Section 14 references Elgamal sign+encrypt keys, and section 17 has a citation for the Bleichenbacher paper about Elgamal signatures. Since we have dropped Elgamal signatures from the standard, these can probably both go. David