I believe this difference does not matter because the formatted block is treated as a big-endian big integer by the RSA algorithm, so the leading 00 octet is simply eight most significant 0 bits.
And because the text of the version without the initial 00 says :
"PS is a string of strong pseudo-random octets [RANDOM] [...] long enough that the value of the quantity being CRYPTed is one octet shorter than the RSA modulus"
The version that has the initial 00 instead says to pad to the same length as the RSA modulus.
At the end of the day the same length as the RSA modulus with as initial byte that is 0 or one octet shorter without that initial byte is exactly the same thing.
_______________________________________________
mozilla-crypto mailing list
[email protected]
http://mail.mozilla.org/listinfo/mozilla-crypto
