Comments (5)
I don't know, In my code I am passing in the byte length of the digest for the length of the salt. This should produce the same set of values values as provided in the table for RFC 8230. For my crypto code I am currently using the C# versions of BouncyCastle. I have not put it support for my Java or C libraries as I don't know how common RSA is going to be for the IoT world and it was very low priority. I can push up the priority for the Java library to double check things.
If public a pointer to your code might let me find something
from examples.
This is the piece that's not working for me https://github.com/cedarcode/cose-ruby/blob/pss/lib/cose/signature_verifier/pss.rb#L14. It's calling #verify_pss
on an OpenSSL::PKey::RSA
instance.
See I'm using salt_length: :digest
. And have tests failing for the 3 examples https://travis-ci.org/cedarcode/cose-ruby/jobs/579249216.
Note that I get passes if I either use salt_length: :auto
or manually force it to use:
salt_length: 64
for "RSA-PSS w/ SHA-256"salt_length: 128
for "RSA-PSS w/ SHA-384"salt_length: 128
for "RSA-PSS w/ SHA-512"
Thank you!
from examples.
Cute - You are totally correct. My code is wrong. It should be passing in the length in bits not the length in bytes.
from examples.
Should be fixed now
from examples.
Great. Works now!
Thank you for the quick fix.
from examples.
Related Issues (11)
- rsa-oaep-examples: RSAES-OAEP-x algorithm selection put in "unprotected" section.
- Provide RS256 signing sample
- How are the examples generated?
- Why ./sign1-tests/sign-pass-01.json is categorized as a valid/pass scenario? HOT 2
- file Examples/ecdsa-examples/ecdsa-sig-01.json HOT 7
- ecdsa-01.json has invalid base64 for y value HOT 1
- ecdsa-01 and ecdsa-02 have changed from cose_sign1 to cose_sign. HOT 3
- Label for "kid" in encryption examples is wrong HOT 2
- Missing LICENSE file HOT 2
- eddsa-sig-02.json `kid` doesn't match HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from examples.