Skip to content

builtin: add support for RSASSA-PSS in mbedtls_pk_parse_subpubkey#706

Open
PLAJ-se wants to merge 1 commit intoMbed-TLS:developmentfrom
schneider-electric:dev/plaj-se/parse-rsassa-pss
Open

builtin: add support for RSASSA-PSS in mbedtls_pk_parse_subpubkey#706
PLAJ-se wants to merge 1 commit intoMbed-TLS:developmentfrom
schneider-electric:dev/plaj-se/parse-rsassa-pss

Conversation

@PLAJ-se
Copy link
Copy Markdown

@PLAJ-se PLAJ-se commented Mar 6, 2026

Description

This PR enables to parse certificates and CSRs containing a public key of type rsassaPss

Fixes Mbed-TLS/mbedtls#10580

PR checklist

This allows to parse certificates and CSR where the key is an rsassaPss
key.

The padding is also set to PKCS#1 v2.1 in the RSA pk context when such
a key is parsed.

A sample cert is added is framework: a certificate with an rsassaPss key.
This cert is used in `test_suite_x509parse` (defined in Mbed TLS).

The OID is backported from Mbed TLS 3.6.5, where it was defined (see
https://github.com/Mbed-TLS/mbedtls/blob/e185d7fd85499c8ce5ca2a54f5cf8fe7dbe3f8df/include/mbedtls/oid.h#L242-L243)

Signed-off-by: Paul Lajoie-Mazenc <185919101+PLAJ-se@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Mbed TLS fails to parse a certificate containing a public key with type rsassaPss

2 participants