Hello,
> > > > RSA_public_encrypt(size, inText, sigBuffer, rsaPubKey,
> > > > RSA_PKCS1_OAEP_PADDING);
> 
> > > Ooops, you just threw away the return value from
> > > RSA_public_encrypt. So how
> > > are you going to know how big the signature is?
> 
> > RSA_size()
> 
> I thought RSA_size gave the modulus size, which is also the maximum size for
> what you can sign or encrypt or the resulting signature or encrypted output.
Yes and no - you may be not able to encrypt some data even it is not bigger
than this number but bigger then modulus (as number).

> Is it always guaranteed that an RSA signature will always be exactly this
> size?
In OpenSSL - yes.

>  Is there some reason it can't be, say, a byte shorter?
In other implementation - I do not know.

Best regards,
-- 
Marek Marcola <[EMAIL PROTECTED]>

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [email protected]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to