diff options
| author | slontis <shane.lontis@oracle.com> | 2022-05-04 12:04:43 +1000 |
|---|---|---|
| committer | Pauli <pauli@openssl.org> | 2022-05-09 10:08:07 +1000 |
| commit | b40c753b6e09eb6df06c161cdf771c704898b050 (patch) | |
| tree | 86165ecf2d5a9c538957e9b06f4df9e8189c3458 /doc/man3/EVP_PKEY_check.pod | |
| parent | fcbd8be18229ef7aa32369d2e9c747348f7d6490 (diff) | |
Add documentation for key validation that indicates the difference between the
EVP_PKEY_XXX_check() calls for the default and fips providers.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18235)
(cherry picked from commit 0b3d2594d060dc19269d3740ad672f065ec6398a)
Diffstat (limited to 'doc/man3/EVP_PKEY_check.pod')
| -rw-r--r-- | doc/man3/EVP_PKEY_check.pod | 12 |
1 files changed, 12 insertions, 0 deletions
diff --git a/doc/man3/EVP_PKEY_check.pod b/doc/man3/EVP_PKEY_check.pod index 1ba656fd22..485d350529 100644 --- a/doc/man3/EVP_PKEY_check.pod +++ b/doc/man3/EVP_PKEY_check.pod @@ -48,6 +48,13 @@ EVP_PKEY_check() is an alias for the EVP_PKEY_pairwise_check() function. =head1 NOTES +Key validation used by the OpenSSL FIPS provider complies with the rules +within SP800-56A and SP800-56B. For backwards compatibility reasons the OpenSSL +default provider may use checks that are not as restrictive for certain key types. +For further information see L<EVP_PKEY-DSA(7)/DSA key validation>, +L<EVP_PKEY-DH(7)/DH key validation>, L<EVP_PKEY-EC(7)/EC key validation> and +L<EVP_PKEY-RSA(7)/RSA key validation>. + Refer to SP800-56A and SP800-56B for rules relating to when these functions should be called during key establishment. It is not necessary to call these functions after locally calling an approved key @@ -63,6 +70,11 @@ They return -2 if the operation is not supported for the specific algorithm. L<EVP_PKEY_CTX_new(3)>, L<EVP_PKEY_fromdata(3)>, +L<EVP_PKEY-DH(7)>, +L<EVP_PKEY-FFC(7)>, +L<EVP_PKEY-DSA(7)>, +L<EVP_PKEY-EC(7)>, +L<EVP_PKEY-RSA(7)>, =head1 HISTORY |