[OpenID] Random failures when validating signatures

[Breno de Medeiros]

On Thu, Nov 13, 2008 at 9:41 AM, Richard Davies
<richard at richarddavies.us> wrote:
> On Nov 13, 9:29 am, "Hans Granqvist" <h... at granqvist.com> wrote:
>> Compare to how Java's BigInteger adds a leading zero byte to make sure 2s
>> complement form is always positive. Perhaps
>> CF is similar?
>>
>> At any rate, this is a can o' worms. Perhaps this can be of value, or
>> further
>> cause confusion (even though it is an ASN.1 class, there is bit of
>> explaining
>> text + code related to this problem):https://svn.apache.org/repos/asf/incubator/tsik/trunk/src/org/apache/...
>
> I'm actually using Java BigIntegers to store and manipulate my
> numbers. But I'm not exactly sure what you wanted me to look at...
>
> I guess I just need to look for a leading zero byte on the
> server_public and remove it if found, correct?

That would make all values negative, while you want them all positive,
I think. You need to have a leading 0.

> _______________________________________________
> general mailing list
> general at openid.net
> http://openid.net/mailman/listinfo/general
>



-- 
--Breno

+1 (650) 214-1007 desk
+1 (408) 212-0135 (Grand Central)
MTV-41-3 : 383-A
PST (GMT-8) / PDT(GMT-7)