Skip to content

Commit 74bb71d

Browse files
fix: Make OpenSSL code path enforce COSE specified salt length (#1376)
Make OpenSSL code path enforce Cose specified salt length.
1 parent 38ea9c9 commit 74bb71d

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

sdk/src/crypto/raw_signature/openssl/validators/rsa_validator.rs

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ use openssl::{
1515
hash::MessageDigest,
1616
pkey::PKey,
1717
rsa::{Padding, Rsa},
18-
sign::Verifier,
18+
sign::{RsaPssSaltlen, Verifier},
1919
};
2020

2121
use crate::crypto::raw_signature::{
@@ -58,21 +58,23 @@ impl RawSignatureValidator for RsaValidator {
5858
let mut verifier = Verifier::new(MessageDigest::sha256(), &public_key)?;
5959
verifier.set_rsa_padding(Padding::PKCS1_PSS)?;
6060
verifier.set_rsa_mgf1_md(MessageDigest::sha256())?;
61+
verifier.set_rsa_pss_saltlen(RsaPssSaltlen::DIGEST_LENGTH)?;
6162
verifier
6263
}
6364

6465
Self::Ps384 => {
6566
let mut verifier = Verifier::new(MessageDigest::sha384(), &public_key)?;
6667
verifier.set_rsa_padding(Padding::PKCS1_PSS)?;
6768
verifier.set_rsa_mgf1_md(MessageDigest::sha384())?;
68-
69+
verifier.set_rsa_pss_saltlen(RsaPssSaltlen::DIGEST_LENGTH)?;
6970
verifier
7071
}
7172

7273
Self::Ps512 => {
7374
let mut verifier = Verifier::new(MessageDigest::sha512(), &public_key)?;
7475
verifier.set_rsa_padding(Padding::PKCS1_PSS)?;
7576
verifier.set_rsa_mgf1_md(MessageDigest::sha512())?;
77+
verifier.set_rsa_pss_saltlen(RsaPssSaltlen::DIGEST_LENGTH)?;
7678
verifier
7779
}
7880
};

0 commit comments

Comments
 (0)