summaryrefslogtreecommitdiff
path: root/chromium/net/android/java/src/org/chromium/net/AndroidKeyStore.java
diff options
context:
space:
mode:
Diffstat (limited to 'chromium/net/android/java/src/org/chromium/net/AndroidKeyStore.java')
-rw-r--r--chromium/net/android/java/src/org/chromium/net/AndroidKeyStore.java19
1 files changed, 10 insertions, 9 deletions
diff --git a/chromium/net/android/java/src/org/chromium/net/AndroidKeyStore.java b/chromium/net/android/java/src/org/chromium/net/AndroidKeyStore.java
index 2edaa895b7e..de5d8f2d5f0 100644
--- a/chromium/net/android/java/src/org/chromium/net/AndroidKeyStore.java
+++ b/chromium/net/android/java/src/org/chromium/net/AndroidKeyStore.java
@@ -112,20 +112,21 @@ public class AndroidKeyStore {
* shall only be used to implement signing in the context of SSL
* client certificate support.
*
- * The message will actually be a hash, computed and padded by OpenSSL,
- * itself, depending on the type of the key. The result should match
- * exactly what the vanilla implementations of the following OpenSSL
- * function calls do:
+ * The message will actually be a hash, computed by OpenSSL itself,
+ * depending on the type of the key. The result should match exactly
+ * what the vanilla implementations of the following OpenSSL function
+ * calls do:
*
* - For a RSA private key, this should be equivalent to calling
- * RSA_sign(NDI_md5_sha1,....), i.e. it must generate a raw RSA
- * signature. The message must a combined, 36-byte MD5+SHA1 message
- * digest padded to the length of the modulus using PKCS#1 padding.
+ * RSA_private_encrypt(..., RSA_PKCS1_PADDING), i.e. it must
+ * generate a raw RSA signature. The message must be either a
+ * combined, 36-byte MD5+SHA1 message digest or a DigestInfo
+ * value wrapping a message digest.
*
* - For a DSA and ECDSA private keys, this should be equivalent to
* calling DSA_sign(0,...) and ECDSA_sign(0,...) respectively. The
- * message must be a 20-byte SHA1 hash and the function shall
- * compute a direct DSA/ECDSA signature for it.
+ * message must be a hash and the function shall compute a direct
+ * DSA/ECDSA signature for it.
*
* @param privateKey The PrivateKey handle.
* @param message The message to sign.