Hi there, I was reading the Crypto/RSA documentation, since I'm using OAEP encryption for testing purposes. So I read this <https://golang.org/pkg/crypto/rsa/#EncryptOAEP> which ends with:
> The message must be no longer than the length of the public modulus less twice the hash length *plus *2. Which I directly *translated *(maybe me being no native speaker is at fault there) into: > len(msg) <= len(public_modulus) - 2*len(hash) + 2 which I found puzzling since I thought it should have been -2, as I had checked the standard recently, so I double-checked the RFC <https://www.ietf.org/rfc/rfc3447.txt> which says: > RSAES-OAEP can operate on messages of length up to k - 2hLen - 2 octets, where hLen is the length of the output from the underlying hash function and k is the length in octets of the recipient's RSA modulus. I guess it was intended to mean len(msg) <= len(public_modulus) - (2*len(hash) + 2), but those parens are not enough implied by such phrasing, in my opinion. I've checked and the code is correct <https://golang.org/src/crypto/rsa/rsa.go#L358>, so in the worse case a user may once end up getting an error after trying this "false-positive" border-case, if I may say so. So here am I: *should I open an issue for a trivial sign mistake in a sentence in the documentation?* I don't know what the usage is, I took a look at the guidelines for contributing and did not see any mention of such minor contribution. I think it would be clearer written as follows (but maybe my usage of the comma is not correct in English?): > The message must be no longer than the length of the public modulus less twice the hash length, less 2. Or maybe it would even be better to write it in a more mathematical fashion? Like: > The message must be no longer than the length of the public modulus - 2 * the hash length - 2. However, any opinion would be appreciated. Best regards, Y. -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to golang-nuts+unsubscr...@googlegroups.com. For more options, visit https://groups.google.com/d/optout.
