On Sat, Oct 08, 2005, Oezguer Kesim wrote:

> Hello,
> 
> attached you can find some test code of mine utilizing ECDSA_do_sign and
> ECDSA_do_verify.  It simply signs "fnord" and verifys the signature.
> 
> The strange thing is:  sig->r and sig->s are different from call to
> call of the program.  i2d_ECDSA_SIG also returns different length of the
> DER encoded version of the signature at each call of the program, for
> that matter.
> 
> Am I missing something or is this a bug in ecdsa?

the signature values sig->r and sig->s are computed using a
random number (similar to the DSA signature computation) and
hence these values should be different for each computation.
The length of the DER encoded signature is of course determined
by the length of it's components (and whether the highest bit
is set).

Cheers,
Nils

--
Nils Larsch             [EMAIL PROTECTED]            
OpenSSL Project         http://www.openssl.org/~nils/
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to