[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Do not use pkcs1v15 for signature #24280

Closed
1 task done
cryptochecktool opened this issue Nov 16, 2024 · 0 comments
Closed
1 task done

Do not use pkcs1v15 for signature #24280

cryptochecktool opened this issue Nov 16, 2024 · 0 comments
Labels
enhancement

Comments

@cryptochecktool
Copy link

Preliminary Checks

  • I have already searched for existing issues and confirmed that this issue is not a duplicate

Is your feature request related to a problem? Please describe

No response

Describe the solution you'd like

Message signatures should be populated in a more secure way using pss.
Code is located at:

ccxt/python/ccxt/base/exchange.py

Line 1299 in 4af53d7

return Exchange.binary_to_base64(priv_key.sign(Exchange.encode(request), padding.PKCS1v15(), algorithm))

You can refer to cryptography for pkcs1v15 specifications, https://cryptography.io/en/latest/limitations/#rsa-pkcs1-v1-5-constant-time-decryption

Describe alternatives you've considered

No response
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
enhancement
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@carlosmiei @cryptochecktool