Skip to content

Issue: Probabilistic Signature Verification Failure on Arweave #3

@Gabulhas

Description

@Gabulhas

Description

When using the tss-rsa-cpp library to generate and sign data, signatures often fail to verify on the Arweave platform. This behavior is inconsistent and requires multiple attempts of encoding and signing before a valid signature is produced.

Steps to Reproduce

  1. Use the library to generate RSA keys and create a signature for a arweave signature (using Arweave JS's getSignatureData method).
  2. Attempt to verify the signature on Arweave.
  3. Observe that verification fails most of the time, even though no changes are made to the signing process or data.

Observations

  • Using different SaltLength settings (e.g., AutoLength or EqualToHash) during EMSA-PSS encoding does not resolve the issue.
  • The issue appears probabilistic, as repeated encoding/signing eventually produces a valid signature.

Expected Behavior

Signatures generated by the library should consistently verify on Arweave without requiring multiple attempts.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions