Re: SonarLint complaining about "Use a stronger padding scheme"

------=_Part_333798_1284875779.1713183475606
Content-Type: multipart/alternative; 
	boundary="----=_Part_333799_735092238.1713183475606"

------=_Part_333799_735092238.1713183475606
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

I'm very ignorant to crypto stuff so I was using the following=20
guide:  https://www.cryptopp.com/wiki/X509Certificate

What I am trying to do is use X509Certificates and the certs for the user=
=20
get generated by the server and is used for validation by checking that the=
=20
user cert was signed by the server cert.  The RSAES has no "verifier" in=20
the class.  So what do I do here?

Frank

On Friday, April 12, 2024 at 12:20:56=E2=80=AFPM UTC-4 Jeffrey Walton wrote=
:

> On Friday, April 12, 2024 at 12:19:32=E2=80=AFPM UTC-4 [email protected]=
om wrote:
>
> Hello, I am using Windows 10 Professional x64 with CryptoPP 8.9.0.  It is=
=20
> built with Visual Studio.  We started using SonarQube/SonarLint for SCA=
=20
> during compile and it's been complaining "Use a stronger padding scheme".=
=20
>  Specifically it sees this line:=20
>
> RSASS<PKCS1v15, SHA256>::Verifier verifier(publicKey);
>
> and complains about the PCKS1v15.  I don't know how to change it to a=20
> different type and what other ones are available.  It suggests OAEP for R=
SA=20
> which is what I assume we want.
>
>
> https://www.cryptopp.com/wiki/RSA_Encryption_Schemes
>
> Jeff
>

--=20
You received this message because you are subscribed to the Google Groups "=
Crypto++ Users" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to [email protected].
To view this discussion on the web visit https://groups.google.com/d/msgid/=
cryptopp-users/3ab6a766-7259-4ef3-aa57-5df1b1ce2ff1n%40googlegroups.com.

------=_Part_333799_735092238.1713183475606
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

I'm very ignorant to crypto stuff so I was using the following guide:=C2=A0=
=C2=A0https://www.cryptopp.com/wiki/X509Certificate<div><br /></div><div>Wh=
at I am trying to do is use X509Certificates and the certs for the user get=
 generated by the server and is used for validation by checking that the us=
er cert was signed by the server cert.=C2=A0 The RSAES has no "verifier" in=
 the class.=C2=A0 So what do I do here?</div><div><br /></div><div>Frank<br=
 /><br /></div><div class=3D"gmail_quote"><div dir=3D"auto" class=3D"gmail_=
attr">On Friday, April 12, 2024 at 12:20:56=E2=80=AFPM UTC-4 Jeffrey Walton=
 wrote:<br/></div><blockquote class=3D"gmail_quote" style=3D"margin: 0 0 0 =
0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div>=
<div dir=3D"auto">On Friday, April 12, 2024 at 12:19:32=E2=80=AFPM UTC-4 <a=
 href data-email-masked rel=3D"nofollow">[email protected]</a> wrote:<br=
></div><blockquote style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid =
rgb(204,204,204);padding-left:1ex">Hello, I am using Windows 10 Professiona=
l x64 with CryptoPP 8.9.0. =C2=A0It is built with Visual Studio. =C2=A0We s=
tarted using SonarQube/SonarLint for SCA during compile and it&#39;s been c=
omplaining &quot;Use a stronger padding scheme&quot;. =C2=A0Specifically it=
 sees this line: <br><br>RSASS&lt;PKCS1v15, SHA256&gt;::Verifier verifier(p=
ublicKey);<br><br>and complains about the PCKS1v15. =C2=A0I don&#39;t know =
how to change it to a different type and what other ones are available. =C2=
=A0It suggests OAEP for RSA which is what I assume we want.<br></blockquote=
><div><br></div></div><div><div><a href=3D"https://www.cryptopp.com/wiki/RS=
A_Encryption_Schemes" target=3D"_blank" rel=3D"nofollow" data-saferedirectu=
rl=3D"https://www.google.com/url?hl=3Den-US&amp;q=3Dhttps://www.cryptopp.co=
m/wiki/RSA_Encryption_Schemes&amp;source=3Dgmail&amp;ust=3D1713269064461000=
&amp;usg=3DAOvVaw2HkcsUHZ9udpCMyTpyRhpr">https://www.cryptopp.com/wiki/RSA_=
Encryption_Schemes</a></div><div><br></div><div>Jeff<br></div></div></block=
quote></div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;Crypto++ Users&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">cryp=
[email protected]</a>.<br />
To view this discussion on the web visit <a href=3D"https://groups.google.c=
om/d/msgid/cryptopp-users/3ab6a766-7259-4ef3-aa57-5df1b1ce2ff1n%40googlegro=
ups.com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google.com/d=
/msgid/cryptopp-users/3ab6a766-7259-4ef3-aa57-5df1b1ce2ff1n%40googlegroups.=
com</a>.<br />

------=_Part_333799_735092238.1713183475606--

------=_Part_333798_1284875779.1713183475606--