AU: Switch to 2048 bit RSA keys; Pad SHA256 hashes appropriately.

payload_signer.h

Index: payload_signer.h
diff --git a/payload_signer.h b/payload_signer.h
index eb0663d6969f374811784293a2eeb01255bbfb75..c0f7cae8bb43726d3adc087c9ea5ec348027cf3f 100644
--- a/payload_signer.h
+++ b/payload_signer.h
@@ -67,6 +67,9 @@ class PayloadSigner {
   static bool VerifySignedPayload(const std::string& payload_path,
                                   const std::string& public_key_path);
 
+  // Pads a SHA256 hash so that it may be encrypted/signed with RSA2048.

[gauravsh, 2011/03/29 23:04:05]

just a add a comment that this pads using the PKCS#1 v1.5 scheme. (there are
multiple types of padding schemes) 

[adlr, 2011/03/30 19:40:14]

Done.

+  // Returns true on success, false otherwise.
+  static bool PadRSA2048SHA256Hash(std::vector<char>* hash);

[gauravsh, 2011/03/29 23:04:05]

comment on what |hash| is? Also that in-place modifies the hash.

[adlr, 2011/03/30 19:40:14]

Done.

  private:
   // This should never be constructed
   DISALLOW_IMPLICIT_CONSTRUCTORS(PayloadSigner);