ECC Algorithm Identifiers in ecPublicKeyrestricted Fine grained control 6 DH OIDs, 6 MQV OIDs, 9 ECDSA OIDs Differentiates one-pass from full mode, hash algorithms for signatures No “family” OIDs (e.g., any MQV mode) Algorithm identifiers may be associated with additional parameters to specify auxiliary cryptographic functions Can specify hash algorithms in kdfs, etc. Includes “with recommended” feature |