0

Reading RFC3447, Section 8.2.1, primitive RSASSA-PKCS1-V1_5-SIGN requires an encoding into ASN.1/DER. Why not just sign the raw hash bytes rather then wrapping them as ASN1?

1 Answer 1

0

The ASN.1 wrapper includes the digestAlgorithm field, which explicitly specifies which hash algorithm was used. Without that, the verifier would have to try to infer the algorithm, which would seem like an open invitation to vulnerabilities.

0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .