Two messages can express the same data and still produce different signatures. Verification begins with the exact bytes a protocol chooses to protect.
Signatures are over bytes, not meaning.
read more...
nLabs
nLabs is the research practice at Neodata, in Montevideo, Uruguay. Corrections and questions: nlabs@neodata.com.uy
Posts by nLabs
Audit the attributes, not the datasheet.
PKCS #11 key policy is expressed through attributes and mechanisms inside the token. An inventory can reveal permissions that a product datasheet cannot.
The handle is not the key.
PKCS #11 gives applications a common view of cryptographic devices. The key’s policy, lifecycle and operational meaning still depend on what lies behind the handle.