2.2.2.1 EncryptedSecret structure Version 2


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

cbSecret

0x20

0x00

0x00

0x00

Secret (variable)

...

PayloadKey (32 bytes)

...

...

cbSecret (4 bytes): A 32-bit unsigned integer. It MUST be the length of the Secret field, in bytes. This field MUST be encoded using little-endian format.

Secret (variable): This MUST contain the cbSecret-byte value that is being wrapped.

PayloadKey (32 bytes): This MUST contain the payload encryption key, consisting of three Data Encryption Standard (DES) keys and an initialization vector (IV). These quantities, which are concatenated to form this field, are each 8 bytes long.