diff options
| author | slontis <shane.lontis@oracle.com> | 2022-05-04 12:04:43 +1000 |
|---|---|---|
| committer | Pauli <pauli@openssl.org> | 2022-05-09 10:08:07 +1000 |
| commit | b40c753b6e09eb6df06c161cdf771c704898b050 (patch) | |
| tree | 86165ecf2d5a9c538957e9b06f4df9e8189c3458 /doc/man7/EVP_PKEY-RSA.pod | |
| parent | fcbd8be18229ef7aa32369d2e9c747348f7d6490 (diff) | |
Add documentation for key validation that indicates the difference between the
EVP_PKEY_XXX_check() calls for the default and fips providers.
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/18235)
(cherry picked from commit 0b3d2594d060dc19269d3740ad672f065ec6398a)
Diffstat (limited to 'doc/man7/EVP_PKEY-RSA.pod')
| -rw-r--r-- | doc/man7/EVP_PKEY-RSA.pod | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/doc/man7/EVP_PKEY-RSA.pod b/doc/man7/EVP_PKEY-RSA.pod index 784d5a39b8..51103b8b29 100644 --- a/doc/man7/EVP_PKEY-RSA.pod +++ b/doc/man7/EVP_PKEY-RSA.pod @@ -179,6 +179,26 @@ The auxiliary probable primes. =back +=head2 RSA key validation + +For RSA keys, L<EVP_PKEY_param_check(3)> and L<EVP_PKEY_param_check_quick(3)> +both return 1 unconditionally. + +For RSA keys, L<EVP_PKEY_public_check(3)> conforms to the SP800-56Br1 I<public key +check> when the OpenSSL FIPS provider is used. The OpenSSL default provider +performs similiar tests but relaxes the keysize restrictions for backwards +compatibility. + +For RSA keys, L<EVP_PKEY_public_check_quick(3)> is the same as +L<EVP_PKEY_public_check(3)>. + +For RSA keys, L<EVP_PKEY_private_check(3)> conforms to the SP800-56Br1 +I<private key test>. + +For RSA keys, L<EVP_PKEY_pairwise_check(3)> conforms to the +SP800-56Br1 I<KeyPair Validation check> for the OpenSSL FIPS provider. The +OpenSSL default provider allows testing of the validity of multi-primes. + =head1 CONFORMING TO =over 4 |