On Thu, Feb 24, 2011, Hanno Bck wrote: > Hi, > > I was wondering if openssl CVS head is capable of doing cms signing > with rsa pss. Seems not, openssl cms doesn't recognize the > -sigopt rsa_padding_mode:pss > parameter. > >
No it isn't currently supported. It will need some API extensions to take an EVP_PKEY_CTX structure for the signing argument instead of just EVP_PKEY and some changes to the RSA CMS ctrls, otherwise not too difficult. Ideally some examples of PSS CMS would be needed for testing purposes. Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
