update from PSS -> PKCS1v15

This commit is contained in:
apeace
2022-08-02 15:46:06 -04:00
parent 136133e643
commit 35983423ed
2 changed files with 13 additions and 7 deletions

View File

@@ -489,7 +489,7 @@ func (r *contentReader) Read(p []byte) (n int, err error) {
} else {
pubKey = k
}
err := rsa.VerifyPSS(pubKey, crypto.SHA256, r.hash.Sum(nil), r.su3.signatureReader.bytes, nil)
err := rsa.VerifyPKCS1v15(pubKey, crypto.SHA256, r.hash.Sum(nil), r.su3.signatureReader.bytes)
if err != nil {
return l, ErrInvalidSignature
}
@@ -500,7 +500,7 @@ func (r *contentReader) Read(p []byte) (n int, err error) {
} else {
pubKey = k
}
err := rsa.VerifyPSS(pubKey, crypto.SHA512, r.hash.Sum(nil), r.su3.signatureReader.bytes, nil)
err := rsa.VerifyPKCS1v15(pubKey, crypto.SHA512, r.hash.Sum(nil), r.su3.signatureReader.bytes)
if err != nil {
return l, ErrInvalidSignature
}

View File

@@ -73,9 +73,12 @@ func TestSig_reseed_i2pgit(t *testing.T) {
content := fileBytes(t, "./testdata/reseed-i2pgit-content.zip")
sig := fileBytes(t, "./testdata/reseed-i2pgit-signature")
hash := crypto.SHA512.New()
hash.Write(content)
_, err := hash.Write(content)
if err != nil {
t.Fatal(err)
}
digest := hash.Sum(nil)
err := rsa.VerifyPKCS1v15(key, 0, digest, sig)
err = rsa.VerifyPKCS1v15(key, crypto.SHA512, digest, sig)
if err != nil {
t.Fatal(err)
}
@@ -87,9 +90,12 @@ func TestSig_plugin_snowflake(t *testing.T) {
content := fileBytes(t, "./testdata/snowflake-content")
sig := fileBytes(t, "./testdata/snowflake-signature")
hash := crypto.SHA512.New()
hash.Write(content)
_, err := hash.Write(content)
if err != nil {
t.Fatal(err)
}
digest := hash.Sum(nil)
err := rsa.VerifyPKCS1v15(key, 0, digest, sig)
err = rsa.VerifyPKCS1v15(key, crypto.SHA512, digest, sig)
if err != nil {
t.Fatal(err)
}
@@ -397,7 +403,7 @@ func TestMain(m *testing.M) {
panic(err)
}
sum := hash.Sum(nil)
aliceSignature, err = rsa.SignPSS(rand.Reader, aliceFakeKey, crypto.SHA256, sum, nil)
aliceSignature, err = rsa.SignPKCS1v15(rand.Reader, aliceFakeKey, crypto.SHA256, sum)
if err != nil {
panic(err)
}