From: Pauli Date: Tue, 6 May 2025 03:18:48 +0000 (+1000) Subject: rsa: add security category support X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=4da326af2a7c71fbc791614e36c8acd42c47521d;p=thirdparty%2Fopenssl.git rsa: add security category support Reviewed-by: Shane Lontis Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/27571) --- diff --git a/providers/implementations/keymgmt/rsa_kmgmt.c b/providers/implementations/keymgmt/rsa_kmgmt.c index 77d09500942..d73c83b8f39 100644 --- a/providers/implementations/keymgmt/rsa_kmgmt.c +++ b/providers/implementations/keymgmt/rsa_kmgmt.c @@ -343,6 +343,9 @@ static int rsa_get_params(void *key, OSSL_PARAM params[]) if ((p = OSSL_PARAM_locate(params, OSSL_PKEY_PARAM_MAX_SIZE)) != NULL && (empty || !OSSL_PARAM_set_int(p, RSA_size(rsa)))) return 0; + if ((p = OSSL_PARAM_locate(params, OSSL_PKEY_PARAM_SECURITY_CATEGORY)) != NULL) + if (!OSSL_PARAM_set_int(p, 0)) + return 0; /* * For restricted RSA-PSS keys, we ignore the default digest request. @@ -378,6 +381,7 @@ static const OSSL_PARAM rsa_params[] = { OSSL_PARAM_int(OSSL_PKEY_PARAM_BITS, NULL), OSSL_PARAM_int(OSSL_PKEY_PARAM_SECURITY_BITS, NULL), OSSL_PARAM_int(OSSL_PKEY_PARAM_MAX_SIZE, NULL), + OSSL_PARAM_int(OSSL_PKEY_PARAM_SECURITY_CATEGORY, NULL), OSSL_PARAM_utf8_string(OSSL_PKEY_PARAM_DEFAULT_DIGEST, NULL, 0), RSA_KEY_TYPES() OSSL_PARAM_END