Unable to verify ES384 and ES512 JWS signatures

[Jason Reicheneker]

I'm testing the elliptic signature algorithms by cross-checking them with jose4j. ES256 works, but ES384 and ES512 verification both fail with the nimbus library. This happens whether the signatures were created with jose4j or nimbus.

See the attached unit tests for examples, and change the constants at the top of the file between 256, 384, and 512 to see the issue.

[Vladimir Dzhuvinov]

Thank you Jason for reporting this. We only had EC256 tests using the official JWS EC256 test vectors.

[Vladimir Dzhuvinov]

Hi Jason,

I added a bunch of round-trip tests and traced the problem to the code that was concatenating the R+S ECDSA signature parts. This was affecting ES384 and ES512.

The buggy code was rewritten and as of commit ae8f4af all round-trip tests pass.

You if still experience cross test problems with Brian's library, just let me know.

Cheers,

Vladimir

[Brian Campbell]

Thanks guys!

[Jason Reicheneker]

Vladimir,

Thank you for your prompt resolution of the bugs I've entered the last few days! I'll be uptaking them in 2.12 when it's released.

Thanks, Jason