]> git.ipfire.org Git - thirdparty/openssl.git/commit
Refactor OpenSSL 'RSA' EVP_SIGNATURE to also include RSA+hash composites
authorRichard Levitte <levitte@openssl.org>
Sat, 6 Jul 2024 14:26:39 +0000 (16:26 +0200)
committerRichard Levitte <levitte@openssl.org>
Wed, 21 Aug 2024 06:21:06 +0000 (08:21 +0200)
commit572a8371ab600cfcf89284b692625dbfb7627f2d
tree971449b649f38acbd6effb90bf92fad262a88397
parente675aabb8747d0f2da5691945f1a429558ebc34d
Refactor OpenSSL 'RSA' EVP_SIGNATURE to also include RSA+hash composites

(in the code, "sigalg" is used to refer to these composite algorithms,
which is a nod to libcrypto and libssl, where that term is commonly used
for composite algorithms)

To make this implementation possible, wrappers were added around the hash
function itself, allowing the use of existing hash implementations through
their respective OSSL_DISPATCH tables, but also retaining the dynamic fetch
of hash implementations when the digest_sign / digest_verify functionality
is used.  This wrapper allows implementing the RSA+hash composites through
simple initializer function and a custom OSSL_DISPATCH table for each.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23416)
crypto/err/openssl.txt
doc/man7/EVP_SIGNATURE-RSA.pod
include/openssl/proverr.h
providers/common/provider_err.c
providers/common/securitycheck.c
providers/defltprov.c
providers/fips/fipsprov.c
providers/implementations/include/prov/implementations.h
providers/implementations/include/prov/names.h
providers/implementations/signature/rsa_sig.c