diff options
| author | Shane Lontis <shane.lontis@oracle.com> | 2020-09-19 18:08:46 +1000 |
|---|---|---|
| committer | Shane Lontis <shane.lontis@oracle.com> | 2020-09-19 18:08:46 +1000 |
| commit | 80f4fd18f72c0d3faae864da6979b83acc4f89a2 (patch) | |
| tree | 0882ccf31406c4f9948674913f51e3c46efff64d /util | |
| parent | 28833f1465a2dd197f8df80a69095d1913e6e85e (diff) | |
Add KEM (Key encapsulation mechanism) support to providers
SP800-56Br2 requires support for the RSA primitives for RSASVE generate and recover.
As these are simple KEM operations another operation type has been added that can support future extensions.
Added public functions EVP_PKEY_encapsulate_init(), EVP_PKEY_encapsulate(), EVP_PKEY_decapsulate_init() and EVP_PKEY_decapsulate()
Added EVP_KEM_* functions.
Added OSSL_FUNC_kem_* dispatch functions
Added EVP_PKEY_CTX_set_kem_op() so that different types of KEM can be added in the future. This value must currently be set to
"RSASVE" after EVP_PKEY_encapsulate_init() & EVP_PKEY_decapsulate_init() as there is no default value.
This allows the existing RSA key types, keymanagers, and encoders to be used with the encapsulation operations.
The design of the public API's resulted from contributions from @romen & @levitte.
Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/12750)
Diffstat (limited to 'util')
| -rw-r--r-- | util/libcrypto.num | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/util/libcrypto.num b/util/libcrypto.num index e9f6e56690..0be0ada89d 100644 --- a/util/libcrypto.num +++ b/util/libcrypto.num @@ -5283,3 +5283,16 @@ EVP_PKEY_CTX_set_ec_param_enc ? 3_0_0 EXIST::FUNCTION:EC EVP_PKEY_get0_first_alg_name ? 3_0_0 EXIST::FUNCTION: EVP_KEYMGMT_get0_first_name ? 3_0_0 EXIST::FUNCTION: EC_KEY_decoded_from_explicit_params ? 3_0_0 EXIST::FUNCTION:EC +EVP_KEM_free ? 3_0_0 EXIST::FUNCTION: +EVP_KEM_up_ref ? 3_0_0 EXIST::FUNCTION: +EVP_KEM_provider ? 3_0_0 EXIST::FUNCTION: +EVP_KEM_fetch ? 3_0_0 EXIST::FUNCTION: +EVP_KEM_is_a ? 3_0_0 EXIST::FUNCTION: +EVP_KEM_number ? 3_0_0 EXIST::FUNCTION: +EVP_KEM_do_all_provided ? 3_0_0 EXIST::FUNCTION: +EVP_KEM_names_do_all ? 3_0_0 EXIST::FUNCTION: +EVP_PKEY_encapsulate_init ? 3_0_0 EXIST::FUNCTION: +EVP_PKEY_encapsulate ? 3_0_0 EXIST::FUNCTION: +EVP_PKEY_decapsulate_init ? 3_0_0 EXIST::FUNCTION: +EVP_PKEY_decapsulate ? 3_0_0 EXIST::FUNCTION: +EVP_PKEY_CTX_set_kem_op ? 3_0_0 EXIST::FUNCTION: |