> > > RSA_public_encrypt(size, inText, sigBuffer, rsaPubKey, > > > RSA_PKCS1_OAEP_PADDING);
> > Ooops, you just threw away the return value from > > RSA_public_encrypt. So how > > are you going to know how big the signature is? > RSA_size() I thought RSA_size gave the modulus size, which is also the maximum size for what you can sign or encrypt or the resulting signature or encrypted output. Is it always guaranteed that an RSA signature will always be exactly this size? Is there some reason it can't be, say, a byte shorter? DS ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]