The RFC5649 wrapping algorithm now includes a DER encoding of the data to distinguish between keys of different types. This prevents keys being unwrapped in a wrong type.

1 files changed, 0 insertions, 4 deletions

diff --git a/ncr.h b/ncr.h
index af4c279..c3850e4 100644
--- a/ncr.h
+++ b/ncr.h
@@ -212,10 +212,6 @@ struct ncr_key_data_st {
 struct ncr_key_wrap_st {
 	ncr_wrap_algorithm_t algorithm;
 	
-	/* when unwrapping the algorithm of the wrapped key.
-	 * For symmetric ciphers AES would do.
-	 */
-	ncr_algorithm_t wrapped_key_algorithm;
 	unsigned int wrapped_key_flags; /* flags for the newly unwrapped key */
 
 	ncr_key_t keytowrap;