Re: RSA Signature Padding

[Peter Gutmann <pgut001@xxxxxxxxxxxxxxxxx>]

Simon Josefsson <simon@xxxxxxxxxxxxx> writes:
>"Santosh Chokhani" <SChokhani@xxxxxxxxxxxx> writes:
>> I am asking because of the paper in the link below.
>>
>> http://eprint.iacr.org/2009/203
>
>Interesting.  What does that mean for PKCS#1 v1.5?

Nothing whatsoever.

Rob Stradling <rob.stradling@xxxxxxxxxx> writes:

>Should implementors wait until support for RSA-PSS is sufficiently widespread
>for their needs before migrating from PKCS#1.5/SHA-1 to PKCS#2.1/SHA-2?

Yes.  I'd recommend waiting until January 2038, on the basis that (a) there
may be support for it in implementations by then and (b) people will be so
busy fixing another problem that'll crop up around then that they won't notice
this particular change.

Peter.