golang-jwt / jwt

Go implementation of JSON Web Tokens (JWT).

Home Page:https://golang-jwt.github.io/jwt/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

RSA-PSS (RSASSA-PSS) keys are unusable in Go language

vault-thirteen opened this issue · comments

This library can not be used normally in Golang because built-in Go library does not support parsing RSA-PSS (RSASSA-PSS) keys.

Parsing an RSA-PSS (RSASSA-PSS) key throws a following error:

x509: PKCS#8 wrapping contained private key with unknown algorithm: 1.2.840.113549.1.1.10

For more information see this issue:
golang/go#48314

This means that such signing methods as PS256, PS384 and PS512 are not working with built-in Golang's libraries.