W3C home > Mailing lists > Public > public-webcrypto@w3.org > January 2015

[Bug 27602] ECDSA's Sign operation is not explicit about how r and s are concatenated (padding)

From: <bugzilla@jessica.w3.org>
Date: Mon, 05 Jan 2015 18:03:56 +0000
To: public-webcrypto@w3.org
Message-ID: <bug-27602-7213-OYMHT3nxBx@http.www.w3.org/Bugs/Public/>
https://www.w3.org/Bugs/Public/show_bug.cgi?id=27602

Mark Watson <watsonm@netflix.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |watsonm@netflix.com

--- Comment #1 from Mark Watson <watsonm@netflix.com> ---
r and s are just integers in the interval [ 1, n-1 ] where n is the order of
the base point G of the elliptic curve.

The ambiguity is in "Convert r/s to a bitstring" since it is not specified what
the output bitstring length should be.

I assume it should be the smallest multiple of 8 bits which can represent the
value n-1 (I expect this is also what Eric meant in comment #0).

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Received on Monday, 5 January 2015 18:03:58 UTC

This archive was generated by hypermail 2.3.1 : Tuesday, 6 January 2015 21:17:26 UTC