sp(2.5.5) <-> idp(3.1.2) and ecdsa certs

[Cantor, Scott]

On 11/4/15, 3:42 AM, "users on behalf of Jarno Huuskonen" <users-bounces at shibboleth.net on behalf of jarno.huuskonen at uef.fi> wrote:



>(from xmlsec-2.0.5 SignatureECDSA.java it looks like:
>- The JAVA JCE ECDSA Signature algorithm creates ASN.1 encoded (r,s)
>- the XML Signature requires the core BigInteger values.).

I do seem to recall that from when I was looking at the Java code trying to understand how to implement mine.

>So maybe java-opensaml (org.opensaml.security.crypto.SigningUtil) should
>wrap the bare signature with ASN.1 sequence (convertXMLDSIGtoASN1) before
>trying to verify the signature.

The question is what the spec actually says. I'm not sure that it's clear at all on this, again out of either omission or because everybody only cared about RSA or whatever.

It's up to Brent, I guess, but I would probably hold off trying to rush a fix in for 3.2 that we end up having to reverse since that gets confusing. We can always issue a patch later once we figure out who's actually wrong.

But I believe that the best reading is probably yours, i.e. that the redirect signature ought to use the same encoding mandated by XML Signature's use of a given algorithm. That is, the same encoding rules specified for the SignatureValue element.

-- Scott