Rsa-pss
RSA-PSS is a probabilistic RSA digital-signature scheme using the probabilistic signature scheme encoding specified by PKCS #1.
Secure APIs
PS256 is the JWT algorithm identifier for RSA-PSS signatures using SHA-256.
- How it is used
- Uses PS256 to issue and validate JWT access tokens with asymmetric keys.
- How deep it goes
- Explains probabilistic RSA signing and demonstrates PyJWT issuance and validation without detailing cryptographic internals.
- Examples
- Uses OpenSSL key generation, PEM files, PyJWT code, and issuer, audience, and expiration claims.
- What you can do after
- Builds from scratch and validates PS256 JWTs with PyJWT, RSA key pairs, constrained algorithms, issuer, and audience.
Real-World Cryptography
RSA-PSS is a probabilistic RSA signature scheme designed to provide a security proof and easier correct implementation than older RSA signature encodings.
- How it is used
- Deploys RSA-PSS as a safer RSA signature standard for authenticating messages and origins.
- How deep it goes
- Explains encoding, signing, verification, and the contrapositive security proof, but omits implementation-level encoding details.
- Examples
- Uses PSS encoding, mask generation functions, RSA verification, and migration away from older PKCS#1 v1.5 deployments.
- What you can do after
- Apply RSA-PSS when selecting an RSA signature scheme for a new protocol or implementation.
Related concepts
- RSAuses · RSA is a public-key cryptosystem based on the computational difficulty of factoring large composite integers and supporting encryption and digital signatures.
- signature algorithmkind of · A signature algorithm is a cryptographic algorithm that generates or verifies digital signatures for data using associated key material.
- rsaes-pkcs1-v1_5alternative to · RSAES-PKCS1-v1_5 is a PKCS #1 standard RSA encryption scheme that formats messages with type 2 padding before encryption.
These guides are generated from the text of Manning books by Manning's knowledge graph and link to the sections they draw on. The full books are available on liveBook and at manning.com.