rsa-pss-sha256-wrong-salt.pem 2.5 KB

12345678910111213141516171819202122232425262728293031323334353637383940414243444546474849505152535455565758596061
  1. This is the same as rsa-pss-sha256.pem, except the signature was generated
  2. with a salt length of 33 instead of 32, while the algorithm still reports
  3. the standard value of 32.
  4. The public key in SPKI form:
  5. $ openssl pkey -in key.pem -pubout
  6. -----BEGIN PUBLIC KEY-----
  7. MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn56hwS55y9JG5gXkTQLX
  8. m/Q4HSJdP/kECgztMMQtqgiv+QdL0J5M7bQNbUK7ZhZt5pES5T0HjJcIENBvhXFz
  9. UZ3rBOMp4yESFLWoSL0quL0DAaRX/ZuZqT+Ow6LPdkwlv1JpKh03ylqxCGbw1bIF
  10. IEsFrp6QDndSPVI1ifd2QfYe+fdRQuF8emaGu50OKRSgziQB50JHKD0zRsh1cgUc
  11. QTyGUiFj2ndFXw1APzylU2+ouYurmN3ZCrvcP2J/qgQdAzDYRQ/bq/v7LNYQc+Gu
  12. d+EIzE3+9spybnWRi2aLrnGwwBCZs/bqc66waK0pzH8z/mDwbB2ZSIal6ARF0iWU
  13. XQIDAQAB
  14. -----END PUBLIC KEY-----
  15. The signing algorithm:
  16. $ openssl asn1parse -i < [ALGORITHM]
  17. 0:d=0 hl=2 l= 65 cons: SEQUENCE
  18. 2:d=1 hl=2 l= 9 prim: OBJECT :rsassaPss
  19. 13:d=1 hl=2 l= 52 cons: SEQUENCE
  20. 15:d=2 hl=2 l= 15 cons: cont [ 0 ]
  21. 17:d=3 hl=2 l= 13 cons: SEQUENCE
  22. 19:d=4 hl=2 l= 9 prim: OBJECT :sha256
  23. 30:d=4 hl=2 l= 0 prim: NULL
  24. 32:d=2 hl=2 l= 28 cons: cont [ 1 ]
  25. 34:d=3 hl=2 l= 26 cons: SEQUENCE
  26. 36:d=4 hl=2 l= 9 prim: OBJECT :mgf1
  27. 47:d=4 hl=2 l= 13 cons: SEQUENCE
  28. 49:d=5 hl=2 l= 9 prim: OBJECT :sha256
  29. 60:d=5 hl=2 l= 0 prim: NULL
  30. 62:d=2 hl=2 l= 3 cons: cont [ 2 ]
  31. 64:d=3 hl=2 l= 1 prim: INTEGER :20
  32. -----BEGIN ALGORITHM-----
  33. MEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIBBQChHDAaBgkqhkiG9w0BAQgw
  34. DQYJYIZIAWUDBAIBBQCiAwIBIA==
  35. -----END ALGORITHM-----
  36. -----BEGIN DATA-----
  37. x/UnD8pyX5vRn1GajXzKPMXAeQJAKfO65RD5sCFA/iOJCOT2wY8HqJxofIaEZpsfHbK6+SUaPIK
  38. frMtJMIThbsnijViGgHSl1iIWZ91uUo0W/iyfPbTPr2xNzoyEOa84zqqqnOLsrnvI9KWlXjv5bf
  39. nNV1xPnLMnlRuM3+QIcWg=
  40. -----END DATA-----
  41. The signature was generated with:
  42. $ openssl dgst -sign key.pem -sha256 -sigopt rsa_padding_mode:pss \
  43. -sigopt rsa_pss_saltlen:33 < [DATA] > [SIGNATURE]
  44. Then the signature was wrapped in a BIT STRING.
  45. $ openssl asn1parse -i < [SIGNATURE]
  46. 0:d=0 hl=4 l= 257 prim: BIT STRING
  47. -----BEGIN SIGNATURE-----
  48. A4IBAQB4R+AnrWUH+TvyBU3yR1GP1ghodbwUZdyJfG1rqzEqpY/MJtsd1YM9bC9q
  49. FqHao1+idLj+WSl91hbtZAEtNb0TDdXkO+iattPYsTBAeLm70A7DbqwM7s/1rTp0
  50. KJ4QFOJe05wYO+p/zHZ4Oiyhx2bCx+8J1FLlYEtwR0NhwRwPflVO7TNZC1l40iqk
  51. iyxsJrXsibuFnFnBe6BytBdlKF/CHFuve6z5aLauuuQtA17I6YRZ4cdKceD9I3Hs
  52. NVhe+V1V10YoMDx3AywQTnaM+Au+VoxHU6oh9KP5lrrzBhPZPDtzfF++4Ag2Vd2O
  53. GFvPoL8xTp3S8QG5iVs90BkW8GvL
  54. -----END SIGNATURE-----