File Explorer

1/*2 * Copyright 1995-2021 The OpenSSL Project Authors. All Rights Reserved.3 *4 * Licensed under the Apache License 2.0 (the "License").  You may not use5 * this file except in compliance with the License.  You can obtain a copy6 * in the file LICENSE in the source distribution or at7 * https://www.openssl.org/source/license.html8 */9 10#ifndef OPENSSL_RSA_H11#define OPENSSL_RSA_H12#pragma once13 14#include <openssl/macros.h>15#ifndef OPENSSL_NO_DEPRECATED_3_016#define HEADER_RSA_H17#endif18 19#include <openssl/opensslconf.h>20 21#include <openssl/asn1.h>22#include <openssl/bio.h>23#include <openssl/crypto.h>24#include <openssl/types.h>25#ifndef OPENSSL_NO_DEPRECATED_1_1_026#include <openssl/bn.h>27#endif28#include <openssl/rsaerr.h>29#include <openssl/safestack.h>30#ifndef OPENSSL_NO_STDIO31#include <stdio.h>32#endif33 34#ifdef __cplusplus35extern "C" {36#endif37 38#ifndef OPENSSL_RSA_MAX_MODULUS_BITS39#define OPENSSL_RSA_MAX_MODULUS_BITS 1638440#endif41 42#define RSA_3 0x3L43#define RSA_F4 0x10001L44 45#ifndef OPENSSL_NO_DEPRECATED_3_046/* The types RSA and RSA_METHOD are defined in ossl_typ.h */47 48#define OPENSSL_RSA_FIPS_MIN_MODULUS_BITS 204849 50#ifndef OPENSSL_RSA_SMALL_MODULUS_BITS51#define OPENSSL_RSA_SMALL_MODULUS_BITS 307252#endif53 54/* exponent limit enforced for "large" modulus only */55#ifndef OPENSSL_RSA_MAX_PUBEXP_BITS56#define OPENSSL_RSA_MAX_PUBEXP_BITS 6457#endif58/* based on RFC 8017 appendix A.1.2 */59#define RSA_ASN1_VERSION_DEFAULT 060#define RSA_ASN1_VERSION_MULTI 161 62#define RSA_DEFAULT_PRIME_NUM 263 64#define RSA_METHOD_FLAG_NO_CHECK 0x000165#define RSA_FLAG_CACHE_PUBLIC 0x000266#define RSA_FLAG_CACHE_PRIVATE 0x000467#define RSA_FLAG_BLINDING 0x000868#define RSA_FLAG_THREAD_SAFE 0x001069/*70 * This flag means the private key operations will be handled by rsa_mod_exp71 * and that they do not depend on the private key components being present:72 * for example a key stored in external hardware. Without this flag73 * bn_mod_exp gets called when private key components are absent.74 */75#define RSA_FLAG_EXT_PKEY 0x002076 77/*78 * new with 0.9.6j and 0.9.7b; the built-in79 * RSA implementation now uses blinding by80 * default (ignoring RSA_FLAG_BLINDING),81 * but other engines might not need it82 */83#define RSA_FLAG_NO_BLINDING 0x008084#endif /* OPENSSL_NO_DEPRECATED_3_0 */85/*86 * Does nothing. Previously this switched off constant time behaviour.87 */88#ifndef OPENSSL_NO_DEPRECATED_1_1_089#define RSA_FLAG_NO_CONSTTIME 0x000090#endif91/* deprecated name for the flag*/92/*93 * new with 0.9.7h; the built-in RSA94 * implementation now uses constant time95 * modular exponentiation for secret exponents96 * by default. This flag causes the97 * faster variable sliding window method to98 * be used for all exponents.99 */100#ifndef OPENSSL_NO_DEPRECATED_0_9_8101#define RSA_FLAG_NO_EXP_CONSTTIME RSA_FLAG_NO_CONSTTIME102#endif103 104/*-105 * New with 3.0: use part of the flags to denote exact type of RSA key,106 * some of which are limited to specific signature and encryption schemes.107 * These different types share the same RSA structure, but indicate the108 * use of certain fields in that structure.109 * Currently known are:110 * RSA          - this is the "normal" unlimited RSA structure (typenum 0)111 * RSASSA-PSS   - indicates that the PSS parameters are used.112 * RSAES-OAEP   - no specific field used for the moment, but OAEP padding113 *                is expected.  (currently unused)114 *115 * 4 bits allow for 16 types116 */117#define RSA_FLAG_TYPE_MASK 0xF000118#define RSA_FLAG_TYPE_RSA 0x0000119#define RSA_FLAG_TYPE_RSASSAPSS 0x1000120#define RSA_FLAG_TYPE_RSAESOAEP 0x2000121 122int EVP_PKEY_CTX_set_rsa_padding(EVP_PKEY_CTX *ctx, int pad_mode);123int EVP_PKEY_CTX_get_rsa_padding(EVP_PKEY_CTX *ctx, int *pad_mode);124 125int EVP_PKEY_CTX_set_rsa_pss_saltlen(EVP_PKEY_CTX *ctx, int saltlen);126int EVP_PKEY_CTX_get_rsa_pss_saltlen(EVP_PKEY_CTX *ctx, int *saltlen);127 128int EVP_PKEY_CTX_set_rsa_keygen_bits(EVP_PKEY_CTX *ctx, int bits);129int EVP_PKEY_CTX_set1_rsa_keygen_pubexp(EVP_PKEY_CTX *ctx, BIGNUM *pubexp);130int EVP_PKEY_CTX_set_rsa_keygen_primes(EVP_PKEY_CTX *ctx, int primes);131int EVP_PKEY_CTX_set_rsa_pss_keygen_saltlen(EVP_PKEY_CTX *ctx, int saltlen);132#ifndef OPENSSL_NO_DEPRECATED_3_0133OSSL_DEPRECATEDIN_3_0134int EVP_PKEY_CTX_set_rsa_keygen_pubexp(EVP_PKEY_CTX *ctx, BIGNUM *pubexp);135#endif136 137/* Salt length matches digest */138#define RSA_PSS_SALTLEN_DIGEST -1139/* Verify only: auto detect salt length */140#define RSA_PSS_SALTLEN_AUTO -2141/* Set salt length to maximum possible */142#define RSA_PSS_SALTLEN_MAX -3143/* Auto-detect on verify, set salt length to min(maximum possible, digest144 * length) on sign */145#define RSA_PSS_SALTLEN_AUTO_DIGEST_MAX -4146/* Old compatible max salt length for sign only */147#define RSA_PSS_SALTLEN_MAX_SIGN -2148 149int EVP_PKEY_CTX_set_rsa_mgf1_md(EVP_PKEY_CTX *ctx, const EVP_MD *md);150int EVP_PKEY_CTX_set_rsa_mgf1_md_name(EVP_PKEY_CTX *ctx, const char *mdname,151    const char *mdprops);152int EVP_PKEY_CTX_get_rsa_mgf1_md(EVP_PKEY_CTX *ctx, const EVP_MD **md);153int EVP_PKEY_CTX_get_rsa_mgf1_md_name(EVP_PKEY_CTX *ctx, char *name,154    size_t namelen);155int EVP_PKEY_CTX_set_rsa_pss_keygen_mgf1_md(EVP_PKEY_CTX *ctx, const EVP_MD *md);156int EVP_PKEY_CTX_set_rsa_pss_keygen_mgf1_md_name(EVP_PKEY_CTX *ctx,157    const char *mdname);158 159int EVP_PKEY_CTX_set_rsa_pss_keygen_md(EVP_PKEY_CTX *ctx, const EVP_MD *md);160int EVP_PKEY_CTX_set_rsa_pss_keygen_md_name(EVP_PKEY_CTX *ctx,161    const char *mdname,162    const char *mdprops);163 164int EVP_PKEY_CTX_set_rsa_oaep_md(EVP_PKEY_CTX *ctx, const EVP_MD *md);165int EVP_PKEY_CTX_set_rsa_oaep_md_name(EVP_PKEY_CTX *ctx, const char *mdname,166    const char *mdprops);167int EVP_PKEY_CTX_get_rsa_oaep_md(EVP_PKEY_CTX *ctx, const EVP_MD **md);168int EVP_PKEY_CTX_get_rsa_oaep_md_name(EVP_PKEY_CTX *ctx, char *name,169    size_t namelen);170int EVP_PKEY_CTX_set0_rsa_oaep_label(EVP_PKEY_CTX *ctx, void *label, int llen);171int EVP_PKEY_CTX_get0_rsa_oaep_label(EVP_PKEY_CTX *ctx, unsigned char **label);172 173#define EVP_PKEY_CTRL_RSA_PADDING (EVP_PKEY_ALG_CTRL + 1)174#define EVP_PKEY_CTRL_RSA_PSS_SALTLEN (EVP_PKEY_ALG_CTRL + 2)175 176#define EVP_PKEY_CTRL_RSA_KEYGEN_BITS (EVP_PKEY_ALG_CTRL + 3)177#define EVP_PKEY_CTRL_RSA_KEYGEN_PUBEXP (EVP_PKEY_ALG_CTRL + 4)178#define EVP_PKEY_CTRL_RSA_MGF1_MD (EVP_PKEY_ALG_CTRL + 5)179 180#define EVP_PKEY_CTRL_GET_RSA_PADDING (EVP_PKEY_ALG_CTRL + 6)181#define EVP_PKEY_CTRL_GET_RSA_PSS_SALTLEN (EVP_PKEY_ALG_CTRL + 7)182#define EVP_PKEY_CTRL_GET_RSA_MGF1_MD (EVP_PKEY_ALG_CTRL + 8)183 184#define EVP_PKEY_CTRL_RSA_OAEP_MD (EVP_PKEY_ALG_CTRL + 9)185#define EVP_PKEY_CTRL_RSA_OAEP_LABEL (EVP_PKEY_ALG_CTRL + 10)186 187#define EVP_PKEY_CTRL_GET_RSA_OAEP_MD (EVP_PKEY_ALG_CTRL + 11)188#define EVP_PKEY_CTRL_GET_RSA_OAEP_LABEL (EVP_PKEY_ALG_CTRL + 12)189 190#define EVP_PKEY_CTRL_RSA_KEYGEN_PRIMES (EVP_PKEY_ALG_CTRL + 13)191 192#define EVP_PKEY_CTRL_RSA_IMPLICIT_REJECTION (EVP_PKEY_ALG_CTRL + 14)193 194#define RSA_PKCS1_PADDING 1195#define RSA_NO_PADDING 3196#define RSA_PKCS1_OAEP_PADDING 4197#define RSA_X931_PADDING 5198 199/* EVP_PKEY_ only */200#define RSA_PKCS1_PSS_PADDING 6201#define RSA_PKCS1_WITH_TLS_PADDING 7202 203/* internal RSA_ only */204#define RSA_PKCS1_NO_IMPLICIT_REJECT_PADDING 8205 206#define RSA_PKCS1_PADDING_SIZE 11207 208#define RSA_set_app_data(s, arg) RSA_set_ex_data(s, 0, arg)209#define RSA_get_app_data(s) RSA_get_ex_data(s, 0)210 211#ifndef OPENSSL_NO_DEPRECATED_3_0212OSSL_DEPRECATEDIN_3_0 RSA *RSA_new(void);213OSSL_DEPRECATEDIN_3_0 RSA *RSA_new_method(ENGINE *engine);214OSSL_DEPRECATEDIN_3_0 int RSA_bits(const RSA *rsa);215OSSL_DEPRECATEDIN_3_0 int RSA_size(const RSA *rsa);216OSSL_DEPRECATEDIN_3_0 int RSA_security_bits(const RSA *rsa);217 218OSSL_DEPRECATEDIN_3_0 int RSA_set0_key(RSA *r, BIGNUM *n, BIGNUM *e, BIGNUM *d);219OSSL_DEPRECATEDIN_3_0 int RSA_set0_factors(RSA *r, BIGNUM *p, BIGNUM *q);220OSSL_DEPRECATEDIN_3_0 int RSA_set0_crt_params(RSA *r,221    BIGNUM *dmp1, BIGNUM *dmq1,222    BIGNUM *iqmp);223OSSL_DEPRECATEDIN_3_0 int RSA_set0_multi_prime_params(RSA *r,224    BIGNUM *primes[],225    BIGNUM *exps[],226    BIGNUM *coeffs[],227    int pnum);228OSSL_DEPRECATEDIN_3_0 void RSA_get0_key(const RSA *r,229    const BIGNUM **n, const BIGNUM **e,230    const BIGNUM **d);231OSSL_DEPRECATEDIN_3_0 void RSA_get0_factors(const RSA *r,232    const BIGNUM **p, const BIGNUM **q);233OSSL_DEPRECATEDIN_3_0 int RSA_get_multi_prime_extra_count(const RSA *r);234OSSL_DEPRECATEDIN_3_0 int RSA_get0_multi_prime_factors(const RSA *r,235    const BIGNUM *primes[]);236OSSL_DEPRECATEDIN_3_0 void RSA_get0_crt_params(const RSA *r,237    const BIGNUM **dmp1,238    const BIGNUM **dmq1,239    const BIGNUM **iqmp);240OSSL_DEPRECATEDIN_3_0241int RSA_get0_multi_prime_crt_params(const RSA *r, const BIGNUM *exps[],242    const BIGNUM *coeffs[]);243OSSL_DEPRECATEDIN_3_0 const BIGNUM *RSA_get0_n(const RSA *d);244OSSL_DEPRECATEDIN_3_0 const BIGNUM *RSA_get0_e(const RSA *d);245OSSL_DEPRECATEDIN_3_0 const BIGNUM *RSA_get0_d(const RSA *d);246OSSL_DEPRECATEDIN_3_0 const BIGNUM *RSA_get0_p(const RSA *d);247OSSL_DEPRECATEDIN_3_0 const BIGNUM *RSA_get0_q(const RSA *d);248OSSL_DEPRECATEDIN_3_0 const BIGNUM *RSA_get0_dmp1(const RSA *r);249OSSL_DEPRECATEDIN_3_0 const BIGNUM *RSA_get0_dmq1(const RSA *r);250OSSL_DEPRECATEDIN_3_0 const BIGNUM *RSA_get0_iqmp(const RSA *r);251OSSL_DEPRECATEDIN_3_0 const RSA_PSS_PARAMS *RSA_get0_pss_params(const RSA *r);252OSSL_DEPRECATEDIN_3_0 void RSA_clear_flags(RSA *r, int flags);253OSSL_DEPRECATEDIN_3_0 int RSA_test_flags(const RSA *r, int flags);254OSSL_DEPRECATEDIN_3_0 void RSA_set_flags(RSA *r, int flags);255OSSL_DEPRECATEDIN_3_0 int RSA_get_version(RSA *r);256OSSL_DEPRECATEDIN_3_0 ENGINE *RSA_get0_engine(const RSA *r);257#endif /* !OPENSSL_NO_DEPRECATED_3_0 */258 259#define EVP_RSA_gen(bits) \260    EVP_PKEY_Q_keygen(NULL, NULL, "RSA", (size_t)(0 + (bits)))261 262/* Deprecated version */263#ifndef OPENSSL_NO_DEPRECATED_0_9_8264OSSL_DEPRECATEDIN_0_9_8 RSA *RSA_generate_key(int bits, unsigned long e, void (*callback)(int, int, void *),265    void *cb_arg);266#endif267 268/* New version */269#ifndef OPENSSL_NO_DEPRECATED_3_0270OSSL_DEPRECATEDIN_3_0 int RSA_generate_key_ex(RSA *rsa, int bits, BIGNUM *e,271    BN_GENCB *cb);272/* Multi-prime version */273OSSL_DEPRECATEDIN_3_0 int RSA_generate_multi_prime_key(RSA *rsa, int bits,274    int primes, BIGNUM *e,275    BN_GENCB *cb);276 277OSSL_DEPRECATEDIN_3_0278int RSA_X931_derive_ex(RSA *rsa, BIGNUM *p1, BIGNUM *p2,279    BIGNUM *q1, BIGNUM *q2,280    const BIGNUM *Xp1, const BIGNUM *Xp2,281    const BIGNUM *Xp, const BIGNUM *Xq1,282    const BIGNUM *Xq2, const BIGNUM *Xq,283    const BIGNUM *e, BN_GENCB *cb);284OSSL_DEPRECATEDIN_3_0 int RSA_X931_generate_key_ex(RSA *rsa, int bits,285    const BIGNUM *e,286    BN_GENCB *cb);287 288OSSL_DEPRECATEDIN_3_0 int RSA_check_key(const RSA *);289OSSL_DEPRECATEDIN_3_0 int RSA_check_key_ex(const RSA *, BN_GENCB *cb);290/* next 4 return -1 on error */291OSSL_DEPRECATEDIN_3_0292int RSA_public_encrypt(int flen, const unsigned char *from, unsigned char *to,293    RSA *rsa, int padding);294OSSL_DEPRECATEDIN_3_0295int RSA_private_encrypt(int flen, const unsigned char *from, unsigned char *to,296    RSA *rsa, int padding);297OSSL_DEPRECATEDIN_3_0298int RSA_public_decrypt(int flen, const unsigned char *from, unsigned char *to,299    RSA *rsa, int padding);300OSSL_DEPRECATEDIN_3_0301int RSA_private_decrypt(int flen, const unsigned char *from, unsigned char *to,302    RSA *rsa, int padding);303OSSL_DEPRECATEDIN_3_0 void RSA_free(RSA *r);304/* "up" the RSA object's reference count */305OSSL_DEPRECATEDIN_3_0 int RSA_up_ref(RSA *r);306OSSL_DEPRECATEDIN_3_0 int RSA_flags(const RSA *r);307 308OSSL_DEPRECATEDIN_3_0 void RSA_set_default_method(const RSA_METHOD *meth);309OSSL_DEPRECATEDIN_3_0 const RSA_METHOD *RSA_get_default_method(void);310OSSL_DEPRECATEDIN_3_0 const RSA_METHOD *RSA_null_method(void);311OSSL_DEPRECATEDIN_3_0 const RSA_METHOD *RSA_get_method(const RSA *rsa);312OSSL_DEPRECATEDIN_3_0 int RSA_set_method(RSA *rsa, const RSA_METHOD *meth);313 314/* these are the actual RSA functions */315OSSL_DEPRECATEDIN_3_0 const RSA_METHOD *RSA_PKCS1_OpenSSL(void);316 317DECLARE_ASN1_ENCODE_FUNCTIONS_name_attr(OSSL_DEPRECATEDIN_3_0,318    RSA, RSAPublicKey)319DECLARE_ASN1_ENCODE_FUNCTIONS_name_attr(OSSL_DEPRECATEDIN_3_0,320    RSA, RSAPrivateKey)321#endif /* !OPENSSL_NO_DEPRECATED_3_0 */322 323int RSA_pkey_ctx_ctrl(EVP_PKEY_CTX *ctx, int optype, int cmd, int p1, void *p2);324 325struct rsa_pss_params_st {326    X509_ALGOR *hashAlgorithm;327    X509_ALGOR *maskGenAlgorithm;328    ASN1_INTEGER *saltLength;329    ASN1_INTEGER *trailerField;330    /* Decoded hash algorithm from maskGenAlgorithm */331    X509_ALGOR *maskHash;332};333 334DECLARE_ASN1_FUNCTIONS(RSA_PSS_PARAMS)335DECLARE_ASN1_DUP_FUNCTION(RSA_PSS_PARAMS)336 337typedef struct rsa_oaep_params_st {338    X509_ALGOR *hashFunc;339    X509_ALGOR *maskGenFunc;340    X509_ALGOR *pSourceFunc;341    /* Decoded hash algorithm from maskGenFunc */342    X509_ALGOR *maskHash;343} RSA_OAEP_PARAMS;344 345DECLARE_ASN1_FUNCTIONS(RSA_OAEP_PARAMS)346 347#ifndef OPENSSL_NO_DEPRECATED_3_0348#ifndef OPENSSL_NO_STDIO349OSSL_DEPRECATEDIN_3_0 int RSA_print_fp(FILE *fp, const RSA *r, int offset);350#endif351 352OSSL_DEPRECATEDIN_3_0 int RSA_print(BIO *bp, const RSA *r, int offset);353 354/*355 * The following 2 functions sign and verify a X509_SIG ASN1 object inside356 * PKCS#1 padded RSA encryption357 */358OSSL_DEPRECATEDIN_3_0 int RSA_sign(int type, const unsigned char *m,359    unsigned int m_length, unsigned char *sigret,360    unsigned int *siglen, RSA *rsa);361OSSL_DEPRECATEDIN_3_0 int RSA_verify(int type, const unsigned char *m,362    unsigned int m_length,363    const unsigned char *sigbuf,364    unsigned int siglen, RSA *rsa);365 366/*367 * The following 2 function sign and verify a ASN1_OCTET_STRING object inside368 * PKCS#1 padded RSA encryption369 */370OSSL_DEPRECATEDIN_3_0371int RSA_sign_ASN1_OCTET_STRING(int type,372    const unsigned char *m, unsigned int m_length,373    unsigned char *sigret, unsigned int *siglen,374    RSA *rsa);375OSSL_DEPRECATEDIN_3_0376int RSA_verify_ASN1_OCTET_STRING(int type,377    const unsigned char *m, unsigned int m_length,378    unsigned char *sigbuf, unsigned int siglen,379    RSA *rsa);380 381OSSL_DEPRECATEDIN_3_0 int RSA_blinding_on(RSA *rsa, BN_CTX *ctx);382OSSL_DEPRECATEDIN_3_0 void RSA_blinding_off(RSA *rsa);383OSSL_DEPRECATEDIN_3_0 BN_BLINDING *RSA_setup_blinding(RSA *rsa, BN_CTX *ctx);384 385OSSL_DEPRECATEDIN_3_0386int RSA_padding_add_PKCS1_type_1(unsigned char *to, int tlen,387    const unsigned char *f, int fl);388OSSL_DEPRECATEDIN_3_0389int RSA_padding_check_PKCS1_type_1(unsigned char *to, int tlen,390    const unsigned char *f, int fl,391    int rsa_len);392OSSL_DEPRECATEDIN_3_0393int RSA_padding_add_PKCS1_type_2(unsigned char *to, int tlen,394    const unsigned char *f, int fl);395OSSL_DEPRECATEDIN_3_0396int RSA_padding_check_PKCS1_type_2(unsigned char *to, int tlen,397    const unsigned char *f, int fl,398    int rsa_len);399OSSL_DEPRECATEDIN_3_0 int PKCS1_MGF1(unsigned char *mask, long len,400    const unsigned char *seed, long seedlen,401    const EVP_MD *dgst);402OSSL_DEPRECATEDIN_3_0403int RSA_padding_add_PKCS1_OAEP(unsigned char *to, int tlen,404    const unsigned char *f, int fl,405    const unsigned char *p, int pl);406OSSL_DEPRECATEDIN_3_0407int RSA_padding_check_PKCS1_OAEP(unsigned char *to, int tlen,408    const unsigned char *f, int fl, int rsa_len,409    const unsigned char *p, int pl);410OSSL_DEPRECATEDIN_3_0411int RSA_padding_add_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,412    const unsigned char *from, int flen,413    const unsigned char *param, int plen,414    const EVP_MD *md, const EVP_MD *mgf1md);415OSSL_DEPRECATEDIN_3_0416int RSA_padding_check_PKCS1_OAEP_mgf1(unsigned char *to, int tlen,417    const unsigned char *from, int flen,418    int num,419    const unsigned char *param, int plen,420    const EVP_MD *md, const EVP_MD *mgf1md);421OSSL_DEPRECATEDIN_3_0 int RSA_padding_add_none(unsigned char *to, int tlen,422    const unsigned char *f, int fl);423OSSL_DEPRECATEDIN_3_0 int RSA_padding_check_none(unsigned char *to, int tlen,424    const unsigned char *f, int fl,425    int rsa_len);426OSSL_DEPRECATEDIN_3_0 int RSA_padding_add_X931(unsigned char *to, int tlen,427    const unsigned char *f, int fl);428OSSL_DEPRECATEDIN_3_0 int RSA_padding_check_X931(unsigned char *to, int tlen,429    const unsigned char *f, int fl,430    int rsa_len);431OSSL_DEPRECATEDIN_3_0 int RSA_X931_hash_id(int nid);432 433OSSL_DEPRECATEDIN_3_0434int RSA_verify_PKCS1_PSS(RSA *rsa, const unsigned char *mHash,435    const EVP_MD *Hash, const unsigned char *EM,436    int sLen);437OSSL_DEPRECATEDIN_3_0438int RSA_padding_add_PKCS1_PSS(RSA *rsa, unsigned char *EM,439    const unsigned char *mHash, const EVP_MD *Hash,440    int sLen);441 442OSSL_DEPRECATEDIN_3_0443int RSA_verify_PKCS1_PSS_mgf1(RSA *rsa, const unsigned char *mHash,444    const EVP_MD *Hash, const EVP_MD *mgf1Hash,445    const unsigned char *EM, int sLen);446 447OSSL_DEPRECATEDIN_3_0448int RSA_padding_add_PKCS1_PSS_mgf1(RSA *rsa, unsigned char *EM,449    const unsigned char *mHash,450    const EVP_MD *Hash, const EVP_MD *mgf1Hash,451    int sLen);452 453#define RSA_get_ex_new_index(l, p, newf, dupf, freef) \454    CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_RSA, l, p, newf, dupf, freef)455OSSL_DEPRECATEDIN_3_0 int RSA_set_ex_data(RSA *r, int idx, void *arg);456OSSL_DEPRECATEDIN_3_0 void *RSA_get_ex_data(const RSA *r, int idx);457 458DECLARE_ASN1_DUP_FUNCTION_name_attr(OSSL_DEPRECATEDIN_3_0, RSA, RSAPublicKey)459DECLARE_ASN1_DUP_FUNCTION_name_attr(OSSL_DEPRECATEDIN_3_0, RSA, RSAPrivateKey)460 461/*462 * If this flag is set the RSA method is FIPS compliant and can be used in463 * FIPS mode. This is set in the validated module method. If an application464 * sets this flag in its own methods it is its responsibility to ensure the465 * result is compliant.466 */467 468#define RSA_FLAG_FIPS_METHOD 0x0400469 470/*471 * If this flag is set the operations normally disabled in FIPS mode are472 * permitted it is then the applications responsibility to ensure that the473 * usage is compliant.474 */475 476#define RSA_FLAG_NON_FIPS_ALLOW 0x0400477/*478 * Application has decided PRNG is good enough to generate a key: don't479 * check.480 */481#define RSA_FLAG_CHECKED 0x0800482 483OSSL_DEPRECATEDIN_3_0 RSA_METHOD *RSA_meth_new(const char *name, int flags);484OSSL_DEPRECATEDIN_3_0 void RSA_meth_free(RSA_METHOD *meth);485OSSL_DEPRECATEDIN_3_0 RSA_METHOD *RSA_meth_dup(const RSA_METHOD *meth);486OSSL_DEPRECATEDIN_3_0 const char *RSA_meth_get0_name(const RSA_METHOD *meth);487OSSL_DEPRECATEDIN_3_0 int RSA_meth_set1_name(RSA_METHOD *meth,488    const char *name);489OSSL_DEPRECATEDIN_3_0 int RSA_meth_get_flags(const RSA_METHOD *meth);490OSSL_DEPRECATEDIN_3_0 int RSA_meth_set_flags(RSA_METHOD *meth, int flags);491OSSL_DEPRECATEDIN_3_0 void *RSA_meth_get0_app_data(const RSA_METHOD *meth);492OSSL_DEPRECATEDIN_3_0 int RSA_meth_set0_app_data(RSA_METHOD *meth,493    void *app_data);494OSSL_DEPRECATEDIN_3_0495int (*RSA_meth_get_pub_enc(const RSA_METHOD *meth))(int flen,496    const unsigned char *from,497    unsigned char *to,498    RSA *rsa, int padding);499OSSL_DEPRECATEDIN_3_0500int RSA_meth_set_pub_enc(RSA_METHOD *rsa,501    int (*pub_enc)(int flen, const unsigned char *from,502        unsigned char *to, RSA *rsa,503        int padding));504OSSL_DEPRECATEDIN_3_0505int (*RSA_meth_get_pub_dec(const RSA_METHOD *meth))(int flen,506    const unsigned char *from,507    unsigned char *to,508    RSA *rsa, int padding);509OSSL_DEPRECATEDIN_3_0510int RSA_meth_set_pub_dec(RSA_METHOD *rsa,511    int (*pub_dec)(int flen, const unsigned char *from,512        unsigned char *to, RSA *rsa,513        int padding));514OSSL_DEPRECATEDIN_3_0515int (*RSA_meth_get_priv_enc(const RSA_METHOD *meth))(int flen,516    const unsigned char *from,517    unsigned char *to,518    RSA *rsa, int padding);519OSSL_DEPRECATEDIN_3_0520int RSA_meth_set_priv_enc(RSA_METHOD *rsa,521    int (*priv_enc)(int flen, const unsigned char *from,522        unsigned char *to, RSA *rsa,523        int padding));524OSSL_DEPRECATEDIN_3_0525int (*RSA_meth_get_priv_dec(const RSA_METHOD *meth))(int flen,526    const unsigned char *from,527    unsigned char *to,528    RSA *rsa, int padding);529OSSL_DEPRECATEDIN_3_0530int RSA_meth_set_priv_dec(RSA_METHOD *rsa,531    int (*priv_dec)(int flen, const unsigned char *from,532        unsigned char *to, RSA *rsa,533        int padding));534OSSL_DEPRECATEDIN_3_0535int (*RSA_meth_get_mod_exp(const RSA_METHOD *meth))(BIGNUM *r0,536    const BIGNUM *i,537    RSA *rsa, BN_CTX *ctx);538OSSL_DEPRECATEDIN_3_0539int RSA_meth_set_mod_exp(RSA_METHOD *rsa,540    int (*mod_exp)(BIGNUM *r0, const BIGNUM *i, RSA *rsa,541        BN_CTX *ctx));542OSSL_DEPRECATEDIN_3_0543int (*RSA_meth_get_bn_mod_exp(const RSA_METHOD *meth))(BIGNUM *r,544    const BIGNUM *a,545    const BIGNUM *p,546    const BIGNUM *m,547    BN_CTX *ctx,548    BN_MONT_CTX *m_ctx);549OSSL_DEPRECATEDIN_3_0550int RSA_meth_set_bn_mod_exp(RSA_METHOD *rsa,551    int (*bn_mod_exp)(BIGNUM *r,552        const BIGNUM *a,553        const BIGNUM *p,554        const BIGNUM *m,555        BN_CTX *ctx,556        BN_MONT_CTX *m_ctx));557OSSL_DEPRECATEDIN_3_0558int (*RSA_meth_get_init(const RSA_METHOD *meth))(RSA *rsa);559OSSL_DEPRECATEDIN_3_0560int RSA_meth_set_init(RSA_METHOD *rsa, int (*init)(RSA *rsa));561OSSL_DEPRECATEDIN_3_0562int (*RSA_meth_get_finish(const RSA_METHOD *meth))(RSA *rsa);563OSSL_DEPRECATEDIN_3_0564int RSA_meth_set_finish(RSA_METHOD *rsa, int (*finish)(RSA *rsa));565OSSL_DEPRECATEDIN_3_0566int (*RSA_meth_get_sign(const RSA_METHOD *meth))(int type,567    const unsigned char *m,568    unsigned int m_length,569    unsigned char *sigret,570    unsigned int *siglen,571    const RSA *rsa);572OSSL_DEPRECATEDIN_3_0573int RSA_meth_set_sign(RSA_METHOD *rsa,574    int (*sign)(int type, const unsigned char *m,575        unsigned int m_length,576        unsigned char *sigret, unsigned int *siglen,577        const RSA *rsa));578OSSL_DEPRECATEDIN_3_0579int (*RSA_meth_get_verify(const RSA_METHOD *meth))(int dtype,580    const unsigned char *m,581    unsigned int m_length,582    const unsigned char *sigbuf,583    unsigned int siglen,584    const RSA *rsa);585OSSL_DEPRECATEDIN_3_0586int RSA_meth_set_verify(RSA_METHOD *rsa,587    int (*verify)(int dtype, const unsigned char *m,588        unsigned int m_length,589        const unsigned char *sigbuf,590        unsigned int siglen, const RSA *rsa));591OSSL_DEPRECATEDIN_3_0592int (*RSA_meth_get_keygen(const RSA_METHOD *meth))(RSA *rsa, int bits,593    BIGNUM *e, BN_GENCB *cb);594OSSL_DEPRECATEDIN_3_0595int RSA_meth_set_keygen(RSA_METHOD *rsa,596    int (*keygen)(RSA *rsa, int bits, BIGNUM *e,597        BN_GENCB *cb));598OSSL_DEPRECATEDIN_3_0599int (*RSA_meth_get_multi_prime_keygen(const RSA_METHOD *meth))(RSA *rsa,600    int bits,601    int primes,602    BIGNUM *e,603    BN_GENCB *cb);604OSSL_DEPRECATEDIN_3_0605int RSA_meth_set_multi_prime_keygen(RSA_METHOD *meth,606    int (*keygen)(RSA *rsa, int bits,607        int primes, BIGNUM *e,608        BN_GENCB *cb));609#endif /* !OPENSSL_NO_DEPRECATED_3_0 */610 611#ifdef __cplusplus612}613#endif614#endif615