Ok, nevermind, I got it -- 1 byte, just 1-- was out of place in my padding! Now it verifies. Thanks for your help just the same.

Christian Bongiorno wrote:
Bob,
I am being asked for CKM_RSA_PKCS -- I am PKCS 1.5 encoding the input for encryption, the result I get back already is 128 bytes (RSA 1024). I am not sure how I am suppose to encode something that is already at the maximum allowed length.

The input data is ASN1 encoded, so I encode and encrypt the whole block.
then send it to the card. The result back is 128 bytes which I am currently supplying back to TB without any format. I can independently verify the signature using rsautil and raw apdu's to the card but TB still doesn't like it. I am still confused on how the data should be returned back to TB --

Thanks for your help

Christian

_______________________________________________
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto

Reply via email to