RSA PKCS#1 signing: differs from OpenSSL's?

Dean Scarff dos at scarff.id.au
Wed Dec 5 20:21:37 CET 2007


On Wed, 05 Dec 2007 16:21:09 +0100, Werner Koch said:
> Yes, this is correct.  Libgcrypt expects that P < Q; whereas OpenSSL
> expect Q < P.  Here is code to convert this.
[snip]
> The important thing here is to recompute U because u = p^{-1} mod q.

Aha.  I saw that the primes had been reversed but I missed this.

Thanks.

-- 
Dean




More information about the Gcrypt-devel mailing list