1 .\" Automatically generated by Pod::Man 2.16 (Pod::Simple 3.05)
4 .\" ========================================================================
5 .de Sh \" Subsection heading
13 .de Sp \" Vertical space (when we can't use .PP)
17 .de Vb \" Begin verbatim text
22 .de Ve \" End verbatim text
26 .\" Set up some character translations and predefined strings. \*(-- will
27 .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
28 .\" double quote, and \*(R" will give a right double quote. \*(C+ will
29 .\" give a nicer C++. Capital omega is used to do unbreakable dashes and
30 .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
31 .\" nothing in troff, for use with C<>.
33 .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
37 . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
38 . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
51 .\" Escape single quotes in literal strings from groff's Unicode transform.
55 .\" If the F register is turned on, we'll generate index entries on stderr for
56 .\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index
57 .\" entries marked with X<> in POD. Of course, you'll have to process the
58 .\" output yourself in some meaningful fashion.
61 . tm Index:\\$1\t\\n%\t"\\$2"
71 .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
72 .\" Fear. Run. Save yourself. No user-serviceable parts.
73 . \" fudge factors for nroff and troff
82 . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
88 . \" simple accents for nroff and troff
98 . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
99 . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
100 . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
101 . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
102 . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
103 . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
105 . \" troff and (daisy-wheel) nroff accents
106 .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
107 .ds 8 \h'\*(#H'\(*b\h'-\*(#H'
108 .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
109 .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
110 .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
111 .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
112 .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
113 .ds ae a\h'-(\w'a'u*4/10)'e
114 .ds Ae A\h'-(\w'A'u*4/10)'E
115 . \" corrections for vroff
116 .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
117 .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
118 . \" for low resolution devices (crt and lpr)
119 .if \n(.H>23 .if \n(.V>19 \
132 .\" ========================================================================
134 .IX Title "RSA_private_encrypt 3"
135 .TH RSA_private_encrypt 3 "2009-11-06" "0.9.8l" "OpenSSL"
136 .\" For nroff, turn off justification. Always turn off hyphenation; it makes
137 .\" way too many mistakes in technical documents.
141 RSA_private_encrypt, RSA_public_decrypt \- low level signature operations
143 .IX Header "SYNOPSIS"
145 \& #include <openssl/rsa.h>
147 \& int RSA_private_encrypt(int flen, unsigned char *from,
148 \& unsigned char *to, RSA *rsa, int padding);
150 \& int RSA_public_decrypt(int flen, unsigned char *from,
151 \& unsigned char *to, RSA *rsa, int padding);
154 .IX Header "DESCRIPTION"
155 These functions handle \s-1RSA\s0 signatures at a low level.
157 \&\fIRSA_private_encrypt()\fR signs the \fBflen\fR bytes at \fBfrom\fR (usually a
158 message digest with an algorithm identifier) using the private key
159 \&\fBrsa\fR and stores the signature in \fBto\fR. \fBto\fR must point to
160 \&\fBRSA_size(rsa)\fR bytes of memory.
162 \&\fBpadding\fR denotes one of the following modes:
163 .IP "\s-1RSA_PKCS1_PADDING\s0" 4
164 .IX Item "RSA_PKCS1_PADDING"
165 \&\s-1PKCS\s0 #1 v1.5 padding. This function does not handle the
166 \&\fBalgorithmIdentifier\fR specified in \s-1PKCS\s0 #1. When generating or
167 verifying \s-1PKCS\s0 #1 signatures, \fIRSA_sign\fR\|(3) and \fIRSA_verify\fR\|(3) should be
169 .IP "\s-1RSA_NO_PADDING\s0" 4
170 .IX Item "RSA_NO_PADDING"
171 Raw \s-1RSA\s0 signature. This mode should \fIonly\fR be used to implement
172 cryptographically sound padding modes in the application code.
173 Signing user data directly with \s-1RSA\s0 is insecure.
175 \&\fIRSA_public_decrypt()\fR recovers the message digest from the \fBflen\fR
176 bytes long signature at \fBfrom\fR using the signer's public key
177 \&\fBrsa\fR. \fBto\fR must point to a memory section large enough to hold the
178 message digest (which is smaller than \fBRSA_size(rsa) \-
179 11\fR). \fBpadding\fR is the padding mode that was used to sign the data.
181 .IX Header "RETURN VALUES"
182 \&\fIRSA_private_encrypt()\fR returns the size of the signature (i.e.,
183 RSA_size(rsa)). \fIRSA_public_decrypt()\fR returns the size of the
184 recovered message digest.
186 On error, \-1 is returned; the error codes can be
187 obtained by \fIERR_get_error\fR\|(3).
189 .IX Header "SEE ALSO"
190 \&\fIERR_get_error\fR\|(3), \fIrsa\fR\|(3),
191 \&\fIRSA_sign\fR\|(3), \fIRSA_verify\fR\|(3)
194 The \fBpadding\fR argument was added in SSLeay 0.8. \s-1RSA_NO_PADDING\s0 is
195 available since SSLeay 0.9.0.