Skip to content

Commit 85feecb

Browse files
committed
fix(pkcs12): correct EC key oracle hash in README
The SHA-256 recorded for the pyca EC PrivateKeyInfo DER was wrong (c5eacb73...). Correct value confirmed by three independent sources: OpenSSL, pyca/cryptography private_bytes(DER, PKCS8, NoEncryption), and carl-wallace/pkcs12_builder — all agree on 956890dd...
1 parent ba09a7a commit 85feecb

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

pkcs12/tests/data/README.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,8 @@ Full key decryption is not yet tested; it requires 3DES decryption support
6161
(planned for a follow-up PR).
6262

6363
SHA-256 of the EC PrivateKeyInfo DER blob (reserved oracle for 3DES PR):
64-
`c5eacb73dd8324007d050afcc807fccd09c1f752634eeafaffc0872b35da4383`
64+
`956890dd43249260db8b4a7edf87541070086c186f6a5e39e2eba2eec28f634c`
6565

66-
(Confirmed with pyca `private_bytes(DER, PKCS8, NoEncryption)` on the extracted key.)
66+
(Confirmed independently by OpenSSL `pkcs12 -legacy -nodes | pkcs8 -nocrypt -topk8 -outform DER | sha256sum`
67+
and pyca/cryptography `private_bytes(DER, PKCS8, NoEncryption)` — both agree on this value.
68+
carl-wallace/pkcs12_builder also asserts this hash against the same fixture.)

0 commit comments

Comments
 (0)