Background: Trying to generate some  EMSA-PSS 
(message,salt,em)-tuples with gnu crypto, but certain bytes does not seem 
correct (in my case which uses SHA512, bytes at offset 384-446).
Seems that the cause is within EMSA_PSS.java:L370, as shown in the 
attached screenshot, where the generated `limit` is exactly one smaller than 
required, leaving the last chunk in generated mask zeros.



Fix: I believe removing the `-1` or changing the loop on L379 to `while (sofar 
< l)` will fix the problem.&nbsp;

Attachment: [email protected]
Description: Binary data

_______________________________________________
gnu-crypto-discuss mailing list
[email protected]
https://lists.gnu.org/mailman/listinfo/gnu-crypto-discuss

Reply via email to