OpenPGP Signing

Posted by singpolyma on Stack Overflow See other posts from Stack Overflow or by singpolyma
Published on 2010-03-30T20:22:29Z Indexed on 2010/04/01 16:33 UTC
Read the original article Hit count: 476

Filed under:
|
|
|

I'm reading RFC4880 in an attempt to produce an implementatdion of a subset of OpenPGP (RSA signatures) using http://phpseclib.sourceforge.net/. I have the publickey and compression-literal-signature packets parsed out. I can extract n and e and feed them to Crypt_RSA to construct a verifier. I tell it I'm using sha256. It then needs a "message" and a " signature" parametre. I get the signature data out of the signature packet no problem. The question I have is: what is "message"? According to sec tion 5.2.4 it's some combination of the literal data packet(s?) (their bodies or the whole packet?) and the "hashed" subpackets. Do I just concat all the data packets and the hashed packets together in the order they appear?

© Stack Overflow or respective owner

Related posts about openpgp

Related posts about pgp