[SANTUARIO-604] Use PSSParameterSpec for RSASSA-PSS without parameters SignatureMethod URIs

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Java 3.0.2, Java 2.3.3
• Fix Version/s: Java 3.0.3, Java 2.3.4
• Component/s: Java
• Assignee: Sean Mullan
• Reporter: Sean Mullan
• Created: 11/Aug/23 16:33
• Updated: 19/Oct/23 04:31
• Resolved: 12/Sep/23 12:41

Description

Currently, the RSASSA-PSS w/o parameter algorithms defined in RFC 9231 are supported by instantiating Signature objects using algorithms like "SHA256withRSAandMGF1". BouncyCastle supports these algorithms using these names, but the JDK does not.

A more compatible solution is to instantiate the Signature objects with "RSASSA-PSS" and pass in an appropriate PSSParameterSpec with the default values as specified by RFC 9231.

Support for the SHA-3 variants of these algorithms will also be added.

Issue Links

• links to: GitHub Pull Request #206