Skip to content

Conversation

@timlegge
Copy link
Member

@timlegge timlegge commented Oct 29, 2025

Add support for use_pkcs1_pss_padding

This change implements RSA_PKCS1_PSS_PADDING as the recommended replacement for RSA_PKCS1_PADDING

It should also be noted that RSA_PKCS1_PSS_PADDING (and use_pkcs1_pss_padding should only be used for signing/verification operations

Fatal error if RSA-PSS is used for encryption operations

This change effectively reverses the fatal failure if use_pkcs1_padding is called and sets the padding to default to RSA_PKCS1_PSS_PADDING which is the recommended replacement for RSA_PKCS1_PADDING

This will allow modules to continue to call use_pkcs1_padding but effectively replace it with the recommended alternative

This may avoid changes to other modules but might not be what the user wants

It should alos be noted that RSA_PKCS1_PSS_PADDING (and use_pkcs1_pss_padding should only be used for signing/verification operations
@timlegge timlegge requested a review from toddr October 29, 2025 03:14
@timlegge timlegge force-pushed the pss_padding branch 2 times, most recently from 8838561 to d35f36c Compare October 29, 2025 20:57
@toddr toddr merged commit 1789207 into cpan-authors:main Oct 29, 2025
14 of 16 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants