On Wed, Jul 31, 2002 at 01:46:57PM -0700, Robert Pereira wrote: > Hi, > > I attempt to sign a 160 bit SHA1 hash using my private key as follows: > > C:\openssl-engine-0.9.6d\out32dll>openssl rsautl -sign -in 16k.hex -inkey > server.key -out sign16k.hex -pkcs > > Then, I attempt to hexdump the verifcation using the following: > > C:\openssl-engine-0.9.6d\out32dll>openssl rsautl -verify -in > sign16k.hex -inkey server.key -raw -hexdump > > What I get is: > > > 0000 - 00 01 ff ff ff ff ff ff-ff ff ff ff ff ff ff ff ................ > 0010 - ff ff ff ff ff ff ff ff-ff ff ff ff ff ff ff ff ................ > 0020 - ff ff ff ff ff ff ff ff-ff ff ff ff ff ff ff ff ................ > 0030 - ff ff ff ff ff ff ff ff-ff ff ff ff ff ff ff ff ................ > 0040 - ff ff ff ff ff ff ff ff-ff ff ff ff ff ff ff ff ................ > 0050 - ff ff ff ff ff ff ff ff-ff ff ff ff ff ff ff ff ................ > 0060 - ff ff ff ff ff ff ff ff-ff ff ff 00 f2 e0 1c e1 ................ > 0070 - 7e ef 14 3b 1c 39 b2 92-d5 07 5a 01 48 d1 b0 52 ~..;.9....Z.H..R > > which does not contain the 15 byte padding associated with PKCS v. 1.5 > padding. Can you please tell me what I may be doing incorrectly.
this dump looks exactly as outlined in RFC 2437, section 9.2.1 > > Thanks, > Robert Pereira -- Naina library: http://www.unity.net/~vf/naina_r1.tgz ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]