TO: >INTERNET pem-dev(_at_)tis(_dot_)com
In the Financial Community the encryption standard is X9.23.
The standard that references IV's (or any keying material in
transit) is X9.17. There is a draft circulating for X9.17
addendum which states "If the KSM is in response to an RSI
message, the IV shall be encrypted unless otherwise stated
in a bilateral agreement."
In the Business Community the security format standard is X12.58
and the Key Management standard is X12.42. The format standard
is currently undergoing revision which will (among other things)
add compression to the encrypted string. A non-repeating IV
(actually an Initial Text Sequence - ITS) is placed immediatly
prior to the encrypted data, and is thrown away by the receiver.
Peace
Tom Jones - Lemcom