Optimal asymmetric encryption padding: Difference between revisions

Revision as of 21:47, 30 August 2021

Revision as of 14:20, 1 September 2021

Line 49:

===Implementation===

In the PKCS#1 standard, the random oracles ''G'' and ''H'' are identical. The PKCS#1 standard further requires that the random oracles be [[MGF1]] with an appropriate hash function.<ref>{{Cite journal|url=https://eprint.iacr.org/2006/223.pdf| title=What Hashes Make RSA-OAEP Secure?|journal = IACR Cryptology ePrint Archive| last=Brown |first=Daniel R. L.| date=2006| language=en|access-date=2019-04-03}}</ref>

The OAEP spec differs from what is depicted here as of PKCS#1 v2.<ref>{{Cite journal|url=https://datatracker.ietf.org/doc/html/rfc8017#section-7.1| title=PKCS #1: RSA Cryptography Specifications Version 2.2}}</ref> There are better people than me that can endeavor to edit this page accordingly but I'm leaving this here as a footnote to those people that it probably should be done.

==See also==