Lines Matching full:rsa

5 EVP_PKEY-RSA, EVP_KEYMGMT-RSA, RSA
6 - EVP_PKEY RSA keytype and algorithm support
10 The B<RSA> keytype is implemented in OpenSSL's default and FIPS providers.
11 That implementation supports the basic RSA keys, containing the modulus I<n>,
16 =head2 Common RSA parameters
19 L<provider-keymgmt(7)/Common parameters>), the B<RSA> keytype implementation
26 The RSA modulus "n" value.
30 The RSA public exponent "e" value.
37 The RSA private exponent "d" value.
39 =item "rsa-factor1" (B<OSSL_PKEY_PARAM_RSA_FACTOR1>) <unsigned integer>
41 =item "rsa-factor2" (B<OSSL_PKEY_PARAM_RSA_FACTOR2>) <unsigned integer>
43 =item "rsa-factor3" (B<OSSL_PKEY_PARAM_RSA_FACTOR3>) <unsigned integer>
45 =item "rsa-factor4" (B<OSSL_PKEY_PARAM_RSA_FACTOR4>) <unsigned integer>
47 =item "rsa-factor5" (B<OSSL_PKEY_PARAM_RSA_FACTOR5>) <unsigned integer>
49 =item "rsa-factor6" (B<OSSL_PKEY_PARAM_RSA_FACTOR6>) <unsigned integer>
51 =item "rsa-factor7" (B<OSSL_PKEY_PARAM_RSA_FACTOR7>) <unsigned integer>
53 =item "rsa-factor8" (B<OSSL_PKEY_PARAM_RSA_FACTOR8>) <unsigned integer>
55 =item "rsa-factor9" (B<OSSL_PKEY_PARAM_RSA_FACTOR9>) <unsigned integer>
57 =item "rsa-factor10" (B<OSSL_PKEY_PARAM_RSA_FACTOR10>) <unsigned integer>
59 RSA prime factors. The factors are known as "p", "q" and "r_i" in RFC8017.
62 =item "rsa-exponent1" (B<OSSL_PKEY_PARAM_RSA_EXPONENT1>) <unsigned integer>
64 =item "rsa-exponent2" (B<OSSL_PKEY_PARAM_RSA_EXPONENT2>) <unsigned integer>
66 =item "rsa-exponent3" (B<OSSL_PKEY_PARAM_RSA_EXPONENT3>) <unsigned integer>
68 =item "rsa-exponent4" (B<OSSL_PKEY_PARAM_RSA_EXPONENT4>) <unsigned integer>
70 =item "rsa-exponent5" (B<OSSL_PKEY_PARAM_RSA_EXPONENT5>) <unsigned integer>
72 =item "rsa-exponent6" (B<OSSL_PKEY_PARAM_RSA_EXPONENT6>) <unsigned integer>
74 =item "rsa-exponent7" (B<OSSL_PKEY_PARAM_RSA_EXPONENT7>) <unsigned integer>
76 =item "rsa-exponent8" (B<OSSL_PKEY_PARAM_RSA_EXPONENT8>) <unsigned integer>
78 =item "rsa-exponent9" (B<OSSL_PKEY_PARAM_RSA_EXPONENT9>) <unsigned integer>
80 =item "rsa-exponent10" (B<OSSL_PKEY_PARAM_RSA_EXPONENT10>) <unsigned integer>
82 RSA CRT (Chinese Remainder Theorem) exponents. The exponents are known
86 =item "rsa-coefficient1" (B<OSSL_PKEY_PARAM_RSA_COEFFICIENT1>) <unsigned integer>
88 =item "rsa-coefficient2" (B<OSSL_PKEY_PARAM_RSA_COEFFICIENT2>) <unsigned integer>
90 =item "rsa-coefficient3" (B<OSSL_PKEY_PARAM_RSA_COEFFICIENT3>) <unsigned integer>
92 =item "rsa-coefficient4" (B<OSSL_PKEY_PARAM_RSA_COEFFICIENT4>) <unsigned integer>
94 =item "rsa-coefficient5" (B<OSSL_PKEY_PARAM_RSA_COEFFICIENT5>) <unsigned integer>
96 =item "rsa-coefficient6" (B<OSSL_PKEY_PARAM_RSA_COEFFICIENT6>) <unsigned integer>
98 =item "rsa-coefficient7" (B<OSSL_PKEY_PARAM_RSA_COEFFICIENT7>) <unsigned integer>
100 =item "rsa-coefficient8" (B<OSSL_PKEY_PARAM_RSA_COEFFICIENT8>) <unsigned integer>
102 =item "rsa-coefficient9" (B<OSSL_PKEY_PARAM_RSA_COEFFICIENT9>) <unsigned integer>
104 RSA CRT (Chinese Remainder Theorem) coefficients. The coefficients are known as
110 =head2 RSA key generation parameters
112 When generating RSA keys, the following key generation parameters may be used.
118 The value should be the cryptographic length for the B<RSA> cryptosystem, in
123 The value should be the number of primes for the generated B<RSA> key.  The
131 The RSA "e" value. The value may be any odd number greater than or equal to
137 =head2 RSA key generation parameters for FIPS module testing
139 When generating RSA keys, the following additional key generation parameters may
141 RSA keys for a production environment.
165 =head2 RSA key parameters for FIPS module testing
168 specified in L</"RSA key generation parameters for FIPS module testing"> are set.
185 =head2 RSA key validation
187 For RSA keys, L<EVP_PKEY_param_check(3)> and L<EVP_PKEY_param_check_quick(3)>
190 For RSA keys, L<EVP_PKEY_public_check(3)> conforms to the SP800-56Br1 I<public key
195 For RSA keys, L<EVP_PKEY_public_check_quick(3)> is the same as
198 For RSA keys, L<EVP_PKEY_private_check(3)> conforms to the SP800-56Br1
201 For RSA keys, L<EVP_PKEY_pairwise_check(3)> conforms to the
214 =item RFC 8017, excluding RSA-PSS and RSA-OAEP
216 =for comment RSA-PSS, and probably also RSA-OAEP, need separate keytypes,
217 and will be described in separate pages for those RSA keytypes.
226         EVP_PKEY_CTX_new_from_name(NULL, "RSA", NULL);
228 An B<RSA> key can be generated simply like this:
236         EVP_PKEY_CTX_new_from_name(NULL, "RSA", NULL);
242 An B<RSA> key can be generated with key generation parameters:
248     EVP_PKEY_CTX *pctx = EVP_PKEY_CTX_new_from_name(NULL, "RSA", NULL);