1This is the same test as rsa-pkcs1-sha256.pem except the SPKI has been encoded 2using a non-minimal length for the outermost SEQUENCE. 3 4Under DER, the tag-length-value encodings should be minimal and hence this should fail. 5 6Specifically the SPKI start was changed from: 7 30 81 9f 8To: 9 30 82 00 9f 10 11(the length of 0x9F is being expressed using 2 bytes instead of 1) 12 13 14$ openssl asn1parse -i < [PUBLIC KEY] 15 0:d=0 hl=4 l= 159 cons: SEQUENCE 16 4:d=1 hl=2 l= 13 cons: SEQUENCE 17 6:d=2 hl=2 l= 9 prim: OBJECT :rsaEncryption 18 17:d=2 hl=2 l= 0 prim: NULL 19 19:d=1 hl=3 l= 141 prim: BIT STRING 20-----BEGIN PUBLIC KEY----- 21MIIAnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAqkfgdjI9YqzadSZ2Ns0CEEUD8+8m7OplIx0 2294X+QD8mooNrunwT04asbLIINGL4qiI/+9IVSvyV3Kj9c4EeQIbANGoJ8AI3wf6MOBB/txxGFed 23qqcTffKVMQvtZdoYFbZ/MQkvyRsoyvunb/pWcN4sSaF9kY1bXSeP3J99fBIYUCAwEAAQ== 24-----END PUBLIC KEY----- 25 26$ openssl asn1parse -i < [ALGORITHM] 27 0:d=0 hl=2 l= 13 cons: SEQUENCE 28 2:d=1 hl=2 l= 9 prim: OBJECT :sha256WithRSAEncryption 29 13:d=1 hl=2 l= 0 prim: NULL 30-----BEGIN ALGORITHM----- 31MA0GCSqGSIb3DQEBCwUA 32-----END ALGORITHM----- 33 34-----BEGIN DATA----- 35MIIB46ADAgECAgkA3l4tFOVii0UwDQYJKoZIhvcNAQELBQAwVjELMAkGA1UEBhMCQVUxEzARBgN 36VBAgMClNvbWUtU3RhdGUxITAfBgNVBAoMGEludGVybmV0IFdpZGdpdHMgUHR5IEx0ZDEPMA0GA1 37UEAwwGTXkga2V5MB4XDTE1MDcwMjE3MDYzOVoXDTE2MDcwMTE3MDYzOVowVjELMAkGA1UEBhMCQ 38VUxEzARBgNVBAgMClNvbWUtU3RhdGUxITAfBgNVBAoMGEludGVybmV0IFdpZGdpdHMgUHR5IEx0 39ZDEPMA0GA1UEAwwGTXkga2V5MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCqR+B2Mj1irNp 401JnY2zQIQRQPz7ybs6mUjHT3hf5APyaig2u6fBPThqxssgg0YviqIj/70hVK/JXcqP1zgR5AhsA 410agnwAjfB/ow4EH+3HEYV52qpxN98pUxC+1l2hgVtn8xCS/JGyjK+6dv+lZw3ixJoX2RjVtdJ4/ 42cn318EhhQIDAQABo1AwTjAdBgNVHQ4EFgQUzQBVKTEknyLndWd2HTsBdTKvyikwHwYDVR0jBBgw 43FoAUzQBVKTEknyLndWd2HTsBdTKvyikwDAYDVR0TBAUwAwEB/w== 44-----END DATA----- 45 46$ openssl asn1parse -i < [SIGNATURE] 47 0:d=0 hl=3 l= 129 prim: BIT STRING 48-----BEGIN SIGNATURE----- 49A4GBADrHSmFSJw/Gv7hs5PNzpaJwAri/sitarIZfzN/SjR+n8L8yeTEoiDb1+BkxlFvXvPHTaOK 50oO3WlslNNOxh1W5/JkYYGOUkCcyIjnln6qS560imcr3VNjomT/M8M2Iss+rJiKau1TRuaP7H8i6 51+Gqf3saGdr8/LnvFAdNQvkalQt 52-----END SIGNATURE----- 53