RFR: 8285404: RSA signature verification should reject non-DER OCTET STRING

Valerie Peng valeriep at openjdk.java.net
Tue Apr 26 17:13:55 UTC 2022


On Sun, 24 Apr 2022 14:34:46 GMT, Weijun Wang <weijun at openjdk.org> wrote:

> Regardless whether we ended up with decode/encode, we should make sure RSASSA-PSS signature impl is also covered and consistent.

Never mind, PSS has its own way of verification and its impl is based on RFC 8017.

-------------

PR: https://git.openjdk.java.net/jdk/pull/8365



More information about the security-dev mailing list