blob: 6b641de01eb97016f81d1750d43ba34bdc70396b [file] [log] [blame]
This is the same as rsa-pss-sha256.pem, except the signature was generated
with a salt length of 33 instead of 32, while the algorithm still reports
the standard value of 32.
The public key in SPKI form:
$ openssl pkey -in key.pem -pubout
-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn56hwS55y9JG5gXkTQLX
m/Q4HSJdP/kECgztMMQtqgiv+QdL0J5M7bQNbUK7ZhZt5pES5T0HjJcIENBvhXFz
UZ3rBOMp4yESFLWoSL0quL0DAaRX/ZuZqT+Ow6LPdkwlv1JpKh03ylqxCGbw1bIF
IEsFrp6QDndSPVI1ifd2QfYe+fdRQuF8emaGu50OKRSgziQB50JHKD0zRsh1cgUc
QTyGUiFj2ndFXw1APzylU2+ouYurmN3ZCrvcP2J/qgQdAzDYRQ/bq/v7LNYQc+Gu
d+EIzE3+9spybnWRi2aLrnGwwBCZs/bqc66waK0pzH8z/mDwbB2ZSIal6ARF0iWU
XQIDAQAB
-----END PUBLIC KEY-----
The signing algorithm:
$ openssl asn1parse -i < [ALGORITHM]
0:d=0 hl=2 l= 65 cons: SEQUENCE
2:d=1 hl=2 l= 9 prim: OBJECT :rsassaPss
13:d=1 hl=2 l= 52 cons: SEQUENCE
15:d=2 hl=2 l= 15 cons: cont [ 0 ]
17:d=3 hl=2 l= 13 cons: SEQUENCE
19:d=4 hl=2 l= 9 prim: OBJECT :sha256
30:d=4 hl=2 l= 0 prim: NULL
32:d=2 hl=2 l= 28 cons: cont [ 1 ]
34:d=3 hl=2 l= 26 cons: SEQUENCE
36:d=4 hl=2 l= 9 prim: OBJECT :mgf1
47:d=4 hl=2 l= 13 cons: SEQUENCE
49:d=5 hl=2 l= 9 prim: OBJECT :sha256
60:d=5 hl=2 l= 0 prim: NULL
62:d=2 hl=2 l= 3 cons: cont [ 2 ]
64:d=3 hl=2 l= 1 prim: INTEGER :20
-----BEGIN ALGORITHM-----
MEEGCSqGSIb3DQEBCjA0oA8wDQYJYIZIAWUDBAIBBQChHDAaBgkqhkiG9w0BAQgw
DQYJYIZIAWUDBAIBBQCiAwIBIA==
-----END ALGORITHM-----
-----BEGIN DATA-----
x/UnD8pyX5vRn1GajXzKPMXAeQJAKfO65RD5sCFA/iOJCOT2wY8HqJxofIaEZpsfHbK6+SUaPIK
frMtJMIThbsnijViGgHSl1iIWZ91uUo0W/iyfPbTPr2xNzoyEOa84zqqqnOLsrnvI9KWlXjv5bf
nNV1xPnLMnlRuM3+QIcWg=
-----END DATA-----
The signature was generated with:
$ openssl dgst -sign key.pem -sha256 -sigopt rsa_padding_mode:pss \
-sigopt rsa_pss_saltlen:33 < [DATA] > [SIGNATURE]
Then the signature was wrapped in a BIT STRING.
$ openssl asn1parse -i < [SIGNATURE]
0:d=0 hl=4 l= 257 prim: BIT STRING
-----BEGIN SIGNATURE-----
A4IBAQB4R+AnrWUH+TvyBU3yR1GP1ghodbwUZdyJfG1rqzEqpY/MJtsd1YM9bC9q
FqHao1+idLj+WSl91hbtZAEtNb0TDdXkO+iattPYsTBAeLm70A7DbqwM7s/1rTp0
KJ4QFOJe05wYO+p/zHZ4Oiyhx2bCx+8J1FLlYEtwR0NhwRwPflVO7TNZC1l40iqk
iyxsJrXsibuFnFnBe6BytBdlKF/CHFuve6z5aLauuuQtA17I6YRZ4cdKceD9I3Hs
NVhe+V1V10YoMDx3AywQTnaM+Au+VoxHU6oh9KP5lrrzBhPZPDtzfF++4Ag2Vd2O
GFvPoL8xTp3S8QG5iVs90BkW8GvL
-----END SIGNATURE-----