Re: PK11_Verify vs. VFY_VerifyDigest

2007-03-30 Thread Robert Relyea
Peter Djalaliev wrote: Can somebody elaborate a little more about why one is better then the other? I went to the VFY_VerifyDigest code and I saw in vfy_VerifyDigest that: - for signatures produced with the RSA encryption algorithm, it would decrypt the signature using the public key and

Re: PK11_Verify vs. VFY_VerifyDigest

2007-03-28 Thread Wan-Teh Chang
On 27 Mar 2007 19:43:13 -0700, Peter Djalaliev [EMAIL PROTECTED] wrote: Hello, When I had a problem with verifying a RSA signtaure, I was hinted by Bob Releya that the VFY_* functions are better to use than PK11_Verify when trying to verify a signature given the digest of what was actually

Re: PK11_Verify vs. VFY_VerifyDigest

2007-03-28 Thread Nelson Bolyard
Wan-Teh Chang wrote: As I pointed out above, the PKCS #11 token also handles verifying RSA signatures. The only difference between the handling of RSA and DSA/ECDSA signatures is when we call PK11_xxx and whether we call PK11_VerifyRecover or PK11_Verify. (PK11_VerifyRecover doesn't make