4 ms·
SJCL has a bug in their RSA implementation. We're using a good bit of their code with a few changes for our web client. The idea being that we don't want to sto
by dublinclontarf 15y ago
SJCL has a bug in their RSA implementation. We're using a good bit of their code with a few changes for our web client. The idea being that we don't want to store passwords, so the webclient stores an encrpyted private key and everything sent to the server must be signed.
The users id is a sha256 hash of their public key and all we keep are the public keys.
Working so far in FF and Chrome, not even trying it in IE
- yid 15y agoNot sure what you mean, SJCL doesn't have an RSA implementation.
- dublinclontarf 15y agoHmmm, indeed it doesn't. Who's RSA implementation am I using, guess I've forgotten.
- yid 15y agoProbably Tom Wu's JSBN implementation...
- xfax 15y agoAre you at liberty to disclose what you're using this for? i'm interested in learning about legitimate use cases for SJCL.
- dublinclontarf 15y agoThe auth system for a stock/asset exchange.