Re: PKINIT for gsissh

4 okt 2011 kl. 11:41 skrev Ali Gholami:

> Well, when I debug it, I see "indata.length = 83" and "sig->data" which I think is the "rsa" size equal to 64.  My question was the purpose of this if clause: "if (indata.data != data->data)".  

you have 512byte rsa keys, todays larger digests (sha512) doesn't fit inside the rsa encryption.

While the code should not choose that large checksums for smaller keys, you should not choise 512bit rsa keys since they are insecure.

If you stop using 512bit rsa keys, it should work just fine.

Love