Re: key usage - key encipherment or data encipherment

[pgut001@xxxxxxxxxxxxxxxxx (Peter Gutmann)]

"Wen-Cheng Wang" <wcwang@xxxxxxxxxx> writes:

>However, I worried that the statement "This (dataEncipherment) bit MUST NOT
>be set when the intention is to encipher intermediate cryptographic keys
>rather than raw user data" might mislead the reader to believe that the
>keyEncipherment bit and the dataEncipherment bit are mutually exclusive.
>Therefore, I suggest to revise the statement as "The dataEncipherment bit
>should not be use to represent the intention of allowing enciphering
>intermediate cryptographic keys. In that case, the keyEncipherment bit should
>be set."

Thanks, that change helps clarify the text.

Peter.