<div>*beats head against wall*. PSS. Not OAEP. in my defense he did say encryption, but that's not what dogtag does. </div><div> </div><div> <div class="gmail_quote"><div>On Mon, Mar 13, 2017 at 20:00 Fraser Tweedale <<a href="mailto:ftweedal@redhat.com">ftweedal@redhat.com</a>> wrote: </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Tue, Mar 14, 2017 at 12:45:49AM +0000, Michael StJohns wrote: > He's asking whether to use PKCS1v1.5 padding or OAEP padding for RSA > signatures. > > The latter is more secure, the former is much more common and implemented. > The default signature algorithm for RSA is sha256WithRSAEncryption (PKCS #1 v1.5 padding). I'd have to check if we support RSASSA-PSS. Cheers, Fraser > > Mike > > > On Mon, Mar 13, 2017 at 17:56 Fraser Tweedale <<a href="mailto:ftweedal@redhat.com" class="gmail_msg" target="_blank">ftweedal@redhat.com</a>> wrote: > > > On Tue, Mar 07, 2017 at 01:48:54PM +0530, Kaamel Periora wrote: > > > Dear Fraser, > > > > > > It is for the encryption process related to RSA. > > > > > I'm sorry, it is still not entirely clear what you are asking. > > Could you state from a user perspective the actions you are > > interested in, so I can identify exactly which operations are > > involved, and answer your question? > > > > Thanks, > > Fraser > > > > > Is there any literature to refer regarding this specific information > > > regarding DogTag? > > > > > > Regards, > > > Kaamel > > > > > > On Tue, Mar 7, 2017 at 1:43 PM, Fraser Tweedale <<a href="mailto:ftweedal@redhat.com" class="gmail_msg" target="_blank">ftweedal@redhat.com</a>> > > wrote: > > > > > > > On Tue, Mar 07, 2017 at 12:13:12PM +0530, Kaamel Periora wrote: > > > > > Dear All, > > > > > > > > > > It is required to identify the padding scheme used by the Fedora > > dogtag > > > > > system. Appreciate of someone could shed some light on this > > requirement. > > > > > > > > > > Thanks > > > > > Kaamel > > > > > > > > Hi Kaamel, > > > > > > > > Padding scheme for what? Dogtag uses or supports various kinds of > > > > encryption and encodings with padding schemes. Please be more > > > > specific. > > > > > > > > Cheers, > > > > Fraser > > > > > > > > _______________________________________________ > > Pki-users mailing list > > <a href="mailto:Pki-users@redhat.com" class="gmail_msg" target="_blank">Pki-users@redhat.com</a> > > <a href="https://www.redhat.com/mailman/listinfo/pki-users" rel="noreferrer" class="gmail_msg" target="_blank">https://www.redhat.com/mailman/listinfo/pki-users</a> > > </blockquote></div></div>