RSA_SIGN_HASH()
PSS encodes a message hash and signs it with an RSA private key
VARBINARY
RSA_SIGN_HASH (message_digest KEY private_key [HASH <hash>] [SALT_LENGTH salt_length] [PKCS_1_5]) <hash> ::= MD5 | SHA1 | SHA256 | SHA512
Parameter | Description |
---|---|
message_digest |
Hash of message to sign.The hash algorithm used should match hash |
private_key |
RSA private key in PKCS#1 format |
hash |
Hash to generate PSS encoding;default is |
salt_length |
Length of the desired salt in bytes;default is 8;minimum 1, maximum 32.The recommended value is between 8 and 16. |
RSA_SIGN_HASH
performs PSS encoding of the message_digest to be signed, and signs using the RSA private key.
By default, OAEP padding is used.The PKCS_1_5
option will switch to the less secure PKCS 1.5 padding.
Warning
|
The |
Caution
|
This function expects the hash of a message (or message digest), not the actual message.The hash argument should specify the algorithm that was used to generate that hash. A function that accepts the actual message to hash might be introduced in a future version of Firebird. |