Maarten Bodewes

It's "insecure"

1

Not "UNSECURE". I looked this up to see if there was anything to recommend for Dart / RSA-OAEP, but if the homepage is spelling "UNSECURE" then I just assume that...

There is no such thing as a PKCS#8 public key. What is used when decoding a "PKCS#8 public key" in this library is called a "SubjectPublicKeyInfo" or "spki" for short....

Please see my answer [here](https://stackoverflow.com/a/15712409/589259) to get an idea on how to handle those exceptions. Some definitely do not need to be handled by the user. Note: I would try...

There seem to be some issues with this protocol. You seem to sign before encryption, which makes you vulnerable to padding oracle attacks. Furthermore, you send you public key with...

Documentation issue: load_pkcs1_openssl_der and load_pkcs1_openssl_pem

4

These aren't OpenSSL specific constructs, they are SPKI or SubjectPublicKeyInfo structures *as specified in X.509* for the ASN.1 part and RFC 7468 for the PEM part. So the text in...

Unpadding is there for a reason. Without unpadding you are not even sure if you're decrypting with the right key. Do you have any experience creating this kind of crypto...

Only ST, not S and SP accepted for State or Province,

2

Currently the code that parses the Distinguished Name (DN) in the Bouncy Castle certificate parser is only able to recognize ST for State or Province. Although this is the preferred...