Messages in this thread | | | From | David Howells <> | Subject | Re: [PATCH 16/20] PKCS#7: Add an optional authenticated attribute to hold firmware name [ver #5] | Date | Mon, 01 Jun 2015 16:50:23 +0100 |
| |
Andy Lutomirski <luto@amacapital.net> wrote:
> > You can also fudge the signature (or a hash) by adding extra data to or > > modifying the data blob and by switching signature values between signature > > blobs. > > So there's another design error in PKCS#7? Great!
No. This applies to *all* signatures where you're signing a hash.
David
| |