Re: PK11_Verify vs. VFY_VerifyDigest

2007-03-30 Thread Robert Relyea
Peter Djalaliev wrote: > Can somebody elaborate a little more about why one is better then the > other? > > I went to the VFY_VerifyDigest code and I saw in vfy_VerifyDigest > that: > > - for signatures produced with the RSA encryption algorithm, it would > decrypt the signature using the public k

Re: PK11_Verify vs. VFY_VerifyDigest

2007-03-28 Thread Nelson Bolyard
Wan-Teh Chang wrote: > As I pointed out above, the PKCS #11 token also handles verifying > RSA signatures. The only difference between the handling of RSA > and DSA/ECDSA signatures is when we call PK11_xxx and whether > we call PK11_VerifyRecover or PK11_Verify. (PK11_VerifyRecover > doesn't ma

Re: PK11_Verify vs. VFY_VerifyDigest

2007-03-28 Thread Wan-Teh Chang
On 27 Mar 2007 19:43:13 -0700, Peter Djalaliev <[EMAIL PROTECTED]> wrote: > Hello, > > When I had a problem with verifying a RSA signtaure, I was hinted by > Bob Releya that the VFY_* functions are better to use than PK11_Verify > when trying to verify a signature given the digest of what was > act

PK11_Verify vs. VFY_VerifyDigest

2007-03-27 Thread Peter Djalaliev
Hello, When I had a problem with verifying a RSA signtaure, I was hinted by Bob Releya that the VFY_* functions are better to use than PK11_Verify when trying to verify a signature given the digest of what was actually signed. I was intrigued by that (it helped solve a related problem I had), so