Yaeh, let's not expose our users to that toxic sludge ;)


On Sun, Mar 2, 2014 at 5:11 PM, Paul Kehrer <notifications@github.com>wrote:

> In cryptography/hazmat/backends/openssl/backend.py:
>
> > +            code = self._backend._lib.ERR_get_error()
> > +            error_msg = self._backend._err_string(code)
> > +            raise InvalidSignature(error_msg)
> > +
> > +        data_to_verify = self._hash_ctx.finalize()
> > +        self._hash_ctx = None
> > +        res = self._backend._lib.RSA_verify_PKCS1_PSS(
> > +            rsa_cdata,
> > +            data_to_verify,
> > +            evp_md,
> > +            buf,
> > +            -2
> > +        )
> > +        if res != 1:
> > +            code = self._backend._lib.ERR_get_error()
> > +            error_msg = self._backend._err_string(code)
>
> It's arguable. The quality of the output from OpenSSL is pretty terrible
> though so I'm not sure if we want to expose the user to that right now...
>
> —
> Reply to this email directly or view it on GitHub<https://github.com/pyca/cryptography/pull/676/files#r10199006>
> .
>



-- 
"I disapprove of what you say, but I will defend to the death your right to
say it." -- Evelyn Beatrice Hall (summarizing Voltaire)
"The people's good is the highest law." -- Cicero
GPG Key fingerprint: 125F 5C67 DFE9 4084