On 4/19/2002 11:47 PM, "Florian Weimer"
3.2 is lacking a hint to implementors that the bit count feild for
encrypted MPIs reflects the number of bits in the decrypted MPI (IOW,
encrypted MPIs might not be well-formed as required by 3.2).
Thank you. I wrote as the last paragraph of 3.2:
Also note that when an MPI is encrypted, the length refers to the plaintext
MPI. It may be ill-formed in its ciphertext.
There's a formatting error in the second table of section 18.104.22.168.
Thanks. David Shaw also pointed that one out and it's fixed.