Skip to main content
4 votes

Implications of switching RSA padding schemes

Read the next section for why it's likely not necessary to make any change. But let's answer the question anyway. If an adversary can see many similar messages that were signed with both (RSASSA-...
fgrieu's user avatar
  • 142k
3 votes

Differences between two RSA signatures using OpenSSL

There are several ways to build a signature scheme on top of RSA. The two main schemes are PKCS#1v1.5 (named after the version of the document called PKCS#1 that codified it) and PSS (also codified in ...
Gilles 'SO- stop being evil''s user avatar
2 votes

Is Bypassing Padding Verification in RSA-PSS Dangerous?

RSA based signature schemes generally fail badly when padding isn't verified. When the verifier checks the padding, each (salt,message) pair generates a single ...
Richard Thiessen's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible