#17 fixed salt length setting when set to auto in cng-pss flow

cyolosecurity · Sep 4, 2021 · f4fa051 · f4fa051
1 parent 260a1e7
commit f4fa051
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/certstore_windows.go b/certstore_windows.go
@@ -414,6 +414,8 @@ func (wpk *winPrivateKey) cngSignHash(opts crypto.SignerOpts, digest []byte) ([]
 			saltLen := pssOpts.SaltLength
 			if saltLen == rsa.PSSSaltLengthEqualsHash {
 				saltLen = len(digest)
+			} else if saltLen == rsa.PSSSaltLengthAuto {
+				saltLen = hash.Size()
 			}
 			padPtr = unsafe.Pointer(&C.BCRYPT_PSS_PADDING_INFO{
 				pszAlgId: algId,