John:
1) How about the following ASN.1. It has shorter names.
AuthAttributes ::= SET OF AuthAttribute
AuthAttribute ::= SEQUENCE {
attrType OBJECT IDENTIFIER,
critical BOOLEAN DEFAULT FALSE,
attrValues SET OF AttributeValue }
UnauthAttributes ::= SET OF UnauthAttribute
UnauthAttribute ::= SEQUENCE {
attrType OBJECT IDENTIFIER,
attrValues SET OF AttributeValue }
2) >Recommend that the following sentence replace the aforementioned text:
"Note that only the value octets of the envelopedData encryptedContentInfo
encryptedContent OCTET STRING are encrypted; the OCTET STRING tag and length
octets are not encrypted."
How about: "The input to the content-encryption process is the "value" of the
content being enveloped. Only the value octets of the envelopedData
encryptedContentInfo encryptedContent OCTET STRING are encrypted; the OCTET
STRING tag and length octets are not encrypted."
Russ