rsa digital sign: set pss option salt length equal to digest size

telkomdev · Dec 11, 2022 · 9e5b59b · 9e5b59b
1 parent eb14e1b
commit 9e5b59b
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 4 deletions.
diff --git a/rsax/sign.go b/rsax/sign.go
@@ -23,7 +23,8 @@ func signWithPSS(privateKey *rsa.PrivateKey,
 
 	msgHashSum := d.Sum(nil)
 
-	signature, err := rsa.SignPSS(rand.Reader, privateKey, h, msgHashSum, nil)
+	signature, err := rsa.SignPSS(rand.Reader,
+		privateKey, h, msgHashSum, &rsa.PSSOptions{SaltLength: rsa.PSSSaltLengthEqualsHash})
 	if err != nil {
 		return nil, err
 	}
@@ -41,7 +42,8 @@ func signWithPSSIO(privateKey *rsa.PrivateKey,
 
 	msgHashSum := d.Sum(nil)
 
-	signature, err := rsa.SignPSS(rand.Reader, privateKey, h, msgHashSum, nil)
+	signature, err := rsa.SignPSS(rand.Reader,
+		privateKey, h, msgHashSum, &rsa.PSSOptions{SaltLength: rsa.PSSSaltLengthEqualsHash})
 	if err != nil {
 		return nil, err
 	}

diff --git a/rsax/verify_sign.go b/rsax/verify_sign.go
@@ -22,7 +22,8 @@ func verifySignatureWithPSS(publicKey *rsa.PublicKey,
 
 	msgHashSum := d.Sum(nil)
 
-	return rsa.VerifyPSS(publicKey, h, msgHashSum, signature, nil)
+	return rsa.VerifyPSS(publicKey, h,
+		msgHashSum, signature, &rsa.PSSOptions{SaltLength: rsa.PSSSaltLengthEqualsHash})
 }
 
 func verifySignatureWithPSSIO(publicKey *rsa.PublicKey,
@@ -35,7 +36,8 @@ func verifySignatureWithPSSIO(publicKey *rsa.PublicKey,
 
 	msgHashSum := d.Sum(nil)
 
-	return rsa.VerifyPSS(publicKey, h, msgHashSum, signature, nil)
+	return rsa.VerifyPSS(publicKey, h,
+		msgHashSum, signature, &rsa.PSSOptions{SaltLength: rsa.PSSSaltLengthEqualsHash})
 }
 
 // VerifySignatureWithPSSMd5 will verify signature data with RSA PSS and MD5