You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@santuario.apache.org by "Colm O hEigeartaigh (Jira)" <ji...@apache.org> on 2023/08/14 09:04:00 UTC

[jira] [Assigned] (SANTUARIO-604) Use PSSParameterSpec for RSASSA-PSS without parameters SignatureMethod URIs

     [ https://issues.apache.org/jira/browse/SANTUARIO-604?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Colm O hEigeartaigh reassigned SANTUARIO-604:
---------------------------------------------

    Assignee: sean.mullan  (was: Colm O hEigeartaigh)

> Use PSSParameterSpec for RSASSA-PSS without parameters SignatureMethod URIs
> ---------------------------------------------------------------------------
>
>                 Key: SANTUARIO-604
>                 URL: https://issues.apache.org/jira/browse/SANTUARIO-604
>             Project: Santuario
>          Issue Type: Improvement
>          Components: Java
>    Affects Versions: Java 3.0.2, Java 2.3.3
>            Reporter: Sean Mullan
>            Assignee: sean.mullan
>            Priority: Major
>
> Currently, the RSASSA-PSS w/o parameter algorithms defined in RFC 9231 are supported by instantiating Signature objects using algorithms like "SHA256withRSAandMGF1". BouncyCastle supports these algorithms using these names, but the JDK does not.
> A more compatible solution is to instantiate the Signature objects with "RSASSA-PSS" and pass in an appropriate PSSParameterSpec with the default values as specified by RFC 9231.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)