-
-
### Description:
In the "endesive/endesive/email/decrypt.py", "endesive/examples/pdf-verify-rsa_sha1.py", "endesive/endesive/email/encrypt.py" and "endesive/endesive/signer.py", I have identified a…
-
A typical RSA key 2048 bit cannot sign the nonces returned using WebID + RSA
PKCS1v15 uses 11 bytes padding and so can have a max message size of 256 - 11 = 245 bytes
Typically the host + nonce stri…
-
**Description**
Using cosign with Azure KMS results in different behavior for validation with KMS and local pub cert.
```
cosign --insecure-ignore-tlog=true verify -key azurekms://keyvault-x…
-
### Description:
In the "moto/moto/kms/utils.py", I have identified a security vulnerability about insecure cryptographic algorithm. PKCS1v1.5 is vulnerable to the chosen-ciphertext attack.
###…
-
I am currently testing the ```python-oci-sdk``` and ```oci-cli``` packages which I created for openSUSE.
During the tests, I ran into a warning which seems to indicate that ```httpsig_cffi``` which…
-
Hello,
When using `signature_algorithm=SignatureMethod.SHA256_RSA_MGF1` the signature cannot be verified.
If I remove `signature_algorithm=SignatureMethod.SHA256_RSA_MGF1` the signature can be v…
-
I use the following code for signature verification, and it seems that there is a memory leak that occurred in the function RSA_VerifyStr,inside the StringSource,
I don't know what caused it, I hope …
-
Original Issue: https://github.com/boto/boto3/issues/706
-
```
Python 3.10.4 (main, Apr 2 2022, 09:04:19) [GCC 11.2.0]
Type 'copyright', 'credits' or 'license' for more information
IPython 8.1.1 -- An enhanced Interactive Python. Type '?' for help.
In …