1 .\" $NetBSD: RSA_private_encrypt.3,v 1.14 2015/06/12 17:01:14 christos Exp $
3 .\" Automatically generated by Pod::Man 2.28 (Pod::Simple 3.28)
6 .\" ========================================================================
7 .de Sp \" Vertical space (when we can't use .PP)
11 .de Vb \" Begin verbatim text
16 .de Ve \" End verbatim text
20 .\" Set up some character translations and predefined strings. \*(-- will
21 .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
22 .\" double quote, and \*(R" will give a right double quote. \*(C+ will
23 .\" give a nicer C++. Capital omega is used to do unbreakable dashes and
24 .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
25 .\" nothing in troff, for use with C<>.
27 .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
31 . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
32 . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
47 .\" Escape single quotes in literal strings from groff's Unicode transform.
51 .\" If the F register is turned on, we'll generate index entries on stderr for
52 .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
53 .\" entries marked with X<> in POD. Of course, you'll have to process the
54 .\" output yourself in some meaningful fashion.
56 .\" Avoid warning from groff about undefined register 'F'.
60 .if \n(.g .if rF .nr rF 1
61 .if (\n(rF:(\n(.g==0)) \{
64 . tm Index:\\$1\t\\n%\t"\\$2"
74 .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
75 .\" Fear. Run. Save yourself. No user-serviceable parts.
76 . \" fudge factors for nroff and troff
85 . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
91 . \" simple accents for nroff and troff
101 . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
102 . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
103 . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
104 . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
105 . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
106 . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
108 . \" troff and (daisy-wheel) nroff accents
109 .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
110 .ds 8 \h'\*(#H'\(*b\h'-\*(#H'
111 .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
112 .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
113 .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
114 .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
115 .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
116 .ds ae a\h'-(\w'a'u*4/10)'e
117 .ds Ae A\h'-(\w'A'u*4/10)'E
118 . \" corrections for vroff
119 .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
120 .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
121 . \" for low resolution devices (crt and lpr)
122 .if \n(.H>23 .if \n(.V>19 \
135 .\" ========================================================================
137 .IX Title "RSA_private_encrypt 3"
138 .TH RSA_private_encrypt 3 "2009-07-19" "1.0.1n" "OpenSSL"
139 .\" For nroff, turn off justification. Always turn off hyphenation; it makes
140 .\" way too many mistakes in technical documents.
144 RSA_private_encrypt, RSA_public_decrypt \- low level signature operations
148 .IX Header "SYNOPSIS"
150 \& #include <openssl/rsa.h>
152 \& int RSA_private_encrypt(int flen, unsigned char *from,
153 \& unsigned char *to, RSA *rsa, int padding);
155 \& int RSA_public_decrypt(int flen, unsigned char *from,
156 \& unsigned char *to, RSA *rsa, int padding);
159 .IX Header "DESCRIPTION"
160 These functions handle \s-1RSA\s0 signatures at a low level.
162 \&\fIRSA_private_encrypt()\fR signs the \fBflen\fR bytes at \fBfrom\fR (usually a
163 message digest with an algorithm identifier) using the private key
164 \&\fBrsa\fR and stores the signature in \fBto\fR. \fBto\fR must point to
165 \&\fBRSA_size(rsa)\fR bytes of memory.
167 \&\fBpadding\fR denotes one of the following modes:
168 .IP "\s-1RSA_PKCS1_PADDING\s0" 4
169 .IX Item "RSA_PKCS1_PADDING"
170 \&\s-1PKCS\s0 #1 v1.5 padding. This function does not handle the
171 \&\fBalgorithmIdentifier\fR specified in \s-1PKCS\s0 #1. When generating or
172 verifying \s-1PKCS\s0 #1 signatures, \fIRSA_sign\fR\|(3) and \fIRSA_verify\fR\|(3) should be
174 .IP "\s-1RSA_NO_PADDING\s0" 4
175 .IX Item "RSA_NO_PADDING"
176 Raw \s-1RSA\s0 signature. This mode should \fIonly\fR be used to implement
177 cryptographically sound padding modes in the application code.
178 Signing user data directly with \s-1RSA\s0 is insecure.
180 \&\fIRSA_public_decrypt()\fR recovers the message digest from the \fBflen\fR
181 bytes long signature at \fBfrom\fR using the signer's public key
182 \&\fBrsa\fR. \fBto\fR must point to a memory section large enough to hold the
183 message digest (which is smaller than \fBRSA_size(rsa) \-
184 11\fR). \fBpadding\fR is the padding mode that was used to sign the data.
186 .IX Header "RETURN VALUES"
187 \&\fIRSA_private_encrypt()\fR returns the size of the signature (i.e.,
188 RSA_size(rsa)). \fIRSA_public_decrypt()\fR returns the size of the
189 recovered message digest.
191 On error, \-1 is returned; the error codes can be
192 obtained by \fIERR_get_error\fR\|(3).
194 .IX Header "SEE ALSO"
195 \&\fIERR_get_error\fR\|(3), \fIopenssl_rsa\fR\|(3),
196 \&\fIRSA_sign\fR\|(3), \fIRSA_verify\fR\|(3)
199 The \fBpadding\fR argument was added in SSLeay 0.8. \s-1RSA_NO_PADDING\s0 is
200 available since SSLeay 0.9.0.