diff options
| author | Pauli <pauli@openssl.org> | 2021-09-01 09:52:03 +1000 |
|---|---|---|
| committer | Pauli <pauli@openssl.org> | 2021-09-02 10:09:15 +1000 |
| commit | 9e72d1a3145a0585b96fa9b4e9ab31ce35a43aba (patch) | |
| tree | 279c7e41e0a86808a6e59e7273688dad0a9cef65 /doc | |
| parent | 1f8e36720fff9bdc9f08fe24a38cc91b1b78ddb0 (diff) | |
doc: document the rsa_oaep_md: pkeyopt
This was missing but essential for using non-SHA1 digests with OAEP.
Fixes #15998
Manual backport of #16410
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/16488)
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/man1/pkeyutl.pod | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/doc/man1/pkeyutl.pod b/doc/man1/pkeyutl.pod index 3b350efadd..f6fd48d5b5 100644 --- a/doc/man1/pkeyutl.pod +++ b/doc/man1/pkeyutl.pod @@ -246,6 +246,11 @@ B<PSS> block structure. For PSS and OAEP padding sets the MGF1 digest. If the MGF1 digest is not explicitly set in PSS mode then the signing digest is used. +=item B<rsa_oaep_md:>I<digest> + +Sets the digest used for the OAEP hash function. If not explicitly set then +SHA1 is used. + =back =head1 RSA-PSS ALGORITHM @@ -319,6 +324,11 @@ seed consisting of the single byte 0xFF: openssl pkeyutl -kdf TLS1-PRF -kdflen 48 -pkeyopt md:SHA256 \ -pkeyopt hexsecret:ff -pkeyopt hexseed:ff -hexdump +Decrypt some data using a private key with OAEP padding using SHA256: + + openssl pkeyutl -decrypt -in file -inkey key.pem -out secret \ + -pkeyopt rsa_padding_mode:oaep -pkeyopt rsa_oaep_md:sha256 + =head1 SEE ALSO L<genpkey(1)>, L<pkey(1)>, L<rsautl(1)> |