Questions tagged [pss]

In a Probabilistic Signature Scheme, the signature depends on a random input, in addition to the private key and message.

Filter by
Sorted by
Tagged with
4 votes
1 answer
91 views

Is Bypassing Padding Verification in RSA-PSS Dangerous?

I am currently working on a project involving RSA-PSS (Probabilistic Signature Scheme) for digital signatures. While researching potential vulnerabilities, I came across the well-known Bleichenbacher ...
user113612's user avatar
1 vote
1 answer
2k views

Why does RSASSA-PSS produce different signature each time even if I use same salt and same message?

I understand that RSASSA-PSS is not deterministic. But I see that in message encoding, MGF and SHA functions are deterministic. So even if I keep default salt length, it produces different signature. ...
Maulik's user avatar
  • 11
2 votes
2 answers
2k views

Preferred SHA-2 hash algorithm for MGF1 in RSA

Does it make any difference to the security and efficiency if we use SHA-256 or SHA-512 for the Mask Generation Function MGF1 that generates the masking / padding within the OAEP encryption scheme and ...
Maarten Bodewes's user avatar
  • 92.3k