Changed RSA-PSS algorithm to use the digest size of the hash function…

… for the salt length instead of the maximum salt length per the JWA spec. Fixes jpadilla#162.
mark-adams · May 20, 2015 · 2f5e923 · 2f5e923
1 parent 37077e4
commit 2f5e923
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/jwt/algorithms.py b/jwt/algorithms.py
@@ -263,7 +263,7 @@ def sign(self, msg, key):
             signer = key.signer(
                 padding.PSS(
                     mgf=padding.MGF1(self.hash_alg()),
-                    salt_length=padding.PSS.MAX_LENGTH
+                    salt_length=self.hash_alg.digest_size
                 ),
                 self.hash_alg()
             )
@@ -276,7 +276,7 @@ def verify(self, msg, key, sig):
                 sig,
                 padding.PSS(
                     mgf=padding.MGF1(self.hash_alg()),
-                    salt_length=padding.PSS.MAX_LENGTH
+                    salt_length=self.hash_alg.digest_size
                 ),
                 self.hash_alg()
             )