Timeline for How often does RSA-OAEP have a leading zero?
Current License: CC BY-SA 3.0
5 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 7, 2015 at 17:03 | comment | added | TBridges42 | You are right both that I do not have enough information and that I'm probably mixing some things up. I gave you the answer because your answer seems clear and well explained, even though I can't reconcile it with the information I am receiving. Hopefully I'll get to read the final write-up when this is all done and that will shed some light. | |
| Jul 7, 2015 at 17:01 | vote | accept | TBridges42 | ||
| Jul 2, 2015 at 17:49 | comment | added | Gilles 'SO- stop being evil' | @TBridges42 A key that's one bit short would have the expected number of bytes, yes. But it's unclear to me whether the file with the problematic length even contains a key (and if it does, what makes you sure that it's an RSA key). At that level of remove, it's difficult to know what the vendor did wrong, what your customer is perhaps not reporting faithfully and completely, and what you might be mixing up. | |
| Jul 2, 2015 at 11:02 | comment | added | Maarten Bodewes♦ | Important note: it can also have more than 1 leading zero (2 bytes more than 1/65536 of the time, of course etc. etc.). The chance that there are more than 8 leading zero's is negligable ($2^{64}$), 16 leading zeros is next to impossible given that the encryption routine is correct. I can still remember the phrase: "OK, we've fixed the leading byte problem" pretty well - that's not enough. | |
| Jul 1, 2015 at 22:47 | history | answered | Gilles 'SO- stop being evil' | CC BY-SA 3.0 |