diff options
Diffstat (limited to 'doc/man7/EVP_PKEY-RSA.pod')
| -rw-r--r-- | doc/man7/EVP_PKEY-RSA.pod | 20 |
1 files changed, 20 insertions, 0 deletions
diff --git a/doc/man7/EVP_PKEY-RSA.pod b/doc/man7/EVP_PKEY-RSA.pod index 784d5a39b8..51103b8b29 100644 --- a/doc/man7/EVP_PKEY-RSA.pod +++ b/doc/man7/EVP_PKEY-RSA.pod @@ -179,6 +179,26 @@ The auxiliary probable primes. =back +=head2 RSA key validation + +For RSA keys, L<EVP_PKEY_param_check(3)> and L<EVP_PKEY_param_check_quick(3)> +both return 1 unconditionally. + +For RSA keys, L<EVP_PKEY_public_check(3)> conforms to the SP800-56Br1 I<public key +check> when the OpenSSL FIPS provider is used. The OpenSSL default provider +performs similiar tests but relaxes the keysize restrictions for backwards +compatibility. + +For RSA keys, L<EVP_PKEY_public_check_quick(3)> is the same as +L<EVP_PKEY_public_check(3)>. + +For RSA keys, L<EVP_PKEY_private_check(3)> conforms to the SP800-56Br1 +I<private key test>. + +For RSA keys, L<EVP_PKEY_pairwise_check(3)> conforms to the +SP800-56Br1 I<KeyPair Validation check> for the OpenSSL FIPS provider. The +OpenSSL default provider allows testing of the validity of multi-primes. + =head1 CONFORMING TO =over 4 |