Shibboleth Developers

["Scott Cantor" <>]

> Encryption with asymmetric keys usually means using them to 
> negotiate a shared symmetric key.  Is there some mechanism
> to do that?

XML Encryption has support for symmetric key transport using RSA encryption.
You encrypt the data with DES/AES and then encrypt the key with the peer's
key.

I asked around a little and determined that in SAML (or Liberty) land,
nobody's pushing much beyond per-message keys. Anything beyond that
involving negotiation of caching/reuse/derivation of keys wouldn't
interoperate, so that would be pretty far down the road I would say.

It's somewhat beside my point, which is that you have to start with the
public key in any case.

-- Scott