Adding test with RSA-PSS test vectors where signature hash, mgf hash and

Browse Source

salt length do not match. Applications typically used RSA-PSS such
that signature hash and mgf hash are the same and the salt length
is either 0 or the size of the hash.
RFC 8017 allows other combinations. These test check that such
combinations are either rejected or are implemented correctly.
The test file contains just one valid signature for each combination
of mgf-hash signature-hash, salt length that is tested.

Results:
BoringSSL accepts all signatures.
BouncyCastle rejects signatures where mgf and signature hash do not match.
Conscrypt rejects signatures where mgf and signature hash do not match.
Jdk (i.e. the version we have in google3) does not implement RSA-PSS yet.
PiperOrigin-RevId: 206761543
GitOrigin-RevId: f5cffdf23fc04cc0b15925c34c0cb74dfda51737

...

This commit is contained in:

Daniel Bleichenbacher

2018-07-31 08:01:13 -07:00

committed by quannguyentm

parent 4d6cead1bb

commit f89f4c53a8

2 changed files with 3538 additions and 4 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

testvectors/rsa_pss_misc_test.json

+3521

File diff suppressed because it is too large Load Diff