gchq / gchq/CyberChef

Feature request: Add the ability to omit the PKCS#1 algorithmIdentifier when verifying RSA signatures

Open
#1,572 0 comments 0 reactions 0 assignees View on GitHub
feature
Dominant language
JavaScript
Stars
35.8k
Forks
4.1k
Avg merge
2d 26m
Merged PRs (30d)
33

Description

Some non-standard signing schemes use PKCS#1 padding and key format, but they omit the algorithmIdentifier ASN.1 constant that the RFC specifies.

This leads to signature verification failing with `Too few bytes to read ASN.1 value` due to the missing algorithmIdentifier, while the decryption actually succeeds.

Thanks!

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.