> PKI key operations can be put into two categories .... authentication
> (digital signatures) and secrecy/privacy (encryption).
I know this is the orthodox theory, but in practice IETF PKI protocols and applications make this difficult or impossible. Generally one key is used for Authentication and Key exchange, effectively encryption.
That's how TLS and IKE work. Just try using two keys with Outlook.
Hal