[Bug 60140] New: Signature from BCryptSignHash with RSA 512 key and PSS padding cannot be verified

[WineHQ Bugzilla]

http://bugs.winehq.org/show_bug.cgi?id=60140

            Bug ID: 60140
           Summary: Signature from BCryptSignHash with RSA 512 key and PSS
                    padding cannot be verified
           Product: Wine
           Version: 10.0
          Hardware: x86-64
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: bcrypt
          Assignee: [e-mail]
          Reporter: [e-mail]
  Target Milestone: ---
      Distribution: ---

Created attachment 81739
  --> http://bugs.winehq.org/attachment.cgi?id=81739
sample C++ application that signs data and verifies signature

Signing data using BCryptSignHash with an RSA 512-bit key and BCRYPT_PAD_PSS
successfully produces a signature, but using the same key pair to validate the
signature fails with STATUS_INVALID_SIGNATURE.

There are a few problems with this:

1. The same BCryptSignHash with RSA 512 key and PSS padding on Win10 or Win11
fails with STATUS_INVALID_PARAMETER. That's a behavior difference with Windows.

2. Of course, the signature validation failure is an error too.

I'm attaching a minimal repro that demonstrates the problem.

-- 
Do not reply to this email, post in Bugzilla using the
above URL to reply.
You are receiving this mail because:
You are watching all bug changes.