
COSE mailing list -- [email protected]
To unsubscribe send an email to [email protected]

Reply via email to