RE: PKINIT for gsissh
Ali Gholami <[email protected]>
| Newsgroups | gmane.comp.encryption.kerberos.heimdal.general |
|---|---|
| Message-ID | <[email protected]> |
Hi Love, > Well, when I debug it, I see "indata.length = 83" and "sig->data" which I think is the "rsa" size equal to 64. My question was the purpose of this if clause: "if (indata.data != data->data)". you have 512byte rsa keys, todays larger digests (sha512) doesn't fit inside the rsa encryption. While the code should not choose that large checksums for smaller keys, you should not choise 512bit rsa keys since they are insecure. If you stop using 512bit rsa keys, it should work just fine. How and where should I specify these values? Best regards Ali