On Sun, Oct 24, 2010, Michael Orlov wrote: > Hi, > > What is the default RSA padding that is used in CMS when signing and > when encrypting messages? > > Is there any way to influence the choice of padding in CMS? E.g., use > PSS for signing and OAEP for encryption when using RSA, as is possible > for dgst (sigopt) / pkeyutl (pkeyopt) with "rsa_padding_mode:". I didn't > find any relevant command-line switches for that in cms. >
This is not currrently supported. The latest development releases include support for PSS in certificates and certificate requests but no OAEP/PSS support for CMS yet. Do you know of any examples using these modes? Steve. -- Dr Stephen N. Henson. OpenSSL project core developer. Commercial tech support now available see: http://www.openssl.org ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager majord...@openssl.org