Use different key to do OAEP and PSS

[agix]

I know it was a bad practice to use the same keypair to encrypt/decrypt and sign/verify...

secretin-lib/src/User.js

Lines 158 to 179 in 85873da

	exportPrivateData(data) {
	const result = {};
	return this.cryptoAdapter
	.encryptRSAOAEP(data, this.publicKey)
	.then((encryptedOptions) => {
	result.data = encryptedOptions;
	return this.sign(result.data);
	})
	.then((signature) => {
	result.signature = signature;
	return result;
	});
	}
	importPrivateData(data, signature) {
	return this.verify(data, signature).then((verified) => {
	if (verified) {
	return this.cryptoAdapter.decryptRSAOAEP(data, this.privateKey);
	}
	return null;
	});
	}

I used a "hack": convertOAEPToPSS

And this is something ANSSI reported to me.

This PR solves the problem by generating another keypair dedicated to the signature process.

The privateKeySign is encrypted with a random protectKey which is encrypted with the "normal" publicKey.