3 ms·
This was allowed in the rust-rsa crate directly before, which is why it was introduced in that commit.
by dignifiedquire 3y ago
This was allowed in the rust-rsa crate directly before, which is why it was introduced in that commit.
- woodruffw 3y agoYep, I saw the upstream[1]. However, I misread this: I thought the padding was being done on the cleartext signing side, but this is padding of the signature itself. So there's some malleability here, but it isn't susceptible to DO'1985. I'll update my top-level comment. [1]: https://github.com/RustCrypto/RSA/issues/272 https://github.com/RustCrypto/RSA/issues/272
- dignifiedquire 3y agoThanks, appreciate the careful check!
- junon 3y agoGlad people care to look, that's what matters.