Use of Static-Static Elliptic Curve Diffie-Hellman Key Agreement in Cryptographic Message Syntax
draft-herzog-static-ecdh-06

I have No objection to the publication of this document, but I have a
couple of minor editorial points that could usefully be fixed to
improve the document.

---

The term "MACed" is used without explanation.

---

Section 1

   All three of these types share the same basic structure.  First, a
   fresh symmetric key is generated.

There is a slight syntactic disconnect between these two sentances. Do
you mean the second sentance to be a process description (in which case
a paragraph break would be in order)? Or do you mean to describe the
shared basic structure in some way?

---

Section 1

   o  key transport: the symmetric key is encrypted using the public
      encryption key of some recipient,

To be very picky...
Do you mean "encryption key of the intended recipient"?

And Later...

   In this case, the participants are the originator and
   one of the recipients.

Again "the intended recipient" seems a better phrase.

ButI am somewhat worried that you have said "one of the recipients" 
given tat in the case of multiple recipients (that is implied by your
language) I don't see how the other recipients will be able to function
as they will not have access to the necessary key.

---

Section 2

   the RecipientInfo kari choice is used.

Is "kari" an unexplained term or a typo?

---

"ukm" is used without expansion

---

Section 2.1 contains a number of MUST statements. Section 2.3 should 
give an indication of what the receiver does when one of these MUSTs
is violated. This may be as simple as a reference to [CMS].