Hi! I had a look into Apache Santuario. A XML-Security-Framework using OpenSSL. For my eyes it looks like only OAEP with MGF SHA1 is supported out of the OpenSSL-box. Other digests need to be handeled manually. In Santuario they wrote an own RSA_padding_check_PKCS1_OAEP with 2 new parameters for MGF and digest. Chris
