Feature request: Add the ability to omit the PKCS#1 algorithmIdentifier when verifying RSA signatures
Open
feature
- Dominant language
- JavaScript
- Stars
- 35.8k
- Forks
- 4.1k
- Avg merge
- 2d 26m
- Merged PRs (30d)
- 33
Description
Some non-standard signing schemes use PKCS#1 padding and key format, but they omit the algorithmIdentifier ASN.1 constant that the RFC specifies.
This leads to signature verification failing with `Too few bytes to read ASN.1 value` due to the missing algorithmIdentifier, while the decryption actually succeeds.
Thanks!
Contributor guide
Assessment
This issue has not been assessed yet.