1 .\" $NetBSD: libcrypto.pl,v 1.3 2007/11/27 22:16:03 christos Exp $
3 .\" Automatically generated by Pod::Man 2.16 (Pod::Simple 3.05)
6 .\" ========================================================================
7 .de Sh \" Subsection heading
15 .de Sp \" Vertical space (when we can't use .PP)
19 .de Vb \" Begin verbatim text
24 .de Ve \" End verbatim text
28 .\" Set up some character translations and predefined strings. \*(-- will
29 .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
30 .\" double quote, and \*(R" will give a right double quote. \*(C+ will
31 .\" give a nicer C++. Capital omega is used to do unbreakable dashes and
32 .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
33 .\" nothing in troff, for use with C<>.
35 .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
39 . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
40 . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
53 .\" Escape single quotes in literal strings from groff's Unicode transform.
57 .\" If the F register is turned on, we'll generate index entries on stderr for
58 .\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index
59 .\" entries marked with X<> in POD. Of course, you'll have to process the
60 .\" output yourself in some meaningful fashion.
63 . tm Index:\\$1\t\\n%\t"\\$2"
73 .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
74 .\" Fear. Run. Save yourself. No user-serviceable parts.
75 . \" fudge factors for nroff and troff
84 . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
90 . \" simple accents for nroff and troff
100 . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
101 . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
102 . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
103 . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
104 . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
105 . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
107 . \" troff and (daisy-wheel) nroff accents
108 .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
109 .ds 8 \h'\*(#H'\(*b\h'-\*(#H'
110 .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
111 .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
112 .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
113 .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
114 .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
115 .ds ae a\h'-(\w'a'u*4/10)'e
116 .ds Ae A\h'-(\w'A'u*4/10)'E
117 . \" corrections for vroff
118 .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
119 .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
120 . \" for low resolution devices (crt and lpr)
121 .if \n(.H>23 .if \n(.V>19 \
134 .\" ========================================================================
136 .IX Title "RSA_private_encrypt 3"
137 .TH RSA_private_encrypt 3 "2002-09-25" "1.1.0-dev" "OpenSSL"
138 .\" For nroff, turn off justification. Always turn off hyphenation; it makes
139 .\" way too many mistakes in technical documents.
143 RSA_private_encrypt, RSA_public_decrypt \- low level signature operations
147 .IX Header "SYNOPSIS"
149 \& #include <openssl/rsa.h>
151 \& int RSA_private_encrypt(int flen, unsigned char *from,
152 \& unsigned char *to, RSA *rsa, int padding);
154 \& int RSA_public_decrypt(int flen, unsigned char *from,
155 \& unsigned char *to, RSA *rsa, int padding);
158 .IX Header "DESCRIPTION"
159 These functions handle \s-1RSA\s0 signatures at a low level.
161 \&\fIRSA_private_encrypt()\fR signs the \fBflen\fR bytes at \fBfrom\fR (usually a
162 message digest with an algorithm identifier) using the private key
163 \&\fBrsa\fR and stores the signature in \fBto\fR. \fBto\fR must point to
164 \&\fBRSA_size(rsa)\fR bytes of memory.
166 \&\fBpadding\fR denotes one of the following modes:
167 .IP "\s-1RSA_PKCS1_PADDING\s0" 4
168 .IX Item "RSA_PKCS1_PADDING"
169 \&\s-1PKCS\s0 #1 v1.5 padding. This function does not handle the
170 \&\fBalgorithmIdentifier\fR specified in \s-1PKCS\s0 #1. When generating or
171 verifying \s-1PKCS\s0 #1 signatures, \fIRSA_sign\fR\|(3) and \fIRSA_verify\fR\|(3) should be
173 .IP "\s-1RSA_NO_PADDING\s0" 4
174 .IX Item "RSA_NO_PADDING"
175 Raw \s-1RSA\s0 signature. This mode should \fIonly\fR be used to implement
176 cryptographically sound padding modes in the application code.
177 Signing user data directly with \s-1RSA\s0 is insecure.
179 \&\fIRSA_public_decrypt()\fR recovers the message digest from the \fBflen\fR
180 bytes long signature at \fBfrom\fR using the signer's public key
181 \&\fBrsa\fR. \fBto\fR must point to a memory section large enough to hold the
182 message digest (which is smaller than \fBRSA_size(rsa) \-
183 11\fR). \fBpadding\fR is the padding mode that was used to sign the data.
185 .IX Header "RETURN VALUES"
186 \&\fIRSA_private_encrypt()\fR returns the size of the signature (i.e.,
187 RSA_size(rsa)). \fIRSA_public_decrypt()\fR returns the size of the
188 recovered message digest.
190 On error, \-1 is returned; the error codes can be
191 obtained by \fIERR_get_error\fR\|(3).
193 .IX Header "SEE ALSO"
194 \&\fIERR_get_error\fR\|(3), \fIopenssl_rsa\fR\|(3),
195 \&\fIRSA_sign\fR\|(3), \fIRSA_verify\fR\|(3)
198 The \fBpadding\fR argument was added in SSLeay 0.8. \s-1RSA_NO_PADDING\s0 is
199 available since SSLeay 0.9.0.