RSA Security 5 manual Key info types for keyObject in BSignInit

AI_EC_DSAWithDigest

AM_ECF2POLY_DSA_VERIFY for even characteristic. Also required is the appropriate AM for the digest specified, for instance, AM_SHA when the digestInfoType is AI_SHA1.

Key info types for keyObject in B_SignInit:

KI_ECPrivate or KI_ECPrivateBER.

Key info types for keyObject in B_VerifyInit:

KI_ECPublic or KI_ECPublicBER.

Output considerations:

The signature result of B_SignFinal is a BER-encoded value of type SEQUENCE (INTEGER, INTEGER) where the first field is the value r and the second field is the value s, as defined in section 5.3.1 of X9.57 Draft. The size of signature is 6 + (2 · (length of order)) bytes. For instance, if the order is 160 bits (20 bytes), the signature will be 46 bytes long.

C h a p t e r 2 A l g o r i t h m I n f o Ty p e s 69