Lines Matching +full:block +full:- +full:fetch
18 .\" Set up some character translations and predefined strings. \*(-- will
24 .tr \(*W-
27 . ds -- \(*W-
29 . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
30 . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
37 . ds -- \|\(em\|
71 .\" Fear. Run. Save yourself. No user-serviceable parts.
81 . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
97 . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
98 . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
99 . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
100 . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
101 . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
102 . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
104 . \" troff and (daisy-wheel) nroff accents
123 . ds d- d\h'-1'\(ga
124 . ds D- D\h'-1'\(hy
134 .TH EVP_DIGESTSIGNINIT 3ossl "2023-09-19" "3.0.11" "OpenSSL"
141 EVP_DigestSignFinal, EVP_DigestSign \- EVP signing functions
162 The \s-1EVP\s0 signature routines are a high-level interface to digital signatures.
169 implement that digest directly itself or it may (optionally) choose to fetch it
172 the properties to be used during the fetch. Finally, the passed parameters
173 \&\fIparams\fR, if not \s-1NULL,\s0 are set on the context before returning.
175 The \fIpkey\fR algorithm is used to fetch a \fB\s-1EVP_SIGNATURE\s0\fR method implicitly, to
176 be used for the actual signing. See \*(L"Implicit fetch\*(R" in \fBprovider\fR\|(7) for
179 The OpenSSL default and legacy providers support fetching digests and can fetch
180 those digests from any available provider. The OpenSSL \s-1FIPS\s0 provider also
181 supports fetching digests but will only fetch digests that are themselves
182 implemented inside the \s-1FIPS\s0 provider.
185 \&\fIpctx\fR is not \s-1NULL,\s0 the \s-1EVP_PKEY_CTX\s0 of the signing operation will be written
187 existing value in \fI*pctx\fR is overwritten. The \s-1EVP_PKEY_CTX\s0 value returned must
189 \&\s-1EVP_PKEY_CTX\s0 value before being passed to \fBEVP_DigestSignInit_ex()\fR
190 (which means the \s-1EVP_PKEY_CTX\s0 is created inside \fBEVP_DigestSignInit_ex()\fR
191 and it will be freed automatically when the \s-1EVP_MD_CTX\s0 is freed). If the
192 \&\s-1EVP_PKEY_CTX\s0 to be used is created by EVP_DigestSignInit_ex then it
193 will use the \fB\s-1OSSL_LIB_CTX\s0\fR specified in \fIlibctx\fR and the property query string
196 The digest \fImdname\fR may be \s-1NULL\s0 if the signing algorithm supports it. The
197 \&\fIprops\fR argument can always be \s-1NULL.\s0
199 No \fB\s-1EVP_PKEY_CTX\s0\fR will be created by \fBEVP_DigestSignInit_ex()\fR if the
201 See also \s-1\fBSM2\s0\fR\|(7).
203 Only \s-1EVP_PKEY\s0 types that support signing can be used with these functions. This
204 includes \s-1MAC\s0 algorithms where the \s-1MAC\s0 generation is considered as a form of
205 \&\*(L"signing\*(R". Built-in \s-1EVP_PKEY\s0 types supported by these functions are \s-1CMAC,\s0
206 Poly1305, \s-1DSA, ECDSA, HMAC, RSA,\s0 SipHash, Ed25519 and Ed448.
209 .IP "\s-1DSA\s0" 4
211 Supports \s-1SHA1, SHA224, SHA256, SHA384\s0 and \s-1SHA512\s0
212 .IP "\s-1ECDSA\s0" 4
214 Supports \s-1SHA1, SHA224, SHA256, SHA384, SHA512\s0 and \s-1SM3\s0
215 .IP "\s-1RSA\s0 with no padding" 4
217 Supports no digests (the digest \fItype\fR must be \s-1NULL\s0)
218 .IP "\s-1RSA\s0 with X931 padding" 4
220 Supports \s-1SHA1, SHA256, SHA384\s0 and \s-1SHA512\s0
221 .IP "All other \s-1RSA\s0 padding types" 4
223 Support \s-1SHA1, SHA224, SHA256, SHA384, SHA512, MD5, MD5_SHA1, MD2, MD4, MDC2,
224 SHA3\-224, SHA3\-256, SHA3\-384, SHA3\-512\s0
227 Support no digests (the digest \fItype\fR must be \s-1NULL\s0)
228 .IP "\s-1HMAC\s0" 4
231 .IP "\s-1CMAC,\s0 Poly1305 and SipHash" 4
235 If RSA-PSS is used and restrictions apply then the digest must match.
239 digest \fItype\fR, and \fIprops\fR will be \s-1NULL.\s0 Where supplied the \s-1ENGINE\s0 \fIe\fR wi…
240 be used for the signing and digest algorithm implementations. \fIe\fR may be \s-1NULL.\s0
246 Unless \fIsig\fR is \s-1NULL\s0 \fBEVP_DigestSignFinal()\fR signs the data in \fIctx\fR
249 the \fIsiglen\fR parameter. If \fIsig\fR is not \s-1NULL\s0 then before the call the
257 called again without reinitialising the \s-1EVP_MD_CTX.\s0 If \fIsig\fR is \s-1NULL\s0 before the
259 buffer. If \fIsig\fR is non-NULL before the call then \fIsiglen\fR should contain the
269 The \fB\s-1EVP\s0\fR interface to digital signatures should almost always be used in
270 preference to the low-level interfaces. This is because the code then becomes
273 \&\fBEVP_DigestSign()\fR is a one shot operation which signs a single block of data
280 needed to be used to sign using \s-1SHA1\s0 and \s-1DSA.\s0 This is no longer necessary and
284 If the automatic seeding or reseeding of the OpenSSL \s-1CSPRNG\s0 fails due to
285 external circumstances (see \s-1\fBRAND\s0\fR\|(7)), the operation will fail.
293 preserved if the \fIpkey\fR parameter is \s-1NULL.\s0 The call then just resets the state
308 \&\fBevp\fR\|(7), \s-1\fBHMAC\s0\fR\|(3), \s-1\fBMD2\s0\fR\|(3),
309 \&\s-1\fBMD5\s0\fR\|(3), \s-1\fBMDC2\s0\fR\|(3), \s-1\fBRIPEMD160\s0\fR\|(3),
310 \&\s-1\fBSHA1\s0\fR\|(3), \fBopenssl\-dgst\fR\|(1),
311 \&\s-1\fBRAND\s0\fR\|(7)
322 Copyright 2006\-2023 The OpenSSL Project Authors. All Rights Reserved.
326 in the file \s-1LICENSE\s0 in the source distribution or at