This refers to DSS signatures... Could we clarify the format of DSS signatures, all that's in the isakmp-oakley draft is 'encoded', to us that means the DSS signature defined in ANSI X9.30 part 3: "Certificate management for DSA". That is the ASN.1 encoding of r followed by s. ie DER encoding of type: SEQUENCE { r INTEGER, s INTEGER } Bye.