user163

The PyCryptodome implementation for AES in OCB mode gives wrong results for 15 bytes nonces (the default length). The 15th byte of the nonce is ignored and effectively the corresponding...

[proposed label: documentation] Is the implementation of the OAEPEncoding class really incompatible with PKCS#1 v2.1 or later?

1

There is a warning in the RSA/OAEP documentation that the implementation is based on PKCS#1 v2.0 and is not compatible with PKCS#1 v2.1 or later, see e.g. [rsa.md/sec. *Standards supported*][1],...

JSEncrypt#encrypt creates sporadically invalid ciphertexts

5

- Version jsencrypt 2.3.1 and 3.0.0-rc.1 - Issue: `JSEncrypt#encrypt` sometimes generates a ciphertext with a length that is smaller than the modulus, i.e. the ciphertext is not padded with leading...

There should be an overview in the documentation which digest is used for which key size to derive the key with regard to interoperability with other libraries (currently this has...

Some of the signed JWTs for ES512 generated with jsrsasign v11.1.0 in the context of JWS have signatures that are shorter than 132 bytes (e.g. 130 bytes). Such signatures and...