Perhaps I missed something, but para. 4.2.1 in RFC 1423
lacks some clarity in my view:
When saying "To prepare a MIC for RSAEncryption ..." (page 10),
the "digestAlgorithm AlgorithmIdentifier" is mentioned, but it
is not said which object identifier should be used for the
digest algorithm. It simply refers to PKCS #1.
Wolfgang-
Section 4.2.1 of RFC 1423 is intended to be a general discussion on the
use of RSAEncryption, as defined in PKCS #1, for both for DEK and MIC
encryption, and without regard to specific MIC algorithms with which it
may be used.
Section 2 describes the specific MIC algorithms, including MD2 and MD5,
which may be used in conjunction with RSAEncryption, it cites the
corresponding RFCs, 1319 and 1321, respectively, AND includes the OIDs
as taken from the RFCs.
-DB