diff options
| author | Richard Levitte <levitte@openssl.org> | 2024-01-18 15:27:34 +0100 |
|---|---|---|
| committer | Richard Levitte <levitte@openssl.org> | 2024-08-21 08:21:06 +0200 |
| commit | e675aabb8747d0f2da5691945f1a429558ebc34d (patch) | |
| tree | e7a7b724b7cb8bf437ace58d5803873833830ff4 /util/libcrypto.num | |
| parent | Link to the place where signature options are defined (diff) | |
| download | openssl-e675aabb8747d0f2da5691945f1a429558ebc34d.tar.xz openssl-e675aabb8747d0f2da5691945f1a429558ebc34d.zip | |
Implement functionality for direct use of composite signature algorithms
The following API groups are extended with a new init function, as well
as an update and final function, to allow the use of explicitly fetched
signature implementations for any composite signature algorithm, like
"sha1WithRSAEncryption":
- EVP_PKEY_sign
- EVP_PKEY_verify
- EVP_PKEY_verify_recover
To support this, providers are required to add a few new functions, not
the least one that declares what key types an signature implementation
supports.
While at this, the validity check in evp_signature_from_algorithm() is
also refactored; the SIGNATURE provider functionality is too complex for
counters. It's better, or at least more readable, to check function
combinations.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23416)
Diffstat (limited to 'util/libcrypto.num')
| -rw-r--r-- | util/libcrypto.num | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/util/libcrypto.num b/util/libcrypto.num index ef11c0302e..57c1e4686c 100644 --- a/util/libcrypto.num +++ b/util/libcrypto.num @@ -5716,3 +5716,13 @@ OSSL_BASIC_ATTR_CONSTRAINTS_free ? 3_4_0 EXIST::FUNCTION: OSSL_BASIC_ATTR_CONSTRAINTS_new ? 3_4_0 EXIST::FUNCTION: OSSL_BASIC_ATTR_CONSTRAINTS_it ? 3_4_0 EXIST::FUNCTION: EVP_KEYMGMT_gen_gettable_params ? 3_4_0 EXIST::FUNCTION: +EVP_PKEY_CTX_set_signature ? 3_4_0 EXIST::FUNCTION: +EVP_PKEY_sign_init_ex2 ? 3_4_0 EXIST::FUNCTION: +EVP_PKEY_sign_message_init ? 3_4_0 EXIST::FUNCTION: +EVP_PKEY_sign_message_update ? 3_4_0 EXIST::FUNCTION: +EVP_PKEY_sign_message_final ? 3_4_0 EXIST::FUNCTION: +EVP_PKEY_verify_init_ex2 ? 3_4_0 EXIST::FUNCTION: +EVP_PKEY_verify_message_init ? 3_4_0 EXIST::FUNCTION: +EVP_PKEY_verify_message_update ? 3_4_0 EXIST::FUNCTION: +EVP_PKEY_verify_message_final ? 3_4_0 EXIST::FUNCTION: +EVP_PKEY_verify_recover_init_ex2 ? 3_4_0 EXIST::FUNCTION: |