Re: key usage - key encipherment or data encipherment

[Russ Housley <housley@xxxxxxxxxxxx>]

There has been a whole lot of discussion about these paragraphs.  Since 
some of the discussion has not been CCed to the PKIX mail list, I am 
posting the resulting words.

     The keyEncipherment bit is asserted when the subject public key is
     used for enciphering private or secret keys, i.e., for key transport.
     For example, this bit shall be set when a RSA public key is to be
     used for encrypting a symmetric content-decryption key or an
     asymmetric private key.

    The dataEncipherment bit is asserted when the subject public key
    is used for directly enciphering raw user data without the use of
    an intermediate symmetric cipher. Note that the use of this
    bit is extremely uncommon; almost all applications use
    key transport or key agreement to establish a symmetric key.

I hope we a re close to closure on this one....

Russ