Hello,

It is not clear to me, how the MSCComputeCrypt() function can handle the process of verifying a signature. The pinputData field must contain the input data to calculate the signature and the signature to verify. How can this two data be separated?

Of course the CardEdge format could be used and the application programmer would have to start with a length field for the inputdata, then the input data, then a length field for the signature and the signature. But this is not convenient.

There is no perfect solution, but maybe the best solution is to exploit the poutputData field and store there the signature to verify. This does not break to specification.

But this problem should be clarified and mentioned in the specification how to use the function, so that all implementations stay compatible.

Bye, Karsten
_______________________________________________
Muscle mailing list
[email protected]
http://lists.drizzle.com/mailman/listinfo/muscle

Reply via email to