> I just found OAEP-MGF-constants in the code but they were never used.
The MGF stuff is not the same as the general digest stuff, and I don't know
whether the alternative MGFs are supported or not, but I thought they were.
You're talking about these constants from the 1.1 spec?
MGF1 with SHA1: http://www.w3.org/2009/xmlenc11#mgf1sha1
MGF1 with SHA224: http://www.w3.org/2009/xmlenc11#mgf1sha224
MGF1 with SHA256: http://www.w3.org/2009/xmlenc11#mgf1sha256
MGF1 with SHA384: http://www.w3.org/2009/xmlenc11#mgf1sha384
MGF1 with SHA512: http://www.w3.org/2009/xmlenc11#mgf1sha512
-- Scott