search

bcgit / pc-dart

Pointy Castle - Dart Derived Bouncy Castle APIs
MIT License
232 stars 122 forks source link

Can you add PSS support? #154

Open xros opened 2 years ago

xros commented 2 years ago

When signing data, people recommended to use PSS method rather than PKCS1v15 I saw Pointy Castle is still using PKCS1v15.

https://cryptography.io/en/latest/hazmat/primitives/asymmetric/rsa/#signing Valid paddings for signatures are PSS and PKCS1v15. PSS is the recommended choice for any new protocols or applications, PKCS1v15 should only be used to support legacy protocols.

https://cryptography.io/en/latest/limitations/#rsa-pkcs1-v1-5-constant-time-decryption

Here's an example like what cryptography on pub.dev https://pub.dev/documentation/cryptography/latest/cryptography/RsaPss-class.html But this one doesn't work for now.

Also for paddings, PKCS8 might be modern.

Ephenodrom commented 1 year ago

I am also interested in this! Bump