1 .\" $NetBSD: RSA_public_encrypt.3,v 1.14 2015/06/12 17:01:14 christos Exp $
3 .\" Automatically generated by Pod::Man 2.28 (Pod::Simple 3.28)
6 .\" ========================================================================
7 .de Sp \" Vertical space (when we can't use .PP)
11 .de Vb \" Begin verbatim text
16 .de Ve \" End verbatim text
20 .\" Set up some character translations and predefined strings. \*(-- will
21 .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
22 .\" double quote, and \*(R" will give a right double quote. \*(C+ will
23 .\" give a nicer C++. Capital omega is used to do unbreakable dashes and
24 .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
25 .\" nothing in troff, for use with C<>.
27 .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
31 . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
32 . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
47 .\" Escape single quotes in literal strings from groff's Unicode transform.
51 .\" If the F register is turned on, we'll generate index entries on stderr for
52 .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
53 .\" entries marked with X<> in POD. Of course, you'll have to process the
54 .\" output yourself in some meaningful fashion.
56 .\" Avoid warning from groff about undefined register 'F'.
60 .if \n(.g .if rF .nr rF 1
61 .if (\n(rF:(\n(.g==0)) \{
64 . tm Index:\\$1\t\\n%\t"\\$2"
74 .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
75 .\" Fear. Run. Save yourself. No user-serviceable parts.
76 . \" fudge factors for nroff and troff
85 . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
91 . \" simple accents for nroff and troff
101 . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
102 . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
103 . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
104 . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
105 . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
106 . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
108 . \" troff and (daisy-wheel) nroff accents
109 .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
110 .ds 8 \h'\*(#H'\(*b\h'-\*(#H'
111 .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
112 .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
113 .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
114 .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
115 .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
116 .ds ae a\h'-(\w'a'u*4/10)'e
117 .ds Ae A\h'-(\w'A'u*4/10)'E
118 . \" corrections for vroff
119 .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
120 .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
121 . \" for low resolution devices (crt and lpr)
122 .if \n(.H>23 .if \n(.V>19 \
135 .\" ========================================================================
137 .IX Title "RSA_public_encrypt 3"
138 .TH RSA_public_encrypt 3 "2009-07-19" "1.0.1n" "OpenSSL"
139 .\" For nroff, turn off justification. Always turn off hyphenation; it makes
140 .\" way too many mistakes in technical documents.
144 RSA_public_encrypt, RSA_private_decrypt \- RSA public key cryptography
148 .IX Header "SYNOPSIS"
150 \& #include <openssl/rsa.h>
152 \& int RSA_public_encrypt(int flen, unsigned char *from,
153 \& unsigned char *to, RSA *rsa, int padding);
155 \& int RSA_private_decrypt(int flen, unsigned char *from,
156 \& unsigned char *to, RSA *rsa, int padding);
159 .IX Header "DESCRIPTION"
160 \&\fIRSA_public_encrypt()\fR encrypts the \fBflen\fR bytes at \fBfrom\fR (usually a
161 session key) using the public key \fBrsa\fR and stores the ciphertext in
162 \&\fBto\fR. \fBto\fR must point to RSA_size(\fBrsa\fR) bytes of memory.
164 \&\fBpadding\fR denotes one of the following modes:
165 .IP "\s-1RSA_PKCS1_PADDING\s0" 4
166 .IX Item "RSA_PKCS1_PADDING"
167 \&\s-1PKCS\s0 #1 v1.5 padding. This currently is the most widely used mode.
168 .IP "\s-1RSA_PKCS1_OAEP_PADDING\s0" 4
169 .IX Item "RSA_PKCS1_OAEP_PADDING"
170 EME-OAEP as defined in \s-1PKCS\s0 #1 v2.0 with \s-1SHA\-1, MGF1\s0 and an empty
171 encoding parameter. This mode is recommended for all new applications.
172 .IP "\s-1RSA_SSLV23_PADDING\s0" 4
173 .IX Item "RSA_SSLV23_PADDING"
174 \&\s-1PKCS\s0 #1 v1.5 padding with an SSL-specific modification that denotes
175 that the server is \s-1SSL3\s0 capable.
176 .IP "\s-1RSA_NO_PADDING\s0" 4
177 .IX Item "RSA_NO_PADDING"
178 Raw \s-1RSA\s0 encryption. This mode should \fIonly\fR be used to implement
179 cryptographically sound padding modes in the application code.
180 Encrypting user data directly with \s-1RSA\s0 is insecure.
182 \&\fBflen\fR must be less than RSA_size(\fBrsa\fR) \- 11 for the \s-1PKCS\s0 #1 v1.5
183 based padding modes, less than RSA_size(\fBrsa\fR) \- 41 for
184 \&\s-1RSA_PKCS1_OAEP_PADDING\s0 and exactly RSA_size(\fBrsa\fR) for \s-1RSA_NO_PADDING.\s0
185 The random number generator must be seeded prior to calling
186 \&\fIRSA_public_encrypt()\fR.
188 \&\fIRSA_private_decrypt()\fR decrypts the \fBflen\fR bytes at \fBfrom\fR using the
189 private key \fBrsa\fR and stores the plaintext in \fBto\fR. \fBto\fR must point
190 to a memory section large enough to hold the decrypted data (which is
191 smaller than RSA_size(\fBrsa\fR)). \fBpadding\fR is the padding mode that
192 was used to encrypt the data.
194 .IX Header "RETURN VALUES"
195 \&\fIRSA_public_encrypt()\fR returns the size of the encrypted data (i.e.,
196 RSA_size(\fBrsa\fR)). \fIRSA_private_decrypt()\fR returns the size of the
199 On error, \-1 is returned; the error codes can be
200 obtained by \fIERR_get_error\fR\|(3).
202 .IX Header "CONFORMING TO"
203 \&\s-1SSL, PKCS\s0 #1 v2.0
205 .IX Header "SEE ALSO"
206 \&\fIERR_get_error\fR\|(3), \fIopenssl_rand\fR\|(3), \fIopenssl_rsa\fR\|(3),
207 \&\fIRSA_size\fR\|(3)
210 The \fBpadding\fR argument was added in SSLeay 0.8. \s-1RSA_NO_PADDING\s0 is
211 available since SSLeay 0.9.0, \s-1OAEP\s0 was added in OpenSSL 0.9.2b.