Re: Re: SonarLint complaining about "Use a stronger padding scheme"
Frank Sapone <[email protected]> Tue, 16 Apr 2024 12:27:32 -0700 (PDT)
| Newsgroups | gmane.comp.encryption.cryptopp |
|---|---|
| Message-ID | <[email protected]> |
------=_Part_1306_1979244295.1713295652720 Content-Type: multipart/alternative; boundary="----=_Part_1307_595861814.1713295652720" ------=_Part_1307_595861814.1713295652720 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I grabbed it but it's not relevant. I need to have a certificate with RSA= =20 PSS that can be read by CryptoPP with the X509Cert lib. Is it possible to= =20 do this? On Tuesday, April 16, 2024 at 3:19:47=E2=80=AFPM UTC-4 Jeffrey Walton wrote= : > On Tue, Apr 16, 2024 at 1:44=E2=80=AFPM One Sini <[email protected]> wrote= : > >> I wasn't entirely satisfied with the security, so I've adjusted the code= .=20 >> I'm not sure if that helps you, depending on what you're doing with it. >> >> This code uses RSA with OAEP (Optimal Asymmetric Encryption Padding) to= =20 >> avoid security issues like padding oracle attacks. It generates RSA keys= =20 >> with a length of 2048 bits, encrypts the message with OAEP padding, and= =20 >> then decrypts it. >> >> Best Regards Satoshi=20 >> > > I deleted the message from the group. The *.pdf and *.pages smells of=20 > malware. > > If you want to provide code, please inline it or provide it as a text=20 > attachment. > > Jeff > >> --=20 You received this message because you are subscribed to the Google Groups "= Crypto++ Users" group. To unsubscribe from this group and stop receiving emails from it, send an e= mail to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/= cryptopp-users/f0768575-1a15-402e-a38d-6fde80712582n%40googlegroups.com. ------=_Part_1307_595861814.1713295652720 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable I grabbed it but it's not relevant.=C2=A0 I need to have a certificate with= RSA PSS that can be read by CryptoPP with the X509Cert lib.=C2=A0 Is it po= ssible to do this?<br /><br /><div class=3D"gmail_quote"><div dir=3D"auto" = class=3D"gmail_attr">On Tuesday, April 16, 2024 at 3:19:47=E2=80=AFPM UTC-4= Jeffrey Walton wrote:<br/></div><blockquote class=3D"gmail_quote" style=3D= "margin: 0 0 0 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-le= ft: 1ex;"><div dir=3D"ltr"><div class=3D"gmail_quote"><div dir=3D"ltr" clas= s=3D"gmail_attr">On Tue, Apr 16, 2024 at 1:44=E2=80=AFPM One Sini <<a hr= ef data-email-masked rel=3D"nofollow">[email protected]</a>> wrote:<br></= div></div></div><div dir=3D"ltr"><div class=3D"gmail_quote"><blockquote cla= ss=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid = rgb(204,204,204);padding-left:1ex"><div dir=3D"auto"><div><span style=3D"fo= nt-family:s=C3=B6hne,ui-sans-serif,system-ui,-apple-system,"segoe ui&q= uot;,roboto,ubuntu,cantarell,"noto sans",sans-serif,"helveti= ca neue",arial,"apple color emoji","segoe ui emoji"= ;,"segoe ui symbol","noto color emoji";font-size:16px;f= ont-style:normal;font-weight:400;letter-spacing:normal;text-indent:0px;text= -transform:none;white-space:pre-wrap;word-spacing:0px;text-decoration:none;= float:none;display:inline;color:rgb(13,13,13)">I wasn't entirely satisf= ied with the security, so I've adjusted the code. I'm not sure if t= hat helps you, depending on what you're doing with it.</span></div><br>= </div></blockquote></div></div><div dir=3D"ltr"><div class=3D"gmail_quote">= <blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-= left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"auto"><div><s= pan style=3D"font-family:s=C3=B6hne,ui-sans-serif,system-ui,-apple-system,&= quot;segoe ui",roboto,ubuntu,cantarell,"noto sans",sans-seri= f,"helvetica neue",arial,"apple color emoji","sego= e ui emoji","segoe ui symbol","noto color emoji";f= ont-size:16px;font-style:normal;font-weight:400;letter-spacing:normal;text-= indent:0px;text-transform:none;white-space:pre-wrap;word-spacing:0px;text-d= ecoration:none;float:none;display:inline;color:rgb(13,13,13)">This code use= s RSA with OAEP (Optimal Asymmetric Encryption Padding) to avoid security i= ssues like padding oracle attacks. It generates RSA keys with a length of 2= 048 bits, encrypts the message with OAEP padding, and then decrypts it.</sp= an></div><div dir=3D"auto"><span style=3D"font-family:s=C3=B6hne,ui-sans-se= rif,system-ui,-apple-system,"segoe ui",roboto,ubuntu,cantarell,&q= uot;noto sans",sans-serif,"helvetica neue",arial,"apple= color emoji","segoe ui emoji","segoe ui symbol",&= quot;noto color emoji";font-size:16px;font-style:normal;font-weight:40= 0;letter-spacing:normal;text-indent:0px;text-transform:none;white-space:pre= -wrap;word-spacing:0px;text-decoration:none;float:none;display:inline;color= :rgb(13,13,13)"><br></span></div></div></blockquote></div></div><div dir=3D= "ltr"><div class=3D"gmail_quote"><blockquote class=3D"gmail_quote" style=3D= "margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-le= ft:1ex"><div dir=3D"auto"><div dir=3D"auto"><span style=3D"font-family:s=C3= =B6hne,ui-sans-serif,system-ui,-apple-system,"segoe ui",roboto,ub= untu,cantarell,"noto sans",sans-serif,"helvetica neue",= arial,"apple color emoji","segoe ui emoji","segoe = ui symbol","noto color emoji";font-size:16px;font-style:norm= al;font-weight:400;letter-spacing:normal;text-indent:0px;text-transform:non= e;white-space:pre-wrap;word-spacing:0px;text-decoration:none;float:none;dis= play:inline;color:rgb(13,13,13)">Best Regards Satoshi </span></div></div></= blockquote><div><br></div><div>I deleted the message from the group. The *.= pdf and *.pages smells of malware.</div><div><br></div><div>If you want to = provide code, please inline it or provide it as a text attachment.<br></div= ><div><br></div><div>Jeff</div><blockquote class=3D"gmail_quote" style=3D"m= argin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left= :1ex"><div><div class=3D"gmail_quote"><blockquote class=3D"gmail_quote" sty= le=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);paddi= ng-left:1ex"> </blockquote></div></div></blockquote></div></div> </blockquote></div> <p></p> -- <br /> You received this message because you are subscribed to the Google Groups &= quot;Crypto++ Users" group.<br /> To unsubscribe from this group and stop receiving emails from it, send an e= mail to <a href=3D"mailto:[email protected]">cryp= [email protected]</a>.<br /> To view this discussion on the web visit <a href=3D"https://groups.google.c= om/d/msgid/cryptopp-users/f0768575-1a15-402e-a38d-6fde80712582n%40googlegro= ups.com?utm_medium=3Demail&utm_source=3Dfooter">https://groups.google.com/d= /msgid/cryptopp-users/f0768575-1a15-402e-a38d-6fde80712582n%40googlegroups.= com</a>.<br /> ------=_Part_1307_595861814.1713295652720-- ------=_Part_1306_1979244295.1713295652720--