Authenticating attributes during key wrap/unwrap

As discussed on our con call last week, here's my proposal for adding a GCM wrap mechanism to allow users to transport keys along with their attributes in a secure way.
All comments highly welcome.
Best, Attachment: pkcs11-authenticated-encryption-key-transport.pdf Description: Adobe PDF document Graham Steel +33 (0)9 72 42 35 31 http://cryptosense.com Attachment: signature.asc Description: Message signed with OpenPGP using GPGMail