Fix signature size calculation in PadesTwoPhaseSigningHelper

glenner003 · glenner003 · commit c02f3a1c4936 · 2024-04-18T08:12:56.000+02:00
DEVSIX-8115
diff --git a/sign/src/main/java/com/itextpdf/signatures/PadesTwoPhaseSigningHelper.java b/sign/src/main/java/com/itextpdf/signatures/PadesTwoPhaseSigningHelper.java
@@ -255,7 +255,7 @@ public CMSContainer createCMSContainerWithoutSignature(Certificate[] certificate
         cms.setSignerInfo(signerInfo);
 
         MessageDigest messageDigest = MessageDigest.getInstance(DigestAlgorithms.getDigest(digestAlgorithmOid));
-        int realSignatureSize = messageDigest.getDigestLength() + (int) cms.getSizeEstimation();
+        int realSignatureSize = (messageDigest.getDigestLength() + (int) cms.getSizeEstimation()) * 2 + 2;
         if (tsaClient != null) {
             realSignatureSize += tsaClient.getTokenSizeEstimate();
         }

Original file line number	Diff line number	Diff line change
`@@ -255,7 +255,7 @@ public CMSContainer createCMSContainerWithoutSignature(Certificate[] certificate`
`255`	`255`	`cms.setSignerInfo(signerInfo);`
`256`	`256`
`257`	`257`	`MessageDigest messageDigest = MessageDigest.getInstance(DigestAlgorithms.getDigest(digestAlgorithmOid));`
`258`		`- int realSignatureSize = messageDigest.getDigestLength() + (int) cms.getSizeEstimation();`
	`258`	`+ int realSignatureSize = (messageDigest.getDigestLength() + (int) cms.getSizeEstimation()) * 2 + 2;`
`259`	`259`	`if (tsaClient != null) {`
`260`	`260`	`realSignatureSize += tsaClient.getTokenSizeEstimate();`
`261`	`261`	`}`