On Mon, Jul 26, 2010 at 6:07 AM, Hanno Böck <ha...@hboeck.de> wrote:
> Hi,
>
> Just recently, the templates for decoding the RSA-PSS ASN1 parameters got
> added to cvs head (in cryptohi/seckey.c).
>
> Currently I'm working on implementing the creation of PSS signatures, so I
> need them also to encode. My naive thought was that SEC_ASN1EncodeItem is used
> pretty much the same as QuickDERDecodeItem, just the other way round.
>
> For testing, I tested with a stripped-down version of the template containing
> only the first entry. Though what I get is:
> Assertion failure: theTemplate->sub != NULL, at secasn1u.c:93
>
>
> From the error, I assume it has something to do with the subtemplate. If that
> helps, by some try and error I found out that when removing SEC_ASN1_EXPLICIT,
> no assertion appears (thouhg it'll obviously produce a wrong DER struct).
> Is there something special I need to care about when doing encoding vs.
> decoding ASN1?
>
>
> The code looks like this:
>
>
> SEC_ASN1_MKSUB(SECOID_AlgorithmIDTemplate)
>
> const SEC_ASN1Template MY_RSAPSSParamsTemplate[] =
> {
> { SEC_ASN1_SEQUENCE, 0, NULL, sizeof(SECKEYRSAPSSParams) },
> { SEC_ASN1_OPTIONAL | SEC_ASN1_CONSTRUCTED | SEC_ASN1_EXPLICIT |
> SEC_ASN1_XTRN | SEC_ASN1_POINTER | SEC_ASN1_CONTEXT_SPECIFIC | 0,
> offsetof(SECKEYRSAPSSParams, hashAlg),
> SEC_ASN1_SUB(SECOID_AlgorithmIDTemplate) },
> { 0 }
> };
Hanno,
I am not familiar with the ASN.1 templates in NSS.
I'm afraid that you'll need to run the code in a debugger
to understand what the ASN.1 encoder is doing and
why it doesn't like your template.
Another idea is to look at the ASN.1 templates in
NSS that are used for encoding. See if they have
something different from your template.
Wan-Teh
--
dev-tech-crypto mailing list
dev-tech-crypto@lists.mozilla.org
https://lists.mozilla.org/listinfo/dev-tech-crypto
