PKCS 1.5 Signature Generation Valid?

2005-07-28 Thread Ryan Phillips
Hi all, I'm in the process of getting a product FIPS certified and have come across a problem within the OpenSSL implementation of PKCS 1.5 and specifically the RSA_padding_add_PKCS1_type_1() function used in a signature creation context. The specification states (10.1.2) that the data encoding

Re: PKCS 1.5 Signature Generation Valid?

2005-07-28 Thread Richard Levitte - VMS Whacker
In message [EMAIL PROTECTED] on Thu, 28 Jul 2005 20:00:57 -0700, Ryan Phillips [EMAIL PROTECTED] said: ryan-openssl The specification states (10.1.2) that the data encoding ryan-openssl method includes a digestAlgorithmIdentifier and our ryan-openssl testing house says that this constant is

Re: PKCS 1.5 Signature Generation Valid?

2005-07-28 Thread Ryan Phillips
* Richard Levitte - VMS Whacker [EMAIL PROTECTED] [2005-07-28 22:00]: In message [EMAIL PROTECTED] on Thu, 28 Jul 2005 20:00:57 -0700, Ryan Phillips [EMAIL PROTECTED] said: ryan-openssl The specification states (10.1.2) that the data encoding ryan-openssl method includes a