Re: Re: SonarLint complaining about "Use a stronger padding scheme"

--0000000000003dcc4d0616230ce7
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Mon, Apr 15, 2024 at 9:18=E2=80=AFAM Frank Sapone <franksaponegea@gmail.=
com>
wrote:

> NVM, it appears PSSR is considered more secure and this should work with
> the verifier


My bad, you should visit <
https://www.cryptopp.com/wiki/RSA_Signature_Schemes>.

Jeff

On Friday, April 12, 2024 at 12:20:56=E2=80=AFPM UTC-4 Jeffrey Walton wrote=
:
>
>> On Friday, April 12, 2024 at 12:19:32=E2=80=AFPM UTC-4 franksa...@gmail.=
com
>> wrote:
>>
>> Hello, I am using Windows 10 Professional x64 with CryptoPP 8.9.0.  It i=
s
>> built with Visual Studio.  We started using SonarQube/SonarLint for SCA
>> during compile and it's been complaining "Use a stronger padding scheme"=
.
>> Specifically it sees this line:
>>
>> RSASS<PKCS1v15, SHA256>::Verifier verifier(publicKey);
>>
>> and complains about the PCKS1v15.  I don't know how to change it to a
>> different type and what other ones are available.  It suggests OAEP for =
RSA
>> which is what I assume we want.
>>
>>
>> https://www.cryptopp.com/wiki/RSA_Encryption_Schemes
>>
>>

--=20
You received this message because you are subscribed to the Google Groups "=
Crypto++ Users" group.
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to [email protected].
To view this discussion on the web visit https://groups.google.com/d/msgid/=
cryptopp-users/CAH8yC8mKs-hogvLGHQgk5SjrO%2B9QBajBKPaHwppp-HB%3DYBSuFw%40ma=
il.gmail.com.

--0000000000003dcc4d0616230ce7
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote">=
<div dir=3D"ltr" class=3D"gmail_attr">On Mon, Apr 15, 2024 at 9:18=E2=80=AF=
AM Frank Sapone &lt;<a href=3D"mailto:[email protected]">franksapone=
[email protected]</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" sty=
le=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddi=
ng-left:1ex">NVM, it appears PSSR is considered more secure and this should=
 work with the verifier</blockquote><div><br></div><div>My bad, you should =
visit &lt;<a href=3D"https://www.cryptopp.com/wiki/RSA_Signature_Schemes">h=
ttps://www.cryptopp.com/wiki/RSA_Signature_Schemes</a>&gt;.</div><div><br><=
/div><div>Jeff<br></div><div><br></div><blockquote class=3D"gmail_quote" st=
yle=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padd=
ing-left:1ex"><div></div><div class=3D"gmail_quote"><div dir=3D"auto" class=
=3D"gmail_attr">On Friday, April 12, 2024 at 12:20:56=E2=80=AFPM UTC-4 Jeff=
rey Walton wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margi=
n:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex=
"><div><div dir=3D"auto">On Friday, April 12, 2024 at 12:19:32=E2=80=AFPM U=
TC-4 <a rel=3D"nofollow">[email protected]</a> wrote:<br></div><blockquo=
te style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204)=
;padding-left:1ex">Hello, I am using Windows 10 Professional x64 with Crypt=
oPP 8.9.0.=C2=A0 It is built with Visual Studio.=C2=A0 We started using Son=
arQube/SonarLint for SCA during compile and it&#39;s been complaining &quot=
;Use a stronger padding scheme&quot;.=C2=A0 Specifically it sees this line:=
 <br><br>RSASS&lt;PKCS1v15, SHA256&gt;::Verifier verifier(publicKey);<br><b=
r>and complains about the PCKS1v15.=C2=A0 I don&#39;t know how to change it=
 to a different type and what other ones are available.=C2=A0 It suggests O=
AEP for RSA which is what I assume we want.<br></blockquote><div><br></div>=
</div><div><div><a href=3D"https://www.cryptopp.com/wiki/RSA_Encryption_Sch=
emes" rel=3D"nofollow" target=3D"_blank">https://www.cryptopp.com/wiki/RSA_=
Encryption_Schemes</a></div><div><br></div>
</div></blockquote></div></blockquote></div></div>

<p></p>

-- <br />
You received this message because you are subscribed to the Google Groups &=
quot;Crypto++ Users&quot; group.<br />
To unsubscribe from this group and stop receiving emails from it, send an e=
mail to <a href=3D"mailto:[email protected]">cryp=
[email protected]</a>.<br />
To view this discussion on the web visit <a href=3D"https://groups.google.c=
om/d/msgid/cryptopp-users/CAH8yC8mKs-hogvLGHQgk5SjrO%2B9QBajBKPaHwppp-HB%3D=
YBSuFw%40mail.gmail.com?utm_medium=3Demail&utm_source=3Dfooter">https://gro=
ups.google.com/d/msgid/cryptopp-users/CAH8yC8mKs-hogvLGHQgk5SjrO%2B9QBajBKP=
aHwppp-HB%3DYBSuFw%40mail.gmail.com</a>.<br />

--0000000000003dcc4d0616230ce7--