> In the past BouncyCastle and Crypto++ could not interop even though > they both claim to follow P1363. IEEE did not publish test vectors, so > each library had a misinterpretation that ensured they did not > interop. Here were the issues for each library: > > * BouncyCastle > - Label should be 8 octets > > * Crypto++ > - Length of the label specified in bits > > BouncyCastle fixed their issue in version 1.53 (about 2 months ago). > Crypto++ is fixing their issue at 5.7 (in about 2 months). > > If you need a "gold" standard, then use BouncyCastle's implementation, > version 5.7 or above. That should be BouncyCastle 1.53 or above. Jeff