[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Google
  Web www.spinics.net

Re: [GNU Crypto] EMSA_PSS.MGF Bug? Version 2.0.1



>>>>> "TAKIGUCHI" == TAKIGUCHI Naruhito <naruhito@xxxxxxxxxxxx> writes:

TAKIGUCHI> Dear Gnu Crypto developers.

TAKIGUCHI> I'm implementing the RSASSA-PSS signature in Java, and
TAKIGUCHI> testing with Gnu Crypto.  But the signature by my
TAKIGUCHI> implementation does not verify by GNU Crypto.

TAKIGUCHI> I have read PKCS#1 v2.1 again, and review GNU Crypto'
TAKIGUCHI> EMSA_PSS.java.  I doubt this is a bug in GNU Crypto's
TAKIGUCHI> EM_PSS.java.

TAKIGUCHI>     PKCS#1 v2.1 B.2.1 MGF1
TAKIGUCHI>     "3. For counter from 0 to [maskLen / hLen] - 1, do the following"

TAKIGUCHI>     In contract, EMSA_PSS.MGF method (line: 379),
TAKIGUCHI>     "for( int i = 0; i < limit; i++ )" .
TAKIGUCHI>                      ^^^^^^^^^
TAKIGUCHI>     In correctly, "for ( int i = 0; i <= limit; i++ )" ?
TAKIGUCHI>                                     ^^^^^^^^^^

TAKIGUCHI> Thanks in advance.

I think you are correct, and that indeed using a '<=' is correct
here.

Have you tried GNU Crypto's version with that change? Does it work
then?

Also, if you have a test case for this (say, an example signature) I
would like to add it to the test suite.

Cheers,

-- 
Casey Marshall || csm@xxxxxxx


_______________________________________________
gnu-crypto-discuss mailing list
gnu-crypto-discuss@xxxxxxx
http://lists.gnu.org/mailman/listinfo/gnu-crypto-discuss

[Home]     [Gnu Classpath]     [Linux Kernel]     [Linux Cryptography]     [Fedora]     [Fedora Directory]     [Red Hat Development]     [Red Hat 9 Bible]     [Fedora Bible]     [Red Hat 9]     [Network Security Reading]

  Powered by Linux