are we using the right RSAPSS salt padding?

mozilla-services / go-cose

go library for CBOR Object Signing and Encryption (COSE)

Mozilla Public License 2.0

40 stars 18 forks source link

Closed g-k closed 2 years ago

g-k commented 6 years ago

The spec says to use a salt length matching the hash length (i.e. rsa.PSSSaltLengthEqualsHash)

However, go-jose uses the auto length salt padding for the PS256 and switching it fixes the RSA verify failure for #7.

hwine commented 2 years ago

We are no longer making changes to this repository. See README update for more information on the successor project.