RSA

RSA copied to clipboard

Currently creation of PSS PaddingSchema object requires the RngCore, however if the software is only verifying the signature, it should not require the random number generator. Please consider changing the rng to Option<> or adding new_verify_pss / new_verify_pss_with_salt.

I left some notes on #172, but in general I think the signature code is really due for a refactor.

I'd need to write up a more concrete plan for what I have in mind though. It would be nice to actually impl the traits from the signature crate.

I tried looking onto the signature-based implementation, but stopped after seeing no good way to implement RsaSignature. Unlike ECDSA, where the signature is bound by the size of the curve/field, for the RSA there is no such limitation. Or I can add the artificial limitation of not supporting anything above RSA16384. Does that sound good?

I can open a new issue and sketch out a more complete design