RSA PKCS#1 signing: differs from OpenSSL's?

Dean Scarff dos at
Wed Dec 5 20:21:37 CET 2007

On Wed, 05 Dec 2007 16:21:09 +0100, Werner Koch said:
> Yes, this is correct.  Libgcrypt expects that P < Q; whereas OpenSSL
> expect Q < P.  Here is code to convert this.
> The important thing here is to recompute U because u = p^{-1} mod q.

Aha.  I saw that the primes had been reversed but I missed this.



More information about the Gcrypt-devel mailing list