Hello,

I found a behaviour that seems strange to me in Cryptix 3.1.1 when testing
an OCF implementation.

In PKCS#1 a signature is an OCTET STRING that has the length
of the modulus.

This seems to be different in Cryptix, where a leading zero byte is
appended
to some signatures (those with MSB>= 0x80).
Additionally, Cryptix will "trim" a signature so that leading zeroes will
be lost
in case that there is more than one of them.

This makes it difficult to use OCF together with Cryptix.

Three questions arise from this:
1) Does Cryptix comply with JCA or PKCS#1 regarding signing operations?
2) Does OCF comply with JCA or PKCS#1 regarding signing operations?
3) How can PKCS#1 compliance be achieved?

Regards,
� � Daniel




---
> Visit the OpenCard web site at http://www.opencard.org/ for more
> information on OpenCard---binaries, source code, documents.
> This list is being archived at http://www.opencard.org/archive/opencard/

! To unsubscribe from the [EMAIL PROTECTED] mailing list send an email
! to
!                           [EMAIL PROTECTED]
! containing the word
!                           unsubscribe
! in the body.

Reply via email to