]>
git.ipfire.org Git - thirdparty/openssl.git/blob - include/openssl/rsa.h
2 * Copyright 1995-2018 The OpenSSL Project Authors. All Rights Reserved.
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
11 # define OPENSSL_RSA_H
14 # include <openssl/macros.h>
15 # ifndef OPENSSL_NO_DEPRECATED_3_0
19 # include <openssl/opensslconf.h>
21 # ifndef OPENSSL_NO_RSA
22 # include <openssl/asn1.h>
23 # include <openssl/bio.h>
24 # include <openssl/crypto.h>
25 # include <openssl/types.h>
26 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
27 # include <openssl/bn.h>
29 # include <openssl/rsaerr.h>
30 # include <openssl/safestack.h>
36 # ifndef OPENSSL_RSA_MAX_MODULUS_BITS
37 # define OPENSSL_RSA_MAX_MODULUS_BITS 16384
40 # ifndef OPENSSL_NO_DEPRECATED_3_0
41 /* The types RSA and RSA_METHOD are defined in ossl_typ.h */
43 # define OPENSSL_RSA_FIPS_MIN_MODULUS_BITS 1024
45 # ifndef OPENSSL_RSA_SMALL_MODULUS_BITS
46 # define OPENSSL_RSA_SMALL_MODULUS_BITS 3072
49 /* exponent limit enforced for "large" modulus only */
50 # ifndef OPENSSL_RSA_MAX_PUBEXP_BITS
51 # define OPENSSL_RSA_MAX_PUBEXP_BITS 64
55 # define RSA_F4 0x10001L
57 /* based on RFC 8017 appendix A.1.2 */
58 # define RSA_ASN1_VERSION_DEFAULT 0
59 # define RSA_ASN1_VERSION_MULTI 1
61 # define RSA_DEFAULT_PRIME_NUM 2
62 # endif /* OPENSSL_NO_DEPRECATED_3_0 */
64 /* Don't check pub/private match */
65 /* TODO(3.0): deprecate this? It is exposed for sls/t1_lib.c's use */
66 # define RSA_METHOD_FLAG_NO_CHECK 0x0001
68 # ifndef OPENSSL_NO_DEPRECATED_3_0
69 # define RSA_FLAG_CACHE_PUBLIC 0x0002
70 # define RSA_FLAG_CACHE_PRIVATE 0x0004
71 # define RSA_FLAG_BLINDING 0x0008
72 # define RSA_FLAG_THREAD_SAFE 0x0010
74 * This flag means the private key operations will be handled by rsa_mod_exp
75 * and that they do not depend on the private key components being present:
76 * for example a key stored in external hardware. Without this flag
77 * bn_mod_exp gets called when private key components are absent.
79 # define RSA_FLAG_EXT_PKEY 0x0020
82 * new with 0.9.6j and 0.9.7b; the built-in
83 * RSA implementation now uses blinding by
84 * default (ignoring RSA_FLAG_BLINDING),
85 * but other engines might not need it
87 # define RSA_FLAG_NO_BLINDING 0x0080
88 # endif /* OPENSSL_NO_DEPRECATED_3_0 */
90 * Does nothing. Previously this switched off constant time behaviour.
92 # ifndef OPENSSL_NO_DEPRECATED_1_1_0
93 # define RSA_FLAG_NO_CONSTTIME 0x0000
95 /* deprecated name for the flag*/
97 * new with 0.9.7h; the built-in RSA
98 * implementation now uses constant time
99 * modular exponentiation for secret exponents
100 * by default. This flag causes the
101 * faster variable sliding window method to
102 * be used for all exponents.
104 # ifndef OPENSSL_NO_DEPRECATED_0_9_8
105 # define RSA_FLAG_NO_EXP_CONSTTIME RSA_FLAG_NO_CONSTTIME
108 int EVP_PKEY_CTX_set_rsa_padding(EVP_PKEY_CTX
*ctx
, int pad_mode
);
109 int EVP_PKEY_CTX_get_rsa_padding(EVP_PKEY_CTX
*ctx
, int *pad_mode
);
111 # define EVP_PKEY_CTX_set_rsa_pss_saltlen(ctx, len) \
112 RSA_pkey_ctx_ctrl(ctx, (EVP_PKEY_OP_SIGN|EVP_PKEY_OP_VERIFY), \
113 EVP_PKEY_CTRL_RSA_PSS_SALTLEN, len, NULL)
114 /* Salt length matches digest */
115 # define RSA_PSS_SALTLEN_DIGEST -1
116 /* Verify only: auto detect salt length */
117 # define RSA_PSS_SALTLEN_AUTO -2
118 /* Set salt length to maximum possible */
119 # define RSA_PSS_SALTLEN_MAX -3
120 /* Old compatible max salt length for sign only */
121 # define RSA_PSS_SALTLEN_MAX_SIGN -2
123 # define EVP_PKEY_CTX_set_rsa_pss_keygen_saltlen(ctx, len) \
124 EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_RSA_PSS, EVP_PKEY_OP_KEYGEN, \
125 EVP_PKEY_CTRL_RSA_PSS_SALTLEN, len, NULL)
127 # define EVP_PKEY_CTX_get_rsa_pss_saltlen(ctx, plen) \
128 RSA_pkey_ctx_ctrl(ctx, (EVP_PKEY_OP_SIGN|EVP_PKEY_OP_VERIFY), \
129 EVP_PKEY_CTRL_GET_RSA_PSS_SALTLEN, 0, plen)
131 # define EVP_PKEY_CTX_set_rsa_keygen_bits(ctx, bits) \
132 RSA_pkey_ctx_ctrl(ctx, EVP_PKEY_OP_KEYGEN, \
133 EVP_PKEY_CTRL_RSA_KEYGEN_BITS, bits, NULL)
135 # define EVP_PKEY_CTX_set_rsa_keygen_pubexp(ctx, pubexp) \
136 RSA_pkey_ctx_ctrl(ctx, EVP_PKEY_OP_KEYGEN, \
137 EVP_PKEY_CTRL_RSA_KEYGEN_PUBEXP, 0, pubexp)
139 # define EVP_PKEY_CTX_set_rsa_keygen_primes(ctx, primes) \
140 RSA_pkey_ctx_ctrl(ctx, EVP_PKEY_OP_KEYGEN, \
141 EVP_PKEY_CTRL_RSA_KEYGEN_PRIMES, primes, NULL)
143 int EVP_PKEY_CTX_set_rsa_mgf1_md(EVP_PKEY_CTX
*ctx
, const EVP_MD
*md
);
144 int EVP_PKEY_CTX_set_rsa_mgf1_md_name(EVP_PKEY_CTX
*ctx
, const char *mdname
,
145 const char *mdprops
);
146 int EVP_PKEY_CTX_get_rsa_mgf1_md(EVP_PKEY_CTX
*ctx
, const EVP_MD
**md
);
147 int EVP_PKEY_CTX_get_rsa_mgf1_md_name(EVP_PKEY_CTX
*ctx
, char *name
,
150 # define EVP_PKEY_CTX_set_rsa_pss_keygen_mgf1_md(ctx, md) \
151 EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_RSA_PSS, EVP_PKEY_OP_KEYGEN, \
152 EVP_PKEY_CTRL_RSA_MGF1_MD, 0, (void *)(md))
154 int EVP_PKEY_CTX_set_rsa_oaep_md(EVP_PKEY_CTX
*ctx
, const EVP_MD
*md
);
155 int EVP_PKEY_CTX_set_rsa_oaep_md_name(EVP_PKEY_CTX
*ctx
, const char *mdname
,
156 const char *mdprops
);
157 int EVP_PKEY_CTX_get_rsa_oaep_md(EVP_PKEY_CTX
*ctx
, const EVP_MD
**md
);
158 int EVP_PKEY_CTX_get_rsa_oaep_md_name(EVP_PKEY_CTX
*ctx
, char *name
,
160 int EVP_PKEY_CTX_set0_rsa_oaep_label(EVP_PKEY_CTX
*ctx
, void *label
, int llen
);
161 int EVP_PKEY_CTX_get0_rsa_oaep_label(EVP_PKEY_CTX
*ctx
, unsigned char **label
);
163 # define EVP_PKEY_CTX_set_rsa_pss_keygen_md(ctx, md) \
164 EVP_PKEY_CTX_ctrl(ctx, EVP_PKEY_RSA_PSS, \
165 EVP_PKEY_OP_KEYGEN, EVP_PKEY_CTRL_MD, \
169 # define EVP_PKEY_CTRL_RSA_PADDING (EVP_PKEY_ALG_CTRL + 1)
170 # define EVP_PKEY_CTRL_RSA_PSS_SALTLEN (EVP_PKEY_ALG_CTRL + 2)
172 # define EVP_PKEY_CTRL_RSA_KEYGEN_BITS (EVP_PKEY_ALG_CTRL + 3)
173 # define EVP_PKEY_CTRL_RSA_KEYGEN_PUBEXP (EVP_PKEY_ALG_CTRL + 4)
174 # define EVP_PKEY_CTRL_RSA_MGF1_MD (EVP_PKEY_ALG_CTRL + 5)
176 # define EVP_PKEY_CTRL_GET_RSA_PADDING (EVP_PKEY_ALG_CTRL + 6)
177 # define EVP_PKEY_CTRL_GET_RSA_PSS_SALTLEN (EVP_PKEY_ALG_CTRL + 7)
178 # define EVP_PKEY_CTRL_GET_RSA_MGF1_MD (EVP_PKEY_ALG_CTRL + 8)
180 # define EVP_PKEY_CTRL_RSA_OAEP_MD (EVP_PKEY_ALG_CTRL + 9)
181 # define EVP_PKEY_CTRL_RSA_OAEP_LABEL (EVP_PKEY_ALG_CTRL + 10)
183 # define EVP_PKEY_CTRL_GET_RSA_OAEP_MD (EVP_PKEY_ALG_CTRL + 11)
184 # define EVP_PKEY_CTRL_GET_RSA_OAEP_LABEL (EVP_PKEY_ALG_CTRL + 12)
186 # define EVP_PKEY_CTRL_RSA_KEYGEN_PRIMES (EVP_PKEY_ALG_CTRL + 13)
188 # define RSA_PKCS1_PADDING 1
189 # define RSA_SSLV23_PADDING 2
190 # define RSA_NO_PADDING 3
191 # define RSA_PKCS1_OAEP_PADDING 4
192 # define RSA_X931_PADDING 5
195 # define RSA_PKCS1_PSS_PADDING 6
196 # define RSA_PKCS1_WITH_TLS_PADDING 7
198 # define RSA_PKCS1_PADDING_SIZE 11
200 # define RSA_set_app_data(s,arg) RSA_set_ex_data(s,0,arg)
201 # define RSA_get_app_data(s) RSA_get_ex_data(s,0)
204 DEPRECATEDIN_3_0(RSA
*RSA_new_method(ENGINE
*engine
))
205 DEPRECATEDIN_3_0(int RSA_bits(const RSA
*rsa
))
206 DEPRECATEDIN_3_0(int RSA_size(const RSA
*rsa
))
207 DEPRECATEDIN_3_0(int RSA_security_bits(const RSA
*rsa
))
209 int RSA_set0_key(RSA
*r
, BIGNUM
*n
, BIGNUM
*e
, BIGNUM
*d
);
210 int RSA_set0_factors(RSA
*r
, BIGNUM
*p
, BIGNUM
*q
);
211 int RSA_set0_crt_params(RSA
*r
,BIGNUM
*dmp1
, BIGNUM
*dmq1
, BIGNUM
*iqmp
);
212 int RSA_set0_multi_prime_params(RSA
*r
, BIGNUM
*primes
[], BIGNUM
*exps
[],
213 BIGNUM
*coeffs
[], int pnum
);
214 void RSA_get0_key(const RSA
*r
,
215 const BIGNUM
**n
, const BIGNUM
**e
, const BIGNUM
**d
);
216 void RSA_get0_factors(const RSA
*r
, const BIGNUM
**p
, const BIGNUM
**q
);
217 int RSA_get_multi_prime_extra_count(const RSA
*r
);
218 int RSA_get0_multi_prime_factors(const RSA
*r
, const BIGNUM
*primes
[]);
219 void RSA_get0_crt_params(const RSA
*r
,
220 const BIGNUM
**dmp1
, const BIGNUM
**dmq1
,
221 const BIGNUM
**iqmp
);
222 int RSA_get0_multi_prime_crt_params(const RSA
*r
, const BIGNUM
*exps
[],
223 const BIGNUM
*coeffs
[]);
224 const BIGNUM
*RSA_get0_n(const RSA
*d
);
225 const BIGNUM
*RSA_get0_e(const RSA
*d
);
226 const BIGNUM
*RSA_get0_d(const RSA
*d
);
227 const BIGNUM
*RSA_get0_p(const RSA
*d
);
228 const BIGNUM
*RSA_get0_q(const RSA
*d
);
229 const BIGNUM
*RSA_get0_dmp1(const RSA
*r
);
230 const BIGNUM
*RSA_get0_dmq1(const RSA
*r
);
231 const BIGNUM
*RSA_get0_iqmp(const RSA
*r
);
232 DEPRECATEDIN_3_0(const RSA_PSS_PARAMS
*RSA_get0_pss_params(const RSA
*r
))
233 void RSA_clear_flags(RSA
*r
, int flags
);
234 int RSA_test_flags(const RSA
*r
, int flags
);
235 void RSA_set_flags(RSA
*r
, int flags
);
236 DEPRECATEDIN_3_0(int RSA_get_version(RSA
*r
))
237 DEPRECATEDIN_3_0(ENGINE
*RSA_get0_engine(const RSA
*r
))
239 /* Deprecated version */
240 DEPRECATEDIN_0_9_8(RSA
*RSA_generate_key(int bits
, unsigned long e
, void
241 (*callback
) (int, int, void *),
245 DEPRECATEDIN_3_0(int RSA_generate_key_ex(RSA
*rsa
, int bits
, BIGNUM
*e
,
247 /* Multi-prime version */
248 DEPRECATEDIN_3_0(int RSA_generate_multi_prime_key(RSA
*rsa
, int bits
,
249 int primes
, BIGNUM
*e
,
252 DEPRECATEDIN_3_0(int RSA_X931_derive_ex(RSA
*rsa
, BIGNUM
*p1
, BIGNUM
*p2
,
253 BIGNUM
*q1
, BIGNUM
*q2
,
254 const BIGNUM
*Xp1
, const BIGNUM
*Xp2
,
255 const BIGNUM
*Xp
, const BIGNUM
*Xq1
,
256 const BIGNUM
*Xq2
, const BIGNUM
*Xq
,
257 const BIGNUM
*e
, BN_GENCB
*cb
))
258 DEPRECATEDIN_3_0(int RSA_X931_generate_key_ex(RSA
*rsa
, int bits
,
259 const BIGNUM
*e
, BN_GENCB
*cb
))
261 DEPRECATEDIN_3_0(int RSA_check_key(const RSA
*))
262 DEPRECATEDIN_3_0(int RSA_check_key_ex(const RSA
*, BN_GENCB
*cb
))
263 /* next 4 return -1 on error */
264 DEPRECATEDIN_3_0(int RSA_public_encrypt(int flen
, const unsigned char *from
,
265 unsigned char *to
, RSA
*rsa
,
267 DEPRECATEDIN_3_0(int RSA_private_encrypt(int flen
, const unsigned char *from
,
268 unsigned char *to
, RSA
*rsa
,
270 DEPRECATEDIN_3_0(int RSA_public_decrypt(int flen
, const unsigned char *from
,
271 unsigned char *to
, RSA
*rsa
,
273 DEPRECATEDIN_3_0(int RSA_private_decrypt(int flen
, const unsigned char *from
,
274 unsigned char *to
, RSA
*rsa
,
276 void RSA_free(RSA
*r
);
277 /* "up" the RSA object's reference count */
278 int RSA_up_ref(RSA
*r
);
280 /* TODO(3.0): deprecate this one ssl/ssl_rsa.c can be changed to avoid it */
281 int RSA_flags(const RSA
*r
);
283 DEPRECATEDIN_3_0(void RSA_set_default_method(const RSA_METHOD
*meth
))
284 DEPRECATEDIN_3_0(const RSA_METHOD
*RSA_get_default_method(void))
285 DEPRECATEDIN_3_0(const RSA_METHOD
*RSA_null_method(void))
286 DEPRECATEDIN_3_0(const RSA_METHOD
*RSA_get_method(const RSA
*rsa
))
287 DEPRECATEDIN_3_0(int RSA_set_method(RSA
*rsa
, const RSA_METHOD
*meth
))
289 /* these are the actual RSA functions */
290 DEPRECATEDIN_3_0(const RSA_METHOD
*RSA_PKCS1_OpenSSL(void))
292 int RSA_pkey_ctx_ctrl(EVP_PKEY_CTX
*ctx
, int optype
, int cmd
, int p1
, void *p2
);
294 DECLARE_ASN1_ENCODE_FUNCTIONS_name(RSA
, RSAPublicKey
)
295 DECLARE_ASN1_ENCODE_FUNCTIONS_name(RSA
, RSAPrivateKey
)
297 struct rsa_pss_params_st
{
298 X509_ALGOR
*hashAlgorithm
;
299 X509_ALGOR
*maskGenAlgorithm
;
300 ASN1_INTEGER
*saltLength
;
301 ASN1_INTEGER
*trailerField
;
302 /* Decoded hash algorithm from maskGenAlgorithm */
303 X509_ALGOR
*maskHash
;
306 DECLARE_ASN1_FUNCTIONS(RSA_PSS_PARAMS
)
308 typedef struct rsa_oaep_params_st
{
309 X509_ALGOR
*hashFunc
;
310 X509_ALGOR
*maskGenFunc
;
311 X509_ALGOR
*pSourceFunc
;
312 /* Decoded hash algorithm from maskGenFunc */
313 X509_ALGOR
*maskHash
;
316 DECLARE_ASN1_FUNCTIONS(RSA_OAEP_PARAMS
)
318 # ifndef OPENSSL_NO_STDIO
319 DEPRECATEDIN_3_0(int RSA_print_fp(FILE *fp
, const RSA
*r
, int offset
))
322 DEPRECATEDIN_3_0(int RSA_print(BIO
*bp
, const RSA
*r
, int offset
))
325 * The following 2 functions sign and verify a X509_SIG ASN1 object inside
326 * PKCS#1 padded RSA encryption
328 DEPRECATEDIN_3_0(int RSA_sign(int type
, const unsigned char *m
,
329 unsigned int m_length
, unsigned char *sigret
,
330 unsigned int *siglen
, RSA
*rsa
))
331 DEPRECATEDIN_3_0(int RSA_verify(int type
, const unsigned char *m
,
332 unsigned int m_length
,
333 const unsigned char *sigbuf
,
334 unsigned int siglen
, RSA
*rsa
))
337 * The following 2 function sign and verify a ASN1_OCTET_STRING object inside
338 * PKCS#1 padded RSA encryption
340 DEPRECATEDIN_3_0(int RSA_sign_ASN1_OCTET_STRING(int type
,
341 const unsigned char *m
,
342 unsigned int m_length
,
343 unsigned char *sigret
,
344 unsigned int *siglen
, RSA
*rsa
))
345 DEPRECATEDIN_3_0(int RSA_verify_ASN1_OCTET_STRING(int type
,
346 const unsigned char *m
,
347 unsigned int m_length
,
348 unsigned char *sigbuf
,
352 /* TODO(3.0): figure out how to deprecate these two */
353 int RSA_blinding_on(RSA
*rsa
, BN_CTX
*ctx
);
354 void RSA_blinding_off(RSA
*rsa
);
355 DEPRECATEDIN_3_0(BN_BLINDING
*RSA_setup_blinding(RSA
*rsa
, BN_CTX
*ctx
))
357 DEPRECATEDIN_3_0(int RSA_padding_add_PKCS1_type_1(unsigned char *to
, int tlen
,
358 const unsigned char *f
,
360 DEPRECATEDIN_3_0(int RSA_padding_check_PKCS1_type_1(unsigned char *to
, int tlen
,
361 const unsigned char *f
,
362 int fl
, int rsa_len
))
363 DEPRECATEDIN_3_0(int RSA_padding_add_PKCS1_type_2(unsigned char *to
, int tlen
,
364 const unsigned char *f
,
366 DEPRECATEDIN_3_0(int RSA_padding_check_PKCS1_type_2(unsigned char *to
, int tlen
,
367 const unsigned char *f
,
368 int fl
, int rsa_len
))
369 DEPRECATEDIN_3_0(int PKCS1_MGF1(unsigned char *mask
, long len
,
370 const unsigned char *seed
, long seedlen
,
372 DEPRECATEDIN_3_0(int RSA_padding_add_PKCS1_OAEP(unsigned char *to
, int tlen
,
373 const unsigned char *f
, int fl
,
374 const unsigned char *p
, int pl
))
375 DEPRECATEDIN_3_0(int RSA_padding_check_PKCS1_OAEP(unsigned char *to
, int tlen
,
376 const unsigned char *f
,
378 const unsigned char *p
,
380 DEPRECATEDIN_3_0(int RSA_padding_add_PKCS1_OAEP_mgf1(unsigned char *to
,
382 const unsigned char *from
,
384 const unsigned char *param
,
387 const EVP_MD
*mgf1md
))
388 DEPRECATEDIN_3_0(int RSA_padding_check_PKCS1_OAEP_mgf1(unsigned char *to
,
390 const unsigned char *from
,
392 const unsigned char *param
,
393 int plen
, const EVP_MD
*md
,
394 const EVP_MD
*mgf1md
))
395 DEPRECATEDIN_3_0(int RSA_padding_add_SSLv23(unsigned char *to
, int tlen
,
396 const unsigned char *f
, int fl
))
397 DEPRECATEDIN_3_0(int RSA_padding_check_SSLv23(unsigned char *to
, int tlen
,
398 const unsigned char *f
, int fl
,
400 DEPRECATEDIN_3_0(int RSA_padding_add_none(unsigned char *to
, int tlen
,
401 const unsigned char *f
, int fl
))
402 DEPRECATEDIN_3_0(int RSA_padding_check_none(unsigned char *to
, int tlen
,
403 const unsigned char *f
, int fl
,
405 DEPRECATEDIN_3_0(int RSA_padding_add_X931(unsigned char *to
, int tlen
,
406 const unsigned char *f
, int fl
))
407 DEPRECATEDIN_3_0(int RSA_padding_check_X931(unsigned char *to
, int tlen
,
408 const unsigned char *f
, int fl
,
410 DEPRECATEDIN_3_0(int RSA_X931_hash_id(int nid
))
412 DEPRECATEDIN_3_0(int RSA_verify_PKCS1_PSS(RSA
*rsa
, const unsigned char *mHash
,
414 const unsigned char *EM
, int sLen
))
415 DEPRECATEDIN_3_0(int RSA_padding_add_PKCS1_PSS(RSA
*rsa
, unsigned char *EM
,
416 const unsigned char *mHash
,
417 const EVP_MD
*Hash
, int sLen
))
419 DEPRECATEDIN_3_0(int RSA_verify_PKCS1_PSS_mgf1(RSA
*rsa
,
420 const unsigned char *mHash
,
422 const EVP_MD
*mgf1Hash
,
423 const unsigned char *EM
,
426 DEPRECATEDIN_3_0(int RSA_padding_add_PKCS1_PSS_mgf1(RSA
*rsa
,
428 const unsigned char *mHash
,
430 const EVP_MD
*mgf1Hash
,
433 # define RSA_get_ex_new_index(l, p, newf, dupf, freef) \
434 CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_RSA, l, p, newf, dupf, freef)
435 DEPRECATEDIN_3_0(int RSA_set_ex_data(RSA
*r
, int idx
, void *arg
))
436 DEPRECATEDIN_3_0(void *RSA_get_ex_data(const RSA
*r
, int idx
))
438 DECLARE_ASN1_DUP_FUNCTION_name(RSA
, RSAPublicKey
)
439 DECLARE_ASN1_DUP_FUNCTION_name(RSA
, RSAPrivateKey
)
441 # ifndef OPENSSL_NO_DEPRECATED_3_0
443 * If this flag is set the RSA method is FIPS compliant and can be used in
444 * FIPS mode. This is set in the validated module method. If an application
445 * sets this flag in its own methods it is its responsibility to ensure the
446 * result is compliant.
449 # define RSA_FLAG_FIPS_METHOD 0x0400
452 * If this flag is set the operations normally disabled in FIPS mode are
453 * permitted it is then the applications responsibility to ensure that the
454 * usage is compliant.
457 # define RSA_FLAG_NON_FIPS_ALLOW 0x0400
459 * Application has decided PRNG is good enough to generate a key: don't
462 # define RSA_FLAG_CHECKED 0x0800
463 # endif /* OPENSSL_NO_DEPRECATED_3_0 */
465 DEPRECATEDIN_3_0(RSA_METHOD
*RSA_meth_new(const char *name
, int flags
))
466 DEPRECATEDIN_3_0(void RSA_meth_free(RSA_METHOD
*meth
))
467 DEPRECATEDIN_3_0(RSA_METHOD
*RSA_meth_dup(const RSA_METHOD
*meth
))
468 DEPRECATEDIN_3_0(const char *RSA_meth_get0_name(const RSA_METHOD
*meth
))
469 DEPRECATEDIN_3_0(int RSA_meth_set1_name(RSA_METHOD
*meth
, const char *name
))
470 DEPRECATEDIN_3_0(int RSA_meth_get_flags(const RSA_METHOD
*meth
))
471 DEPRECATEDIN_3_0(int RSA_meth_set_flags(RSA_METHOD
*meth
, int flags
))
472 DEPRECATEDIN_3_0(void *RSA_meth_get0_app_data(const RSA_METHOD
*meth
))
473 DEPRECATEDIN_3_0(int RSA_meth_set0_app_data(RSA_METHOD
*meth
, void *app_data
))
474 DEPRECATEDIN_3_0(int (*RSA_meth_get_pub_enc(const RSA_METHOD
*meth
))
475 (int flen
, const unsigned char *from
,
476 unsigned char *to
, RSA
*rsa
, int padding
))
477 DEPRECATEDIN_3_0(int RSA_meth_set_pub_enc(RSA_METHOD
*rsa
,
478 int (*pub_enc
) (int flen
, const unsigned char *from
,
479 unsigned char *to
, RSA
*rsa
,
481 DEPRECATEDIN_3_0(int (*RSA_meth_get_pub_dec(const RSA_METHOD
*meth
))
482 (int flen
, const unsigned char *from
,
483 unsigned char *to
, RSA
*rsa
, int padding
))
484 DEPRECATEDIN_3_0(int RSA_meth_set_pub_dec(RSA_METHOD
*rsa
,
485 int (*pub_dec
) (int flen
, const unsigned char *from
,
486 unsigned char *to
, RSA
*rsa
,
488 DEPRECATEDIN_3_0(int (*RSA_meth_get_priv_enc(const RSA_METHOD
*meth
))
489 (int flen
, const unsigned char *from
,
490 unsigned char *to
, RSA
*rsa
, int padding
))
491 DEPRECATEDIN_3_0(int RSA_meth_set_priv_enc(RSA_METHOD
*rsa
,
492 int (*priv_enc
) (int flen
, const unsigned char *from
,
493 unsigned char *to
, RSA
*rsa
,
495 DEPRECATEDIN_3_0(int (*RSA_meth_get_priv_dec(const RSA_METHOD
*meth
))
496 (int flen
, const unsigned char *from
,
497 unsigned char *to
, RSA
*rsa
, int padding
))
498 DEPRECATEDIN_3_0(int RSA_meth_set_priv_dec(RSA_METHOD
*rsa
,
499 int (*priv_dec
) (int flen
, const unsigned char *from
,
500 unsigned char *to
, RSA
*rsa
,
502 DEPRECATEDIN_3_0(int (*RSA_meth_get_mod_exp(const RSA_METHOD
*meth
))
503 (BIGNUM
*r0
, const BIGNUM
*i
, RSA
*rsa
, BN_CTX
*ctx
))
504 DEPRECATEDIN_3_0(int RSA_meth_set_mod_exp(RSA_METHOD
*rsa
,
505 int (*mod_exp
) (BIGNUM
*r0
, const BIGNUM
*i
, RSA
*rsa
,
507 DEPRECATEDIN_3_0(int (*RSA_meth_get_bn_mod_exp(const RSA_METHOD
*meth
))
508 (BIGNUM
*r
, const BIGNUM
*a
, const BIGNUM
*p
,
509 const BIGNUM
*m
, BN_CTX
*ctx
, BN_MONT_CTX
*m_ctx
))
510 DEPRECATEDIN_3_0(int RSA_meth_set_bn_mod_exp(RSA_METHOD
*rsa
,
511 int (*bn_mod_exp
) (BIGNUM
*r
,
516 BN_MONT_CTX
*m_ctx
)))
517 DEPRECATEDIN_3_0(int (*RSA_meth_get_init(const RSA_METHOD
*meth
)) (RSA
*rsa
))
518 DEPRECATEDIN_3_0(int RSA_meth_set_init(RSA_METHOD
*rsa
, int (*init
) (RSA
*rsa
)))
519 DEPRECATEDIN_3_0(int (*RSA_meth_get_finish(const RSA_METHOD
*meth
)) (RSA
*rsa
))
520 DEPRECATEDIN_3_0(int RSA_meth_set_finish(RSA_METHOD
*rsa
,
521 int (*finish
) (RSA
*rsa
)))
522 DEPRECATEDIN_3_0(int (*RSA_meth_get_sign(const RSA_METHOD
*meth
))
524 const unsigned char *m
, unsigned int m_length
,
525 unsigned char *sigret
, unsigned int *siglen
,
527 DEPRECATEDIN_3_0(int RSA_meth_set_sign(RSA_METHOD
*rsa
,
528 int (*sign
) (int type
, const unsigned char *m
,
529 unsigned int m_length
,
530 unsigned char *sigret
, unsigned int *siglen
,
532 DEPRECATEDIN_3_0(int (*RSA_meth_get_verify(const RSA_METHOD
*meth
))
533 (int dtype
, const unsigned char *m
,
534 unsigned int m_length
, const unsigned char *sigbuf
,
535 unsigned int siglen
, const RSA
*rsa
))
536 DEPRECATEDIN_3_0(int RSA_meth_set_verify(RSA_METHOD
*rsa
,
537 int (*verify
) (int dtype
, const unsigned char *m
,
538 unsigned int m_length
,
539 const unsigned char *sigbuf
,
540 unsigned int siglen
, const RSA
*rsa
)))
541 DEPRECATEDIN_3_0(int (*RSA_meth_get_keygen(const RSA_METHOD
*meth
))
542 (RSA
*rsa
, int bits
, BIGNUM
*e
, BN_GENCB
*cb
))
543 DEPRECATEDIN_3_0(int RSA_meth_set_keygen(RSA_METHOD
*rsa
,
544 int (*keygen
) (RSA
*rsa
, int bits
, BIGNUM
*e
,
546 DEPRECATEDIN_3_0(int (*RSA_meth_get_multi_prime_keygen(const RSA_METHOD
*meth
))
547 (RSA
*rsa
, int bits
, int primes
, BIGNUM
*e
, BN_GENCB
*cb
))
548 DEPRECATEDIN_3_0(int RSA_meth_set_multi_prime_keygen(RSA_METHOD
*meth
,
549 int (*keygen
) (RSA
*rsa
, int bits
,
550 int primes
, BIGNUM
*e
,