Descriptioncrypto/rsa: left-pad OAEP results when needed.
PKCS#1 v2.1 section 7.1.1 says that the result of an OAEP encryption
is "an octet string of length $k$". Since we didn't left-pad the
result it was previously possible for the result to be smaller when
the most-significant byte was zero.
Fixes issue 1519.
Patch Set 1 #Patch Set 2 : diff -r dea835a8ff3e https://go.googlecode.com/hg/ #Patch Set 3 : diff -r 8e157f1abc87 https://go.googlecode.com/hg/ #
MessagesTotal messages: 3
|