Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: RSA OAEP with SHA512 #330

Merged
merged 2 commits into from
Mar 1, 2024
Merged

Conversation

fabricio-godoi
Copy link
Contributor

This PR is intended to provide a helper for RSA with OAEP encoding and SHA512 digest. This will improve the security of some projects.


Side notes:

I could not find the correct latest branch in GitHub, since the version tag 5.0.3 seems to be ahead of the branch name 5.x. If the branch is ahead, sync the main branch for further community contributions.

I would suggest some information in the RSA encryption discouraging the usage of PKCS1 and OAEP with SHA1, as stated by OWASP as not secure:

Avoid deprecated cryptographic functions and padding schemes, such as MD5, SHA1, PKCS number 1 v1.5 .
OWASP Top 10

@leocavalcante leocavalcante merged commit 06af93a into leocavalcante:5.x Mar 1, 2024
3 checks passed
@rodrigoreal
Copy link

@leocavalcante do you have any plans on releasing this in a new version? I would love this feature.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants