2.2.6.1 Recovered Secret Structure

The RecoveredSecret structure MUST be formatted as follows. It MUST be encrypted with the RC4 algorithm as specified in section 3.1.4.1.2. For more information about RC4, see [SCHNEIER] section 17.1.

0	1	2	3	4	5	6	7	8	9	1 0	1	2	3	4	5	6	7	8	9	2 0	1	2	3	4	5	6	7	8	9	3 0	1
MACSalt (16 bytes)
...
...
MAC (20 bytes)
...
...
Secret (variable)
...

MACSalt (16 bytes): This MUST be a random number 16 bytes in length.

MAC (20 bytes): This MUST contain the SHA1 HMAC of the Secret field, computed as specified in section 3.1.4.1.2.

Secret (variable): This field MUST contain the secret recovered by the unwrapping operation.