Re: Evaluation: draft-ietf-smime-cms-rsaes-oaep - Use of the RSAES-OAEP Transport Algorithm in CMS to Proposed Standard

[Allison Mankin <mankin@psg.com>]

                    Yes    No-Objection  Discuss *  Abstain  
Allison Mankin      [ X ]     [  ]       [   ]      [   ] 

However, is there a convention that makes the following make sense?
The usage extension must contain a combination of both values, but
both should not be present - confusing...can there be a cleaner way to
write for the future implementor?

                                                         If the
   keyUsage extension is present in a certificate that conveys an RSA
   public key with the id-RSAES-OAEP object identifier, then the key
   usage extension MUST contain a combination of the following values:

      keyEncipherment; and
      dataEncipherment.

   However, both keyEncipherment and dataEncipherment SHOULD NOT be
   present.