btw, how did they get around PKP's rule about using the interface provided which uses DES ? That rule applies to RSAREF, and not necessarily to anything else.