[jira] Updated: (SANTUARIO-159) NSS verification fails

["Scott Cantor (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SANTUARIO-159?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Scott Cantor updated SANTUARIO-159:
-----------------------------------

    Fix Version/s: C++ 1.6.0

> NSS verification fails
> ----------------------
>
>                 Key: SANTUARIO-159
>                 URL: https://issues.apache.org/jira/browse/SANTUARIO-159
>             Project: Santuario
>          Issue Type: Bug
>          Components: C++
>         Environment: Operating System: Windows XP
> Platform: PC
>            Reporter: Matej Spiller-Muys
>            Assignee: XML Security Developers Mailing List
>             Fix For: C++ 1.6.0
>
>
> When I verify hash with RSA signature it fails with PORT_GetError == -8182 == 0xFFFFE00A == SEC_ERROR_BAD_SIGNATURE.
> It seems to be the problem, because sign wraps hash with SGN_CreateDigestInfo, however verify does not.
> Can somebody confirm this?
> Suggesting adding the same logic to verify.
> Or even better replacing PK11_Sign and PK11_Verify with (and unifying RSA and DSA code):
> VFY_VerifyDigest(SECItem *digest, SECKEYPublicKey *key, SECItem *sig, SECOidTag algid, void *wincx) (http://mxr.mozilla.org/security/source/security/nss/lib/cryptohi/secvfy.c)
> SGN_Digest(SECKEYPrivateKey *privKey, SECOidTag algtag, SECItem *result, SECItem *digest) (see http://crypto.stanford.edu/firefox-rhash/data/secsign.c.html)
> Here you can see how PK11_Sign and PK11_Verify should be used for RSA and DSA.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.