[openssl-users] Specify padding scheme with EVP_VerifyFinal

openssl at tuta.io openssl at tuta.io
Tue Feb 21 17:39:56 UTC 2017


Hello,

I am facing a problem regarding an application which uses EVP_VerifyInit_ex, EVP_VerifyUpdate and EVP_VerifyFinal to verify RSA signatures with EVP_get_digestbyname("RSA-SHA256"). Is it correct that ECP_VerifyFinal defaults to PKCS#1 v1.5 padding?
We would like to be able to switch to other padding algorithms without having to change a lot of code of the application itself. Is it possible to specify a different padding scheme (e.g. 
RSA_PKCS1_PSS_PADDING) using this API?
If not, what is the easiest way to work around this "limitation"?

Thank you in advance,
Tom
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170221/96003c1a/attachment.html>


More information about the openssl-users mailing list