From 4da326af2a7c71fbc791614e36c8acd42c47521d Mon Sep 17 00:00:00 2001 From: Pauli Date: Tue, 6 May 2025 13:18:48 +1000 Subject: [PATCH] rsa: add security category support Reviewed-by: Shane Lontis Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/27571) --- providers/implementations/keymgmt/rsa_kmgmt.c | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/providers/implementations/keymgmt/rsa_kmgmt.c b/providers/implementations/keymgmt/rsa_kmgmt.c index 77d09500942..d73c83b8f39 100644 --- a/providers/implementations/keymgmt/rsa_kmgmt.c +++ b/providers/implementations/keymgmt/rsa_kmgmt.c @@ -343,6 +343,9 @@ static int rsa_get_params(void *key, OSSL_PARAM params[]) if ((p = OSSL_PARAM_locate(params, OSSL_PKEY_PARAM_MAX_SIZE)) != NULL && (empty || !OSSL_PARAM_set_int(p, RSA_size(rsa)))) return 0; + if ((p = OSSL_PARAM_locate(params, OSSL_PKEY_PARAM_SECURITY_CATEGORY)) != NULL) + if (!OSSL_PARAM_set_int(p, 0)) + return 0; /* * For restricted RSA-PSS keys, we ignore the default digest request. @@ -378,6 +381,7 @@ static const OSSL_PARAM rsa_params[] = { OSSL_PARAM_int(OSSL_PKEY_PARAM_BITS, NULL), OSSL_PARAM_int(OSSL_PKEY_PARAM_SECURITY_BITS, NULL), OSSL_PARAM_int(OSSL_PKEY_PARAM_MAX_SIZE, NULL), + OSSL_PARAM_int(OSSL_PKEY_PARAM_SECURITY_CATEGORY, NULL), OSSL_PARAM_utf8_string(OSSL_PKEY_PARAM_DEFAULT_DIGEST, NULL, 0), RSA_KEY_TYPES() OSSL_PARAM_END -- 2.47.2