open-vault/builtin/logical/transit
Alexander Scheel 1733d2a3d6
Add support for PKCSv1_5_NoOID signatures (#17636)
* Add support for PKCSv1_5_NoOID signatures

This assumes a pre-hashed input has been provided to Vault, but we do
not write the hash's OID into the signature stream. This allows us to
generate the alternative PKCSv1_5_NoOID signature type rather than the
existing PKCSv1_5_DERnull signature type we presently use.

These are specified in RFC 3447 Section 9.2.

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add changelog

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Exclude new none type from PSS based tests

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

* Add tests for PKCS#1v1.5 signatures

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>

Signed-off-by: Alexander Scheel <alex.scheel@hashicorp.com>
2022-10-27 08:26:20 -04:00
..
cmd/transit
backend.go
backend_test.go Add support for PKCSv1_5_NoOID signatures (#17636) 2022-10-27 08:26:20 -04:00
path_backup.go
path_backup_test.go
path_cache_config.go
path_cache_config_test.go
path_config.go
path_config_test.go
path_datakey.go
path_decrypt.go Add AD mode to Transit's AEAD ciphers (#17638) 2022-10-24 13:41:02 -04:00
path_decrypt_bench_test.go
path_decrypt_test.go Implement partial_failure_response_code_override for batch requests (#17118) 2022-09-13 12:51:09 -05:00
path_encrypt.go Add AD mode to Transit's AEAD ciphers (#17638) 2022-10-24 13:41:02 -04:00
path_encrypt_bench_test.go
path_encrypt_test.go
path_export.go
path_export_test.go
path_hash.go
path_hash_test.go
path_hmac.go
path_hmac_test.go Add support for a dedicated HMAC type in Transit. (#16668) 2022-09-06 10:17:58 -05:00
path_import.go Account for a possible error in Transit BYOK. (#17025) 2022-09-06 11:03:24 -07:00
path_import_test.go Add support for a dedicated HMAC type in Transit. (#16668) 2022-09-06 10:17:58 -05:00
path_keys.go Add support for a dedicated HMAC type in Transit. (#16668) 2022-09-06 10:17:58 -05:00
path_keys_test.go
path_random.go
path_random_test.go
path_restore.go
path_restore_test.go
path_rewrap.go
path_rewrap_test.go
path_rotate.go
path_sign_verify.go Add support for PKCSv1_5_NoOID signatures (#17636) 2022-10-27 08:26:20 -04:00
path_sign_verify_test.go Add support for PKCSv1_5_NoOID signatures (#17636) 2022-10-27 08:26:20 -04:00
path_trim.go
path_trim_test.go
path_wrapping_key.go
path_wrapping_key_test.go
stepwise_test.go update gofumpt to 0.3.1 and reformat the repo (#17055) 2022-09-07 17:31:20 -07:00