open-vault/builtin/logical/transit
Alexander Scheel 1733d2a3d6
Add support for PKCSv1_5_NoOID signatures (#17636)
* Add support for PKCSv1_5_NoOID signatures

This assumes a pre-hashed input has been provided to Vault, but we do
not write the hash's OID into the signature stream. This allows us to
generate the alternative PKCSv1_5_NoOID signature type rather than the
existing PKCSv1_5_DERnull signature type we presently use.

These are specified in RFC 3447 Section 9.2.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add changelog

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Exclude new none type from PSS based tests

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add tests for PKCS#1v1.5 signatures

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2022-10-27 08:26:20 -04:00
..
cmd/transit Update to api 1.0.1 and sdk 0.1.8 2019-04-15 14:10:07 -04:00
backend.go Transit byok import endpoints (#15414) 2022-05-16 11:50:38 -05:00
backend_test.go Add support for PKCSv1_5_NoOID signatures (#17636) 2022-10-27 08:26:20 -04:00
path_backup.go Run a more strict formatter over the code (#11312) 2021-04-08 09:43:39 -07:00
path_backup_test.go RSA3072 implementation in transit secrets engine (#8151) 2020-02-15 14:40:50 -08:00
path_cache_config.go reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
path_cache_config_test.go reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
path_config.go Revert "MFA (#14049)" (#14135) 2022-02-17 13:17:59 -07:00
path_config_test.go Revert the WithContext changes to vault tests (#14947) 2022-04-07 15:12:58 -04:00
path_datakey.go reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
path_decrypt.go Add AD mode to Transit's AEAD ciphers (#17638) 2022-10-24 13:41:02 -04:00
path_decrypt_bench_test.go fix missing plaintext in bulk decrypt response (#9991) 2020-09-22 09:43:07 -04:00
path_decrypt_test.go Implement partial_failure_response_code_override for batch requests (#17118) 2022-09-13 12:51:09 -05:00
path_encrypt.go Add AD mode to Transit's AEAD ciphers (#17638) 2022-10-24 13:41:02 -04:00
path_encrypt_bench_test.go Improving transit batch encrypt and decrypt latencies (#8775) 2020-06-10 13:31:46 -04:00
path_encrypt_test.go Use FieldData.GetOkError() to access required Transit parameters. (#14593) 2022-03-18 16:10:38 -04:00
path_export.go Enforce minimum cache size for transit backend (#12418) 2021-09-13 16:44:56 -05:00
path_export_test.go Run a more strict formatter over the code (#11312) 2021-04-08 09:43:39 -07:00
path_hash.go Use FieldData.GetOkError() to access required Transit parameters. (#14593) 2022-03-18 16:10:38 -04:00
path_hash_test.go Use FieldData.GetOkError() to access required Transit parameters. (#14593) 2022-03-18 16:10:38 -04:00
path_hmac.go Adds support for SHA-3 to transit (#13367) 2021-12-08 12:29:33 -06:00
path_hmac_test.go Add support for a dedicated HMAC type in Transit. (#16668) 2022-09-06 10:17:58 -05:00
path_import.go Account for a possible error in Transit BYOK. (#17025) 2022-09-06 11:03:24 -07:00
path_import_test.go Add support for a dedicated HMAC type in Transit. (#16668) 2022-09-06 10:17:58 -05:00
path_keys.go Add support for a dedicated HMAC type in Transit. (#16668) 2022-09-06 10:17:58 -05:00
path_keys_test.go Revert the WithContext changes to vault tests (#14947) 2022-04-07 15:12:58 -04:00
path_random.go Fix fmt error (#15266) 2022-05-03 10:07:23 -04:00
path_random_test.go Allow callers to choose the entropy source for the random endpoints. (#15213) 2022-05-02 14:42:07 -05:00
path_restore.go Run a more strict formatter over the code (#11312) 2021-04-08 09:43:39 -07:00
path_restore_test.go Use %q for quoted strings where appropriate (#15216) 2022-08-03 12:32:45 -06:00
path_rewrap.go reformat using 'make fmt' (#13794) 2022-01-27 10:06:34 -08:00
path_rewrap_test.go fix missing plaintext in bulk decrypt response (#9991) 2020-09-22 09:43:07 -04:00
path_rotate.go Enforce minimum cache size for transit backend (#12418) 2021-09-13 16:44:56 -05:00
path_sign_verify.go Add support for PKCSv1_5_NoOID signatures (#17636) 2022-10-27 08:26:20 -04:00
path_sign_verify_test.go Add support for PKCSv1_5_NoOID signatures (#17636) 2022-10-27 08:26:20 -04:00
path_trim.go Use FieldData.GetOkError() to access required Transit parameters. (#14593) 2022-03-18 16:10:38 -04:00
path_trim_test.go Check that all required fields in Transit API are present. (#14074) 2022-02-22 16:00:25 -05:00
path_wrapping_key.go Transit byok import endpoints (#15414) 2022-05-16 11:50:38 -05:00
path_wrapping_key_test.go Add Transit BYOK wrapping key endpoint (#15271) 2022-05-11 11:28:32 -05:00
stepwise_test.go update gofumpt to 0.3.1 and reformat the repo (#17055) 2022-09-07 17:31:20 -07:00