Padding Scheme used in Fedora Dogtag
Dear All, It is required to identify the padding scheme used by the Fedora dogtag system. Appreciate of someone could shed some light on this requirement. Thanks Kaamel
On Tue, Mar 07, 2017 at 12:13:12PM +0530, Kaamel Periora wrote:
Dear All,
It is required to identify the padding scheme used by the Fedora dogtag system. Appreciate of someone could shed some light on this requirement.
Thanks Kaamel
Hi Kaamel, Padding scheme for what? Dogtag uses or supports various kinds of encryption and encodings with padding schemes. Please be more specific. Cheers, Fraser
Dear Fraser, It is for the encryption process related to RSA. Is there any literature to refer regarding this specific information regarding DogTag? Regards, Kaamel On Tue, Mar 7, 2017 at 1:43 PM, Fraser Tweedale <ftweedal@redhat.com> wrote:
On Tue, Mar 07, 2017 at 12:13:12PM +0530, Kaamel Periora wrote:
Dear All,
It is required to identify the padding scheme used by the Fedora dogtag system. Appreciate of someone could shed some light on this requirement.
Thanks Kaamel
Hi Kaamel,
Padding scheme for what? Dogtag uses or supports various kinds of encryption and encodings with padding schemes. Please be more specific.
Cheers, Fraser
On Tue, Mar 07, 2017 at 01:48:54PM +0530, Kaamel Periora wrote:
Dear Fraser,
It is for the encryption process related to RSA.
I'm sorry, it is still not entirely clear what you are asking. Could you state from a user perspective the actions you are interested in, so I can identify exactly which operations are involved, and answer your question? Thanks, Fraser
Is there any literature to refer regarding this specific information regarding DogTag?
Regards, Kaamel
On Tue, Mar 7, 2017 at 1:43 PM, Fraser Tweedale <ftweedal@redhat.com> wrote:
On Tue, Mar 07, 2017 at 12:13:12PM +0530, Kaamel Periora wrote:
Dear All,
It is required to identify the padding scheme used by the Fedora dogtag system. Appreciate of someone could shed some light on this requirement.
Thanks Kaamel
Hi Kaamel,
Padding scheme for what? Dogtag uses or supports various kinds of encryption and encodings with padding schemes. Please be more specific.
Cheers, Fraser
He's asking whether to use PKCS1v1.5 padding or OAEP padding for RSA signatures. The latter is more secure, the former is much more common and implemented. Mike On Mon, Mar 13, 2017 at 17:56 Fraser Tweedale <ftweedal@redhat.com> wrote:
On Tue, Mar 07, 2017 at 01:48:54PM +0530, Kaamel Periora wrote:
Dear Fraser,
It is for the encryption process related to RSA.
I'm sorry, it is still not entirely clear what you are asking. Could you state from a user perspective the actions you are interested in, so I can identify exactly which operations are involved, and answer your question?
Thanks, Fraser
Is there any literature to refer regarding this specific information regarding DogTag?
Regards, Kaamel
On Tue, Mar 7, 2017 at 1:43 PM, Fraser Tweedale <ftweedal@redhat.com> wrote:
On Tue, Mar 07, 2017 at 12:13:12PM +0530, Kaamel Periora wrote:
Dear All,
It is required to identify the padding scheme used by the Fedora dogtag system. Appreciate of someone could shed some light on this requirement.
Thanks Kaamel
Hi Kaamel,
Padding scheme for what? Dogtag uses or supports various kinds of encryption and encodings with padding schemes. Please be more specific.
Cheers, Fraser
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
On Tue, Mar 14, 2017 at 12:45:49AM +0000, Michael StJohns wrote:
He's asking whether to use PKCS1v1.5 padding or OAEP padding for RSA signatures.
The latter is more secure, the former is much more common and implemented.
The default signature algorithm for RSA is sha256WithRSAEncryption (PKCS #1 v1.5 padding). I'd have to check if we support RSASSA-PSS. Cheers, Fraser
Mike
On Mon, Mar 13, 2017 at 17:56 Fraser Tweedale <ftweedal@redhat.com> wrote:
On Tue, Mar 07, 2017 at 01:48:54PM +0530, Kaamel Periora wrote:
Dear Fraser,
It is for the encryption process related to RSA.
I'm sorry, it is still not entirely clear what you are asking. Could you state from a user perspective the actions you are interested in, so I can identify exactly which operations are involved, and answer your question?
Thanks, Fraser
Is there any literature to refer regarding this specific information regarding DogTag?
Regards, Kaamel
On Tue, Mar 7, 2017 at 1:43 PM, Fraser Tweedale <ftweedal@redhat.com> wrote:
On Tue, Mar 07, 2017 at 12:13:12PM +0530, Kaamel Periora wrote:
Dear All,
It is required to identify the padding scheme used by the Fedora dogtag system. Appreciate of someone could shed some light on this requirement.
Thanks Kaamel
Hi Kaamel,
Padding scheme for what? Dogtag uses or supports various kinds of encryption and encodings with padding schemes. Please be more specific.
Cheers, Fraser
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
*beats head against wall*. PSS. Not OAEP. in my defense he did say encryption, but that's not what dogtag does. On Mon, Mar 13, 2017 at 20:00 Fraser Tweedale <ftweedal@redhat.com> wrote:
On Tue, Mar 14, 2017 at 12:45:49AM +0000, Michael StJohns wrote:
He's asking whether to use PKCS1v1.5 padding or OAEP padding for RSA signatures.
The latter is more secure, the former is much more common and implemented.
The default signature algorithm for RSA is sha256WithRSAEncryption (PKCS #1 v1.5 padding). I'd have to check if we support RSASSA-PSS.
Cheers, Fraser
Mike
On Mon, Mar 13, 2017 at 17:56 Fraser Tweedale <ftweedal@redhat.com>
wrote:
On Tue, Mar 07, 2017 at 01:48:54PM +0530, Kaamel Periora wrote:
Dear Fraser,
It is for the encryption process related to RSA.
I'm sorry, it is still not entirely clear what you are asking. Could you state from a user perspective the actions you are interested in, so I can identify exactly which operations are involved, and answer your question?
Thanks, Fraser
Is there any literature to refer regarding this specific information regarding DogTag?
Regards, Kaamel
On Tue, Mar 7, 2017 at 1:43 PM, Fraser Tweedale <ftweedal@redhat.com
wrote:
On Tue, Mar 07, 2017 at 12:13:12PM +0530, Kaamel Periora wrote:
Dear All,
It is required to identify the padding scheme used by the Fedora
dogtag
system. Appreciate of someone could shed some light on this requirement.
Thanks Kaamel
Hi Kaamel,
Padding scheme for what? Dogtag uses or supports various kinds of encryption and encodings with padding schemes. Please be more specific.
Cheers, Fraser
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
On Tue, Mar 14, 2017 at 03:35:49AM +0000, Michael StJohns wrote:
*beats head against wall*. PSS. Not OAEP. in my defense he did say encryption, but that's not what dogtag does.
No worries. I checked codebase; no mention of PSS or MGF so I conclude that we do support only PKCS #1 v1.5 padding with RSA signatures. Cheers, Fraser
On Mon, Mar 13, 2017 at 20:00 Fraser Tweedale <ftweedal@redhat.com> wrote:
On Tue, Mar 14, 2017 at 12:45:49AM +0000, Michael StJohns wrote:
He's asking whether to use PKCS1v1.5 padding or OAEP padding for RSA signatures.
The latter is more secure, the former is much more common and implemented.
The default signature algorithm for RSA is sha256WithRSAEncryption (PKCS #1 v1.5 padding). I'd have to check if we support RSASSA-PSS.
Cheers, Fraser
Mike
On Mon, Mar 13, 2017 at 17:56 Fraser Tweedale <ftweedal@redhat.com>
wrote:
On Tue, Mar 07, 2017 at 01:48:54PM +0530, Kaamel Periora wrote:
Dear Fraser,
It is for the encryption process related to RSA.
I'm sorry, it is still not entirely clear what you are asking. Could you state from a user perspective the actions you are interested in, so I can identify exactly which operations are involved, and answer your question?
Thanks, Fraser
Is there any literature to refer regarding this specific information regarding DogTag?
Regards, Kaamel
On Tue, Mar 7, 2017 at 1:43 PM, Fraser Tweedale <ftweedal@redhat.com
wrote:
On Tue, Mar 07, 2017 at 12:13:12PM +0530, Kaamel Periora wrote: > Dear All, > > It is required to identify the padding scheme used by the Fedora
dogtag
> system. Appreciate of someone could shed some light on this requirement. > > Thanks > Kaamel
Hi Kaamel,
Padding scheme for what? Dogtag uses or supports various kinds of encryption and encodings with padding schemes. Please be more specific.
Cheers, Fraser
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
thanks all, So DogTag supports only PKCS #1 v1.5 padding. Is there a way to identify this setting via any admin interface? On Tue, Mar 14, 2017 at 9:33 AM, Fraser Tweedale <ftweedal@redhat.com> wrote:
On Tue, Mar 14, 2017 at 03:35:49AM +0000, Michael StJohns wrote:
*beats head against wall*. PSS. Not OAEP. in my defense he did say encryption, but that's not what dogtag does.
No worries.
I checked codebase; no mention of PSS or MGF so I conclude that we do support only PKCS #1 v1.5 padding with RSA signatures.
Cheers, Fraser
On Mon, Mar 13, 2017 at 20:00 Fraser Tweedale <ftweedal@redhat.com>
wrote:
On Tue, Mar 14, 2017 at 12:45:49AM +0000, Michael StJohns wrote:
He's asking whether to use PKCS1v1.5 padding or OAEP padding for RSA signatures.
The latter is more secure, the former is much more common and implemented.
The default signature algorithm for RSA is sha256WithRSAEncryption (PKCS #1 v1.5 padding). I'd have to check if we support RSASSA-PSS.
Cheers, Fraser
Mike
On Mon, Mar 13, 2017 at 17:56 Fraser Tweedale <ftweedal@redhat.com>
wrote:
On Tue, Mar 07, 2017 at 01:48:54PM +0530, Kaamel Periora wrote:
Dear Fraser,
It is for the encryption process related to RSA.
I'm sorry, it is still not entirely clear what you are asking. Could you state from a user perspective the actions you are interested in, so I can identify exactly which operations are involved, and answer your question?
Thanks, Fraser
Is there any literature to refer regarding this specific
information
regarding DogTag?
Regards, Kaamel
On Tue, Mar 7, 2017 at 1:43 PM, Fraser Tweedale < ftweedal@redhat.com
wrote:
> On Tue, Mar 07, 2017 at 12:13:12PM +0530, Kaamel Periora wrote: > > Dear All, > > > > It is required to identify the padding scheme used by the
Fedora dogtag
> > system. Appreciate of someone could shed some light on this requirement. > > > > Thanks > > Kaamel > > Hi Kaamel, > > Padding scheme for what? Dogtag uses or supports various kinds of > encryption and encodings with padding schemes. Please be more > specific. > > Cheers, > Fraser >
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
On Wed, Mar 15, 2017 at 01:01:10PM +0530, Kaamel Periora wrote:
thanks all,
So DogTag supports only PKCS #1 v1.5 padding. Is there a way to identify this setting via any admin interface?
There is no setting to control this; it's just how the software is currently implemented. If you require support for PSS please file a ticket: https://pagure.io/dogtagpki/new_issue Cheers, Fraser
On Tue, Mar 14, 2017 at 9:33 AM, Fraser Tweedale <ftweedal@redhat.com> wrote:
On Tue, Mar 14, 2017 at 03:35:49AM +0000, Michael StJohns wrote:
*beats head against wall*. PSS. Not OAEP. in my defense he did say encryption, but that's not what dogtag does.
No worries.
I checked codebase; no mention of PSS or MGF so I conclude that we do support only PKCS #1 v1.5 padding with RSA signatures.
Cheers, Fraser
On Mon, Mar 13, 2017 at 20:00 Fraser Tweedale <ftweedal@redhat.com>
wrote:
On Tue, Mar 14, 2017 at 12:45:49AM +0000, Michael StJohns wrote:
He's asking whether to use PKCS1v1.5 padding or OAEP padding for RSA signatures.
The latter is more secure, the former is much more common and implemented.
The default signature algorithm for RSA is sha256WithRSAEncryption (PKCS #1 v1.5 padding). I'd have to check if we support RSASSA-PSS.
Cheers, Fraser
Mike
On Mon, Mar 13, 2017 at 17:56 Fraser Tweedale <ftweedal@redhat.com>
wrote:
On Tue, Mar 07, 2017 at 01:48:54PM +0530, Kaamel Periora wrote: > Dear Fraser, > > It is for the encryption process related to RSA. > I'm sorry, it is still not entirely clear what you are asking. Could you state from a user perspective the actions you are interested in, so I can identify exactly which operations are involved, and answer your question?
Thanks, Fraser
> Is there any literature to refer regarding this specific
information
> regarding DogTag? > > Regards, > Kaamel > > On Tue, Mar 7, 2017 at 1:43 PM, Fraser Tweedale < ftweedal@redhat.com
wrote: > > > On Tue, Mar 07, 2017 at 12:13:12PM +0530, Kaamel Periora wrote: > > > Dear All, > > > > > > It is required to identify the padding scheme used by the Fedora dogtag > > > system. Appreciate of someone could shed some light on this requirement. > > > > > > Thanks > > > Kaamel > > > > Hi Kaamel, > > > > Padding scheme for what? Dogtag uses or supports various kinds of > > encryption and encodings with padding schemes. Please be more > > specific. > > > > Cheers, > > Fraser > >
_______________________________________________ Pki-users mailing list Pki-users@redhat.com https://www.redhat.com/mailman/listinfo/pki-users
Thanks Fraser! appreciate your support! Thanks Michael for the clarifications! On Wed, Mar 15, 2017 at 4:09 PM, Fraser Tweedale <ftweedal@redhat.com> wrote:
On Wed, Mar 15, 2017 at 01:01:10PM +0530, Kaamel Periora wrote:
thanks all,
So DogTag supports only PKCS #1 v1.5 padding. Is there a way to identify this setting via any admin interface?
There is no setting to control this; it's just how the software is currently implemented.
If you require support for PSS please file a ticket: https://pagure.io/dogtagpki/new_issue
Cheers, Fraser
On Tue, Mar 14, 2017 at 9:33 AM, Fraser Tweedale <ftweedal@redhat.com> wrote:
On Tue, Mar 14, 2017 at 03:35:49AM +0000, Michael StJohns wrote:
*beats head against wall*. PSS. Not OAEP. in my defense he did say encryption, but that's not what dogtag does.
No worries.
I checked codebase; no mention of PSS or MGF so I conclude that we do support only PKCS #1 v1.5 padding with RSA signatures.
Cheers, Fraser
On Mon, Mar 13, 2017 at 20:00 Fraser Tweedale <ftweedal@redhat.com>
wrote:
On Tue, Mar 14, 2017 at 12:45:49AM +0000, Michael StJohns wrote:
He's asking whether to use PKCS1v1.5 padding or OAEP padding for
signatures.
The latter is more secure, the former is much more common and implemented.
The default signature algorithm for RSA is sha256WithRSAEncryption (PKCS #1 v1.5 padding). I'd have to check if we support RSASSA-PSS.
Cheers, Fraser
Mike
On Mon, Mar 13, 2017 at 17:56 Fraser Tweedale <
ftweedal@redhat.com> wrote:
> On Tue, Mar 07, 2017 at 01:48:54PM +0530, Kaamel Periora wrote: > > Dear Fraser, > > > > It is for the encryption process related to RSA. > > > I'm sorry, it is still not entirely clear what you are asking. > Could you state from a user perspective the actions you are > interested in, so I can identify exactly which operations are > involved, and answer your question? > > Thanks, > Fraser > > > Is there any literature to refer regarding this specific
information
> > regarding DogTag? > > > > Regards, > > Kaamel > > > > On Tue, Mar 7, 2017 at 1:43 PM, Fraser Tweedale < ftweedal@redhat.com
> wrote: > > > > > On Tue, Mar 07, 2017 at 12:13:12PM +0530, Kaamel Periora wrote: > > > > Dear All, > > > > > > > > It is required to identify the padding scheme used by the Fedora > dogtag > > > > system. Appreciate of someone could shed some light on
RSA this
> requirement. > > > > > > > > Thanks > > > > Kaamel > > > > > > Hi Kaamel, > > > > > > Padding scheme for what? Dogtag uses or supports various kinds of > > > encryption and encodings with padding schemes. Please be more > > > specific. > > > > > > Cheers, > > > Fraser > > > > > _______________________________________________ > Pki-users mailing list > Pki-users@redhat.com > https://www.redhat.com/mailman/listinfo/pki-users >
participants (3)
-
Fraser Tweedale -
Kaamel Periora -
Michael StJohns