Closed Bug 1594965 Opened 5 years ago Closed 4 years ago

PSS delegated credentials need to include a salt length

Categories

(NSS :: Libraries, defect, P2)

defect

Tracking

(Not tracked)

RESOLVED FIXED

People

(Reporter: mt, Assigned: mt)

Details

Attachments

(1 file)

Right now, these omit the salt length field, implying a value of 20. However, signatures use a salt length equal to the hash output length. This is just an omission in the encoding. But it indicates that maybe there are other issues that need further investigation.

I discovered this when validating new additions to our root store
policy. The encodings there didn't line up with what we were producing with DC.

Status: NEW → RESOLVED
Closed: 4 years ago
Resolution: --- → FIXED
Target Milestone: --- → 3.48
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Created:
Updated:
Size: