On Tue, Mar 14, 2017 at 12:45:49AM +0000, Michael StJohns wrote:
> He's asking whether to use PKCS1v1.5 padding or OAEP padding for RSA
> signatures.
>
> The latter is more secure, the former is much more common and implemented.
>
The default signature algorithm for RSA is sha256WithRSAEncryption
(PKCS #1 v1.5 padding).  I'd have to check if we support RSASSA-PSS.

Cheers,
Fraser

>
> Mike
>
>
> On Mon, Mar 13, 2017 at 17:56 Fraser Tweedale <ftweedal@redhat.com> wrote:
>
> > On Tue, Mar 07, 2017 at 01:48:54PM +0530, Kaamel Periora wrote:
> > > Dear Fraser,
> > >
> > > It is for the encryption process related to RSA.
> > >
> > I'm sorry, it is still not entirely clear what you are asking.
> > Could you state from a user perspective the actions you are
> > interested in, so I can identify exactly which operations are
> > involved, and answer your question?
> >
> > Thanks,
> > Fraser
> >
> > > Is there any literature to refer regarding this specific information
> > > regarding DogTag?
> > >
> > > Regards,
> > > Kaamel
> > >
> > > On Tue, Mar 7, 2017 at 1:43 PM, Fraser Tweedale <ftweedal@redhat.com>
> > wrote:
> > >
> > > > On Tue, Mar 07, 2017 at 12:13:12PM +0530, Kaamel Periora wrote:
> > > > > Dear All,
> > > > >
> > > > > It is required to identify the padding scheme used by the Fedora
> > dogtag
> > > > > system. Appreciate of someone could shed some light on this
> > requirement.
> > > > >
> > > > > Thanks
> > > > > Kaamel
> > > >
> > > > Hi Kaamel,
> > > >
> > > > Padding scheme for what?  Dogtag uses or supports various kinds of
> > > > encryption and encodings with padding schemes.  Please be more
> > > > specific.
> > > >
> > > > Cheers,
> > > > Fraser
> > > >
> >
> > _______________________________________________
> > Pki-users mailing list
> > Pki-users@redhat.com
> > https://www.redhat.com/mailman/listinfo/pki-users
> >