Signing algorithm http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1

[joonlabs]

Hey there,

Is there any way to sign using RSA-PSS with http://www.w3.org/2007/05/xmldsig-more#sha256-rsa-MGF1 method?

Best regards
Julius

[pitbulk]

Not supported.

[joonlabs]

@pitbulk thanks, I saw that in the code. But the actual reasons for this, is the underlying robrichards/xmlseclibs library. If we could switch from the openssl implementation to a phpseclib/phpseclib one, we could support it easily. I opened an issue at the robrichards/xmlseclibs library: robrichards/xmlseclibs#263

These algorithms are required by modern IDPs. We are working for municipalities in Germany and connecting to the ELSTER IDP of the German governmant, that only supports these modern encryption algorithms.