evp.h 66 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536
  1. /* crypto/evp/evp.h */
  2. /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
  3. * All rights reserved.
  4. *
  5. * This package is an SSL implementation written
  6. * by Eric Young (eay@cryptsoft.com).
  7. * The implementation was written so as to conform with Netscapes SSL.
  8. *
  9. * This library is free for commercial and non-commercial use as long as
  10. * the following conditions are aheared to. The following conditions
  11. * apply to all code found in this distribution, be it the RC4, RSA,
  12. * lhash, DES, etc., code; not just the SSL code. The SSL documentation
  13. * included with this distribution is covered by the same copyright terms
  14. * except that the holder is Tim Hudson (tjh@cryptsoft.com).
  15. *
  16. * Copyright remains Eric Young's, and as such any Copyright notices in
  17. * the code are not to be removed.
  18. * If this package is used in a product, Eric Young should be given attribution
  19. * as the author of the parts of the library used.
  20. * This can be in the form of a textual message at program startup or
  21. * in documentation (online or textual) provided with the package.
  22. *
  23. * Redistribution and use in source and binary forms, with or without
  24. * modification, are permitted provided that the following conditions
  25. * are met:
  26. * 1. Redistributions of source code must retain the copyright
  27. * notice, this list of conditions and the following disclaimer.
  28. * 2. Redistributions in binary form must reproduce the above copyright
  29. * notice, this list of conditions and the following disclaimer in the
  30. * documentation and/or other materials provided with the distribution.
  31. * 3. All advertising materials mentioning features or use of this software
  32. * must display the following acknowledgement:
  33. * "This product includes cryptographic software written by
  34. * Eric Young (eay@cryptsoft.com)"
  35. * The word 'cryptographic' can be left out if the rouines from the library
  36. * being used are not cryptographic related :-).
  37. * 4. If you include any Windows specific code (or a derivative thereof) from
  38. * the apps directory (application code) you must include an acknowledgement:
  39. * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
  40. *
  41. * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
  42. * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  43. * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  44. * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  45. * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  46. * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  47. * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  48. * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  49. * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  50. * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  51. * SUCH DAMAGE.
  52. *
  53. * The licence and distribution terms for any publically available version or
  54. * derivative of this code cannot be changed. i.e. this code cannot simply be
  55. * copied and put under another distribution licence
  56. * [including the GNU Public Licence.]
  57. */
  58. #ifndef HEADER_ENVELOPE_H
  59. # define HEADER_ENVELOPE_H
  60. # ifdef OPENSSL_ALGORITHM_DEFINES
  61. # include <openssl/opensslconf.h>
  62. # else
  63. # define OPENSSL_ALGORITHM_DEFINES
  64. # include <openssl/opensslconf.h>
  65. # undef OPENSSL_ALGORITHM_DEFINES
  66. # endif
  67. # include <openssl/ossl_typ.h>
  68. # include <openssl/symhacks.h>
  69. # ifndef OPENSSL_NO_BIO
  70. # include <openssl/bio.h>
  71. # endif
  72. /*-
  73. #define EVP_RC2_KEY_SIZE 16
  74. #define EVP_RC4_KEY_SIZE 16
  75. #define EVP_BLOWFISH_KEY_SIZE 16
  76. #define EVP_CAST5_KEY_SIZE 16
  77. #define EVP_RC5_32_12_16_KEY_SIZE 16
  78. */
  79. # define EVP_MAX_MD_SIZE 64/* longest known is SHA512 */
  80. # define EVP_MAX_KEY_LENGTH 64
  81. # define EVP_MAX_IV_LENGTH 16
  82. # define EVP_MAX_BLOCK_LENGTH 32
  83. # define PKCS5_SALT_LEN 8
  84. /* Default PKCS#5 iteration count */
  85. # define PKCS5_DEFAULT_ITER 2048
  86. # include <openssl/objects.h>
  87. # define EVP_PK_RSA 0x0001
  88. # define EVP_PK_DSA 0x0002
  89. # define EVP_PK_DH 0x0004
  90. # define EVP_PK_EC 0x0008
  91. # define EVP_PKT_SIGN 0x0010
  92. # define EVP_PKT_ENC 0x0020
  93. # define EVP_PKT_EXCH 0x0040
  94. # define EVP_PKS_RSA 0x0100
  95. # define EVP_PKS_DSA 0x0200
  96. # define EVP_PKS_EC 0x0400
  97. # define EVP_PKEY_NONE NID_undef
  98. # define EVP_PKEY_RSA NID_rsaEncryption
  99. # define EVP_PKEY_RSA2 NID_rsa
  100. # define EVP_PKEY_DSA NID_dsa
  101. # define EVP_PKEY_DSA1 NID_dsa_2
  102. # define EVP_PKEY_DSA2 NID_dsaWithSHA
  103. # define EVP_PKEY_DSA3 NID_dsaWithSHA1
  104. # define EVP_PKEY_DSA4 NID_dsaWithSHA1_2
  105. # define EVP_PKEY_DH NID_dhKeyAgreement
  106. # define EVP_PKEY_DHX NID_dhpublicnumber
  107. # define EVP_PKEY_EC NID_X9_62_id_ecPublicKey
  108. # define EVP_PKEY_HMAC NID_hmac
  109. # define EVP_PKEY_CMAC NID_cmac
  110. #ifdef __cplusplus
  111. extern "C" {
  112. #endif
  113. /*
  114. * Type needs to be a bit field Sub-type needs to be for variations on the
  115. * method, as in, can it do arbitrary encryption....
  116. */
  117. struct evp_pkey_st {
  118. int type;
  119. int save_type;
  120. int references;
  121. const EVP_PKEY_ASN1_METHOD *ameth;
  122. ENGINE *engine;
  123. union {
  124. char *ptr;
  125. # ifndef OPENSSL_NO_RSA
  126. struct rsa_st *rsa; /* RSA */
  127. # endif
  128. # ifndef OPENSSL_NO_DSA
  129. struct dsa_st *dsa; /* DSA */
  130. # endif
  131. # ifndef OPENSSL_NO_DH
  132. struct dh_st *dh; /* DH */
  133. # endif
  134. # ifndef OPENSSL_NO_EC
  135. struct ec_key_st *ec; /* ECC */
  136. # endif
  137. } pkey;
  138. int save_parameters;
  139. STACK_OF(X509_ATTRIBUTE) *attributes; /* [ 0 ] */
  140. } /* EVP_PKEY */ ;
  141. # define EVP_PKEY_MO_SIGN 0x0001
  142. # define EVP_PKEY_MO_VERIFY 0x0002
  143. # define EVP_PKEY_MO_ENCRYPT 0x0004
  144. # define EVP_PKEY_MO_DECRYPT 0x0008
  145. # ifndef EVP_MD
  146. struct env_md_st {
  147. int type;
  148. int pkey_type;
  149. int md_size;
  150. unsigned long flags;
  151. int (*init) (EVP_MD_CTX *ctx);
  152. int (*update) (EVP_MD_CTX *ctx, const void *data, size_t count);
  153. int (*final) (EVP_MD_CTX *ctx, unsigned char *md);
  154. int (*copy) (EVP_MD_CTX *to, const EVP_MD_CTX *from);
  155. int (*cleanup) (EVP_MD_CTX *ctx);
  156. /* FIXME: prototype these some day */
  157. int (*sign) (int type, const unsigned char *m, unsigned int m_length,
  158. unsigned char *sigret, unsigned int *siglen, void *key);
  159. int (*verify) (int type, const unsigned char *m, unsigned int m_length,
  160. const unsigned char *sigbuf, unsigned int siglen,
  161. void *key);
  162. int required_pkey_type[5]; /* EVP_PKEY_xxx */
  163. int block_size;
  164. int ctx_size; /* how big does the ctx->md_data need to be */
  165. /* control function */
  166. int (*md_ctrl) (EVP_MD_CTX *ctx, int cmd, int p1, void *p2);
  167. } /* EVP_MD */ ;
  168. typedef int evp_sign_method(int type, const unsigned char *m,
  169. unsigned int m_length, unsigned char *sigret,
  170. unsigned int *siglen, void *key);
  171. typedef int evp_verify_method(int type, const unsigned char *m,
  172. unsigned int m_length,
  173. const unsigned char *sigbuf,
  174. unsigned int siglen, void *key);
  175. /* digest can only handle a single block */
  176. # define EVP_MD_FLAG_ONESHOT 0x0001
  177. /*
  178. * digest is a "clone" digest used
  179. * which is a copy of an existing
  180. * one for a specific public key type.
  181. * EVP_dss1() etc
  182. */
  183. # define EVP_MD_FLAG_PKEY_DIGEST 0x0002
  184. /* Digest uses EVP_PKEY_METHOD for signing instead of MD specific signing */
  185. # define EVP_MD_FLAG_PKEY_METHOD_SIGNATURE 0x0004
  186. /* DigestAlgorithmIdentifier flags... */
  187. # define EVP_MD_FLAG_DIGALGID_MASK 0x0018
  188. /* NULL or absent parameter accepted. Use NULL */
  189. # define EVP_MD_FLAG_DIGALGID_NULL 0x0000
  190. /* NULL or absent parameter accepted. Use NULL for PKCS#1 otherwise absent */
  191. # define EVP_MD_FLAG_DIGALGID_ABSENT 0x0008
  192. /* Custom handling via ctrl */
  193. # define EVP_MD_FLAG_DIGALGID_CUSTOM 0x0018
  194. /* Note if suitable for use in FIPS mode */
  195. # define EVP_MD_FLAG_FIPS 0x0400
  196. /* Digest ctrls */
  197. # define EVP_MD_CTRL_DIGALGID 0x1
  198. # define EVP_MD_CTRL_MICALG 0x2
  199. /* Minimum Algorithm specific ctrl value */
  200. # define EVP_MD_CTRL_ALG_CTRL 0x1000
  201. # define EVP_PKEY_NULL_method NULL,NULL,{0,0,0,0}
  202. # ifndef OPENSSL_NO_DSA
  203. # define EVP_PKEY_DSA_method (evp_sign_method *)DSA_sign, \
  204. (evp_verify_method *)DSA_verify, \
  205. {EVP_PKEY_DSA,EVP_PKEY_DSA2,EVP_PKEY_DSA3, \
  206. EVP_PKEY_DSA4,0}
  207. # else
  208. # define EVP_PKEY_DSA_method EVP_PKEY_NULL_method
  209. # endif
  210. # ifndef OPENSSL_NO_ECDSA
  211. # define EVP_PKEY_ECDSA_method (evp_sign_method *)ECDSA_sign, \
  212. (evp_verify_method *)ECDSA_verify, \
  213. {EVP_PKEY_EC,0,0,0}
  214. # else
  215. # define EVP_PKEY_ECDSA_method EVP_PKEY_NULL_method
  216. # endif
  217. # ifndef OPENSSL_NO_RSA
  218. # define EVP_PKEY_RSA_method (evp_sign_method *)RSA_sign, \
  219. (evp_verify_method *)RSA_verify, \
  220. {EVP_PKEY_RSA,EVP_PKEY_RSA2,0,0}
  221. # define EVP_PKEY_RSA_ASN1_OCTET_STRING_method \
  222. (evp_sign_method *)RSA_sign_ASN1_OCTET_STRING, \
  223. (evp_verify_method *)RSA_verify_ASN1_OCTET_STRING, \
  224. {EVP_PKEY_RSA,EVP_PKEY_RSA2,0,0}
  225. # else
  226. # define EVP_PKEY_RSA_method EVP_PKEY_NULL_method
  227. # define EVP_PKEY_RSA_ASN1_OCTET_STRING_method EVP_PKEY_NULL_method
  228. # endif
  229. # endif /* !EVP_MD */
  230. struct env_md_ctx_st {
  231. const EVP_MD *digest;
  232. ENGINE *engine; /* functional reference if 'digest' is
  233. * ENGINE-provided */
  234. unsigned long flags;
  235. void *md_data;
  236. /* Public key context for sign/verify */
  237. EVP_PKEY_CTX *pctx;
  238. /* Update function: usually copied from EVP_MD */
  239. int (*update) (EVP_MD_CTX *ctx, const void *data, size_t count);
  240. } /* EVP_MD_CTX */ ;
  241. /* values for EVP_MD_CTX flags */
  242. # define EVP_MD_CTX_FLAG_ONESHOT 0x0001/* digest update will be
  243. * called once only */
  244. # define EVP_MD_CTX_FLAG_CLEANED 0x0002/* context has already been
  245. * cleaned */
  246. # define EVP_MD_CTX_FLAG_REUSE 0x0004/* Don't free up ctx->md_data
  247. * in EVP_MD_CTX_cleanup */
  248. /*
  249. * FIPS and pad options are ignored in 1.0.0, definitions are here so we
  250. * don't accidentally reuse the values for other purposes.
  251. */
  252. # define EVP_MD_CTX_FLAG_NON_FIPS_ALLOW 0x0008/* Allow use of non FIPS
  253. * digest in FIPS mode */
  254. /*
  255. * The following PAD options are also currently ignored in 1.0.0, digest
  256. * parameters are handled through EVP_DigestSign*() and EVP_DigestVerify*()
  257. * instead.
  258. */
  259. # define EVP_MD_CTX_FLAG_PAD_MASK 0xF0/* RSA mode to use */
  260. # define EVP_MD_CTX_FLAG_PAD_PKCS1 0x00/* PKCS#1 v1.5 mode */
  261. # define EVP_MD_CTX_FLAG_PAD_X931 0x10/* X9.31 mode */
  262. # define EVP_MD_CTX_FLAG_PAD_PSS 0x20/* PSS mode */
  263. # define EVP_MD_CTX_FLAG_NO_INIT 0x0100/* Don't initialize md_data */
  264. struct evp_cipher_st {
  265. int nid;
  266. int block_size;
  267. /* Default value for variable length ciphers */
  268. int key_len;
  269. int iv_len;
  270. /* Various flags */
  271. unsigned long flags;
  272. /* init key */
  273. int (*init) (EVP_CIPHER_CTX *ctx, const unsigned char *key,
  274. const unsigned char *iv, int enc);
  275. /* encrypt/decrypt data */
  276. int (*do_cipher) (EVP_CIPHER_CTX *ctx, unsigned char *out,
  277. const unsigned char *in, size_t inl);
  278. /* cleanup ctx */
  279. int (*cleanup) (EVP_CIPHER_CTX *);
  280. /* how big ctx->cipher_data needs to be */
  281. int ctx_size;
  282. /* Populate a ASN1_TYPE with parameters */
  283. int (*set_asn1_parameters) (EVP_CIPHER_CTX *, ASN1_TYPE *);
  284. /* Get parameters from a ASN1_TYPE */
  285. int (*get_asn1_parameters) (EVP_CIPHER_CTX *, ASN1_TYPE *);
  286. /* Miscellaneous operations */
  287. int (*ctrl) (EVP_CIPHER_CTX *, int type, int arg, void *ptr);
  288. /* Application data */
  289. void *app_data;
  290. } /* EVP_CIPHER */ ;
  291. /* Values for cipher flags */
  292. /* Modes for ciphers */
  293. # define EVP_CIPH_STREAM_CIPHER 0x0
  294. # define EVP_CIPH_ECB_MODE 0x1
  295. # define EVP_CIPH_CBC_MODE 0x2
  296. # define EVP_CIPH_CFB_MODE 0x3
  297. # define EVP_CIPH_OFB_MODE 0x4
  298. # define EVP_CIPH_CTR_MODE 0x5
  299. # define EVP_CIPH_GCM_MODE 0x6
  300. # define EVP_CIPH_CCM_MODE 0x7
  301. # define EVP_CIPH_XTS_MODE 0x10001
  302. # define EVP_CIPH_WRAP_MODE 0x10002
  303. # define EVP_CIPH_MODE 0xF0007
  304. /* Set if variable length cipher */
  305. # define EVP_CIPH_VARIABLE_LENGTH 0x8
  306. /* Set if the iv handling should be done by the cipher itself */
  307. # define EVP_CIPH_CUSTOM_IV 0x10
  308. /* Set if the cipher's init() function should be called if key is NULL */
  309. # define EVP_CIPH_ALWAYS_CALL_INIT 0x20
  310. /* Call ctrl() to init cipher parameters */
  311. # define EVP_CIPH_CTRL_INIT 0x40
  312. /* Don't use standard key length function */
  313. # define EVP_CIPH_CUSTOM_KEY_LENGTH 0x80
  314. /* Don't use standard block padding */
  315. # define EVP_CIPH_NO_PADDING 0x100
  316. /* cipher handles random key generation */
  317. # define EVP_CIPH_RAND_KEY 0x200
  318. /* cipher has its own additional copying logic */
  319. # define EVP_CIPH_CUSTOM_COPY 0x400
  320. /* Allow use default ASN1 get/set iv */
  321. # define EVP_CIPH_FLAG_DEFAULT_ASN1 0x1000
  322. /* Buffer length in bits not bytes: CFB1 mode only */
  323. # define EVP_CIPH_FLAG_LENGTH_BITS 0x2000
  324. /* Note if suitable for use in FIPS mode */
  325. # define EVP_CIPH_FLAG_FIPS 0x4000
  326. /* Allow non FIPS cipher in FIPS mode */
  327. # define EVP_CIPH_FLAG_NON_FIPS_ALLOW 0x8000
  328. /*
  329. * Cipher handles any and all padding logic as well as finalisation.
  330. */
  331. # define EVP_CIPH_FLAG_CUSTOM_CIPHER 0x100000
  332. # define EVP_CIPH_FLAG_AEAD_CIPHER 0x200000
  333. # define EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK 0x400000
  334. /*
  335. * Cipher context flag to indicate we can handle wrap mode: if allowed in
  336. * older applications it could overflow buffers.
  337. */
  338. # define EVP_CIPHER_CTX_FLAG_WRAP_ALLOW 0x1
  339. /* ctrl() values */
  340. # define EVP_CTRL_INIT 0x0
  341. # define EVP_CTRL_SET_KEY_LENGTH 0x1
  342. # define EVP_CTRL_GET_RC2_KEY_BITS 0x2
  343. # define EVP_CTRL_SET_RC2_KEY_BITS 0x3
  344. # define EVP_CTRL_GET_RC5_ROUNDS 0x4
  345. # define EVP_CTRL_SET_RC5_ROUNDS 0x5
  346. # define EVP_CTRL_RAND_KEY 0x6
  347. # define EVP_CTRL_PBE_PRF_NID 0x7
  348. # define EVP_CTRL_COPY 0x8
  349. # define EVP_CTRL_GCM_SET_IVLEN 0x9
  350. # define EVP_CTRL_GCM_GET_TAG 0x10
  351. # define EVP_CTRL_GCM_SET_TAG 0x11
  352. # define EVP_CTRL_GCM_SET_IV_FIXED 0x12
  353. # define EVP_CTRL_GCM_IV_GEN 0x13
  354. # define EVP_CTRL_CCM_SET_IVLEN EVP_CTRL_GCM_SET_IVLEN
  355. # define EVP_CTRL_CCM_GET_TAG EVP_CTRL_GCM_GET_TAG
  356. # define EVP_CTRL_CCM_SET_TAG EVP_CTRL_GCM_SET_TAG
  357. # define EVP_CTRL_CCM_SET_L 0x14
  358. # define EVP_CTRL_CCM_SET_MSGLEN 0x15
  359. /*
  360. * AEAD cipher deduces payload length and returns number of bytes required to
  361. * store MAC and eventual padding. Subsequent call to EVP_Cipher even
  362. * appends/verifies MAC.
  363. */
  364. # define EVP_CTRL_AEAD_TLS1_AAD 0x16
  365. /* Used by composite AEAD ciphers, no-op in GCM, CCM... */
  366. # define EVP_CTRL_AEAD_SET_MAC_KEY 0x17
  367. /* Set the GCM invocation field, decrypt only */
  368. # define EVP_CTRL_GCM_SET_IV_INV 0x18
  369. # define EVP_CTRL_TLS1_1_MULTIBLOCK_AAD 0x19
  370. # define EVP_CTRL_TLS1_1_MULTIBLOCK_ENCRYPT 0x1a
  371. # define EVP_CTRL_TLS1_1_MULTIBLOCK_DECRYPT 0x1b
  372. # define EVP_CTRL_TLS1_1_MULTIBLOCK_MAX_BUFSIZE 0x1c
  373. /* RFC 5246 defines additional data to be 13 bytes in length */
  374. # define EVP_AEAD_TLS1_AAD_LEN 13
  375. typedef struct {
  376. unsigned char *out;
  377. const unsigned char *inp;
  378. size_t len;
  379. unsigned int interleave;
  380. } EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM;
  381. /* GCM TLS constants */
  382. /* Length of fixed part of IV derived from PRF */
  383. # define EVP_GCM_TLS_FIXED_IV_LEN 4
  384. /* Length of explicit part of IV part of TLS records */
  385. # define EVP_GCM_TLS_EXPLICIT_IV_LEN 8
  386. /* Length of tag for TLS */
  387. # define EVP_GCM_TLS_TAG_LEN 16
  388. typedef struct evp_cipher_info_st {
  389. const EVP_CIPHER *cipher;
  390. unsigned char iv[EVP_MAX_IV_LENGTH];
  391. } EVP_CIPHER_INFO;
  392. struct evp_cipher_ctx_st {
  393. const EVP_CIPHER *cipher;
  394. ENGINE *engine; /* functional reference if 'cipher' is
  395. * ENGINE-provided */
  396. int encrypt; /* encrypt or decrypt */
  397. int buf_len; /* number we have left */
  398. unsigned char oiv[EVP_MAX_IV_LENGTH]; /* original iv */
  399. unsigned char iv[EVP_MAX_IV_LENGTH]; /* working iv */
  400. unsigned char buf[EVP_MAX_BLOCK_LENGTH]; /* saved partial block */
  401. int num; /* used by cfb/ofb/ctr mode */
  402. void *app_data; /* application stuff */
  403. int key_len; /* May change for variable length cipher */
  404. unsigned long flags; /* Various flags */
  405. void *cipher_data; /* per EVP data */
  406. int final_used;
  407. int block_mask;
  408. unsigned char final[EVP_MAX_BLOCK_LENGTH]; /* possible final block */
  409. } /* EVP_CIPHER_CTX */ ;
  410. typedef struct evp_Encode_Ctx_st {
  411. /* number saved in a partial encode/decode */
  412. int num;
  413. /*
  414. * The length is either the output line length (in input bytes) or the
  415. * shortest input line length that is ok. Once decoding begins, the
  416. * length is adjusted up each time a longer line is decoded
  417. */
  418. int length;
  419. /* data to encode */
  420. unsigned char enc_data[80];
  421. /* number read on current line */
  422. int line_num;
  423. int expect_nl;
  424. } EVP_ENCODE_CTX;
  425. /* Password based encryption function */
  426. typedef int (EVP_PBE_KEYGEN) (EVP_CIPHER_CTX *ctx, const char *pass,
  427. int passlen, ASN1_TYPE *param,
  428. const EVP_CIPHER *cipher, const EVP_MD *md,
  429. int en_de);
  430. # ifndef OPENSSL_NO_RSA
  431. # define EVP_PKEY_assign_RSA(pkey,rsa) EVP_PKEY_assign((pkey),EVP_PKEY_RSA,\
  432. (char *)(rsa))
  433. # endif
  434. # ifndef OPENSSL_NO_DSA
  435. # define EVP_PKEY_assign_DSA(pkey,dsa) EVP_PKEY_assign((pkey),EVP_PKEY_DSA,\
  436. (char *)(dsa))
  437. # endif
  438. # ifndef OPENSSL_NO_DH
  439. # define EVP_PKEY_assign_DH(pkey,dh) EVP_PKEY_assign((pkey),EVP_PKEY_DH,\
  440. (char *)(dh))
  441. # endif
  442. # ifndef OPENSSL_NO_EC
  443. # define EVP_PKEY_assign_EC_KEY(pkey,eckey) EVP_PKEY_assign((pkey),EVP_PKEY_EC,\
  444. (char *)(eckey))
  445. # endif
  446. /* Add some extra combinations */
  447. # define EVP_get_digestbynid(a) EVP_get_digestbyname(OBJ_nid2sn(a))
  448. # define EVP_get_digestbyobj(a) EVP_get_digestbynid(OBJ_obj2nid(a))
  449. # define EVP_get_cipherbynid(a) EVP_get_cipherbyname(OBJ_nid2sn(a))
  450. # define EVP_get_cipherbyobj(a) EVP_get_cipherbynid(OBJ_obj2nid(a))
  451. int EVP_MD_type(const EVP_MD *md);
  452. # define EVP_MD_nid(e) EVP_MD_type(e)
  453. # define EVP_MD_name(e) OBJ_nid2sn(EVP_MD_nid(e))
  454. int EVP_MD_pkey_type(const EVP_MD *md);
  455. int EVP_MD_size(const EVP_MD *md);
  456. int EVP_MD_block_size(const EVP_MD *md);
  457. unsigned long EVP_MD_flags(const EVP_MD *md);
  458. const EVP_MD *EVP_MD_CTX_md(const EVP_MD_CTX *ctx);
  459. # define EVP_MD_CTX_size(e) EVP_MD_size(EVP_MD_CTX_md(e))
  460. # define EVP_MD_CTX_block_size(e) EVP_MD_block_size(EVP_MD_CTX_md(e))
  461. # define EVP_MD_CTX_type(e) EVP_MD_type(EVP_MD_CTX_md(e))
  462. int EVP_CIPHER_nid(const EVP_CIPHER *cipher);
  463. # define EVP_CIPHER_name(e) OBJ_nid2sn(EVP_CIPHER_nid(e))
  464. int EVP_CIPHER_block_size(const EVP_CIPHER *cipher);
  465. int EVP_CIPHER_key_length(const EVP_CIPHER *cipher);
  466. int EVP_CIPHER_iv_length(const EVP_CIPHER *cipher);
  467. unsigned long EVP_CIPHER_flags(const EVP_CIPHER *cipher);
  468. # define EVP_CIPHER_mode(e) (EVP_CIPHER_flags(e) & EVP_CIPH_MODE)
  469. const EVP_CIPHER *EVP_CIPHER_CTX_cipher(const EVP_CIPHER_CTX *ctx);
  470. int EVP_CIPHER_CTX_nid(const EVP_CIPHER_CTX *ctx);
  471. int EVP_CIPHER_CTX_block_size(const EVP_CIPHER_CTX *ctx);
  472. int EVP_CIPHER_CTX_key_length(const EVP_CIPHER_CTX *ctx);
  473. int EVP_CIPHER_CTX_iv_length(const EVP_CIPHER_CTX *ctx);
  474. int EVP_CIPHER_CTX_copy(EVP_CIPHER_CTX *out, const EVP_CIPHER_CTX *in);
  475. void *EVP_CIPHER_CTX_get_app_data(const EVP_CIPHER_CTX *ctx);
  476. void EVP_CIPHER_CTX_set_app_data(EVP_CIPHER_CTX *ctx, void *data);
  477. # define EVP_CIPHER_CTX_type(c) EVP_CIPHER_type(EVP_CIPHER_CTX_cipher(c))
  478. unsigned long EVP_CIPHER_CTX_flags(const EVP_CIPHER_CTX *ctx);
  479. # define EVP_CIPHER_CTX_mode(e) (EVP_CIPHER_CTX_flags(e) & EVP_CIPH_MODE)
  480. # define EVP_ENCODE_LENGTH(l) (((l+2)/3*4)+(l/48+1)*2+80)
  481. # define EVP_DECODE_LENGTH(l) ((l+3)/4*3+80)
  482. # define EVP_SignInit_ex(a,b,c) EVP_DigestInit_ex(a,b,c)
  483. # define EVP_SignInit(a,b) EVP_DigestInit(a,b)
  484. # define EVP_SignUpdate(a,b,c) EVP_DigestUpdate(a,b,c)
  485. # define EVP_VerifyInit_ex(a,b,c) EVP_DigestInit_ex(a,b,c)
  486. # define EVP_VerifyInit(a,b) EVP_DigestInit(a,b)
  487. # define EVP_VerifyUpdate(a,b,c) EVP_DigestUpdate(a,b,c)
  488. # define EVP_OpenUpdate(a,b,c,d,e) EVP_DecryptUpdate(a,b,c,d,e)
  489. # define EVP_SealUpdate(a,b,c,d,e) EVP_EncryptUpdate(a,b,c,d,e)
  490. # define EVP_DigestSignUpdate(a,b,c) EVP_DigestUpdate(a,b,c)
  491. # define EVP_DigestVerifyUpdate(a,b,c) EVP_DigestUpdate(a,b,c)
  492. # ifdef CONST_STRICT
  493. void BIO_set_md(BIO *, const EVP_MD *md);
  494. # else
  495. # define BIO_set_md(b,md) BIO_ctrl(b,BIO_C_SET_MD,0,(char *)md)
  496. # endif
  497. # define BIO_get_md(b,mdp) BIO_ctrl(b,BIO_C_GET_MD,0,(char *)mdp)
  498. # define BIO_get_md_ctx(b,mdcp) BIO_ctrl(b,BIO_C_GET_MD_CTX,0,(char *)mdcp)
  499. # define BIO_set_md_ctx(b,mdcp) BIO_ctrl(b,BIO_C_SET_MD_CTX,0,(char *)mdcp)
  500. # define BIO_get_cipher_status(b) BIO_ctrl(b,BIO_C_GET_CIPHER_STATUS,0,NULL)
  501. # define BIO_get_cipher_ctx(b,c_pp) BIO_ctrl(b,BIO_C_GET_CIPHER_CTX,0,(char *)c_pp)
  502. int EVP_Cipher(EVP_CIPHER_CTX *c,
  503. unsigned char *out, const unsigned char *in, unsigned int inl);
  504. # define EVP_add_cipher_alias(n,alias) \
  505. OBJ_NAME_add((alias),OBJ_NAME_TYPE_CIPHER_METH|OBJ_NAME_ALIAS,(n))
  506. # define EVP_add_digest_alias(n,alias) \
  507. OBJ_NAME_add((alias),OBJ_NAME_TYPE_MD_METH|OBJ_NAME_ALIAS,(n))
  508. # define EVP_delete_cipher_alias(alias) \
  509. OBJ_NAME_remove(alias,OBJ_NAME_TYPE_CIPHER_METH|OBJ_NAME_ALIAS);
  510. # define EVP_delete_digest_alias(alias) \
  511. OBJ_NAME_remove(alias,OBJ_NAME_TYPE_MD_METH|OBJ_NAME_ALIAS);
  512. void EVP_MD_CTX_init(EVP_MD_CTX *ctx);
  513. int EVP_MD_CTX_cleanup(EVP_MD_CTX *ctx);
  514. EVP_MD_CTX *EVP_MD_CTX_create(void);
  515. void EVP_MD_CTX_destroy(EVP_MD_CTX *ctx);
  516. int EVP_MD_CTX_copy_ex(EVP_MD_CTX *out, const EVP_MD_CTX *in);
  517. void EVP_MD_CTX_set_flags(EVP_MD_CTX *ctx, int flags);
  518. void EVP_MD_CTX_clear_flags(EVP_MD_CTX *ctx, int flags);
  519. int EVP_MD_CTX_test_flags(const EVP_MD_CTX *ctx, int flags);
  520. int EVP_DigestInit_ex(EVP_MD_CTX *ctx, const EVP_MD *type, ENGINE *impl);
  521. int EVP_DigestUpdate(EVP_MD_CTX *ctx, const void *d, size_t cnt);
  522. int EVP_DigestFinal_ex(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *s);
  523. int EVP_Digest(const void *data, size_t count,
  524. unsigned char *md, unsigned int *size, const EVP_MD *type,
  525. ENGINE *impl);
  526. int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
  527. int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
  528. int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *s);
  529. int EVP_read_pw_string(char *buf, int length, const char *prompt, int verify);
  530. int EVP_read_pw_string_min(char *buf, int minlen, int maxlen,
  531. const char *prompt, int verify);
  532. void EVP_set_pw_prompt(const char *prompt);
  533. char *EVP_get_pw_prompt(void);
  534. int EVP_BytesToKey(const EVP_CIPHER *type, const EVP_MD *md,
  535. const unsigned char *salt, const unsigned char *data,
  536. int datal, int count, unsigned char *key,
  537. unsigned char *iv);
  538. void EVP_CIPHER_CTX_set_flags(EVP_CIPHER_CTX *ctx, int flags);
  539. void EVP_CIPHER_CTX_clear_flags(EVP_CIPHER_CTX *ctx, int flags);
  540. int EVP_CIPHER_CTX_test_flags(const EVP_CIPHER_CTX *ctx, int flags);
  541. int EVP_EncryptInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
  542. const unsigned char *key, const unsigned char *iv);
  543. int EVP_EncryptInit_ex(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
  544. ENGINE *impl, const unsigned char *key,
  545. const unsigned char *iv);
  546. int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
  547. const unsigned char *in, int inl);
  548. int EVP_EncryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
  549. int EVP_EncryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
  550. int EVP_DecryptInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
  551. const unsigned char *key, const unsigned char *iv);
  552. int EVP_DecryptInit_ex(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
  553. ENGINE *impl, const unsigned char *key,
  554. const unsigned char *iv);
  555. int EVP_DecryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
  556. const unsigned char *in, int inl);
  557. int EVP_DecryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *outm, int *outl);
  558. int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *outm, int *outl);
  559. int EVP_CipherInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
  560. const unsigned char *key, const unsigned char *iv,
  561. int enc);
  562. int EVP_CipherInit_ex(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
  563. ENGINE *impl, const unsigned char *key,
  564. const unsigned char *iv, int enc);
  565. int EVP_CipherUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
  566. const unsigned char *in, int inl);
  567. int EVP_CipherFinal(EVP_CIPHER_CTX *ctx, unsigned char *outm, int *outl);
  568. int EVP_CipherFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *outm, int *outl);
  569. int EVP_SignFinal(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *s,
  570. EVP_PKEY *pkey);
  571. int EVP_VerifyFinal(EVP_MD_CTX *ctx, const unsigned char *sigbuf,
  572. unsigned int siglen, EVP_PKEY *pkey);
  573. int EVP_DigestSignInit(EVP_MD_CTX *ctx, EVP_PKEY_CTX **pctx,
  574. const EVP_MD *type, ENGINE *e, EVP_PKEY *pkey);
  575. int EVP_DigestSignFinal(EVP_MD_CTX *ctx,
  576. unsigned char *sigret, size_t *siglen);
  577. int EVP_DigestVerifyInit(EVP_MD_CTX *ctx, EVP_PKEY_CTX **pctx,
  578. const EVP_MD *type, ENGINE *e, EVP_PKEY *pkey);
  579. int EVP_DigestVerifyFinal(EVP_MD_CTX *ctx,
  580. const unsigned char *sig, size_t siglen);
  581. int EVP_OpenInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
  582. const unsigned char *ek, int ekl, const unsigned char *iv,
  583. EVP_PKEY *priv);
  584. int EVP_OpenFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
  585. int EVP_SealInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
  586. unsigned char **ek, int *ekl, unsigned char *iv,
  587. EVP_PKEY **pubk, int npubk);
  588. int EVP_SealFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
  589. void EVP_EncodeInit(EVP_ENCODE_CTX *ctx);
  590. void EVP_EncodeUpdate(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl,
  591. const unsigned char *in, int inl);
  592. void EVP_EncodeFinal(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl);
  593. int EVP_EncodeBlock(unsigned char *t, const unsigned char *f, int n);
  594. void EVP_DecodeInit(EVP_ENCODE_CTX *ctx);
  595. int EVP_DecodeUpdate(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl,
  596. const unsigned char *in, int inl);
  597. int EVP_DecodeFinal(EVP_ENCODE_CTX *ctx, unsigned
  598. char *out, int *outl);
  599. int EVP_DecodeBlock(unsigned char *t, const unsigned char *f, int n);
  600. void EVP_CIPHER_CTX_init(EVP_CIPHER_CTX *a);
  601. int EVP_CIPHER_CTX_cleanup(EVP_CIPHER_CTX *a);
  602. EVP_CIPHER_CTX *EVP_CIPHER_CTX_new(void);
  603. void EVP_CIPHER_CTX_free(EVP_CIPHER_CTX *a);
  604. int EVP_CIPHER_CTX_set_key_length(EVP_CIPHER_CTX *x, int keylen);
  605. int EVP_CIPHER_CTX_set_padding(EVP_CIPHER_CTX *c, int pad);
  606. int EVP_CIPHER_CTX_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void *ptr);
  607. int EVP_CIPHER_CTX_rand_key(EVP_CIPHER_CTX *ctx, unsigned char *key);
  608. # ifndef OPENSSL_NO_BIO
  609. BIO_METHOD *BIO_f_md(void);
  610. BIO_METHOD *BIO_f_base64(void);
  611. BIO_METHOD *BIO_f_cipher(void);
  612. BIO_METHOD *BIO_f_reliable(void);
  613. void BIO_set_cipher(BIO *b, const EVP_CIPHER *c, const unsigned char *k,
  614. const unsigned char *i, int enc);
  615. # endif
  616. const EVP_MD *EVP_md_null(void);
  617. # ifndef OPENSSL_NO_MD2
  618. const EVP_MD *EVP_md2(void);
  619. # endif
  620. # ifndef OPENSSL_NO_MD4
  621. const EVP_MD *EVP_md4(void);
  622. # endif
  623. # ifndef OPENSSL_NO_MD5
  624. const EVP_MD *EVP_md5(void);
  625. # endif
  626. # ifndef OPENSSL_NO_SHA
  627. const EVP_MD *EVP_sha(void);
  628. const EVP_MD *EVP_sha1(void);
  629. const EVP_MD *EVP_dss(void);
  630. const EVP_MD *EVP_dss1(void);
  631. const EVP_MD *EVP_ecdsa(void);
  632. # endif
  633. # ifndef OPENSSL_NO_SHA256
  634. const EVP_MD *EVP_sha224(void);
  635. const EVP_MD *EVP_sha256(void);
  636. # endif
  637. # ifndef OPENSSL_NO_SHA512
  638. const EVP_MD *EVP_sha384(void);
  639. const EVP_MD *EVP_sha512(void);
  640. # endif
  641. # ifndef OPENSSL_NO_MDC2
  642. const EVP_MD *EVP_mdc2(void);
  643. # endif
  644. # ifndef OPENSSL_NO_RIPEMD
  645. const EVP_MD *EVP_ripemd160(void);
  646. # endif
  647. # ifndef OPENSSL_NO_WHIRLPOOL
  648. const EVP_MD *EVP_whirlpool(void);
  649. # endif
  650. const EVP_CIPHER *EVP_enc_null(void); /* does nothing :-) */
  651. # ifndef OPENSSL_NO_DES
  652. const EVP_CIPHER *EVP_des_ecb(void);
  653. const EVP_CIPHER *EVP_des_ede(void);
  654. const EVP_CIPHER *EVP_des_ede3(void);
  655. const EVP_CIPHER *EVP_des_ede_ecb(void);
  656. const EVP_CIPHER *EVP_des_ede3_ecb(void);
  657. const EVP_CIPHER *EVP_des_cfb64(void);
  658. # define EVP_des_cfb EVP_des_cfb64
  659. const EVP_CIPHER *EVP_des_cfb1(void);
  660. const EVP_CIPHER *EVP_des_cfb8(void);
  661. const EVP_CIPHER *EVP_des_ede_cfb64(void);
  662. # define EVP_des_ede_cfb EVP_des_ede_cfb64
  663. # if 0
  664. const EVP_CIPHER *EVP_des_ede_cfb1(void);
  665. const EVP_CIPHER *EVP_des_ede_cfb8(void);
  666. # endif
  667. const EVP_CIPHER *EVP_des_ede3_cfb64(void);
  668. # define EVP_des_ede3_cfb EVP_des_ede3_cfb64
  669. const EVP_CIPHER *EVP_des_ede3_cfb1(void);
  670. const EVP_CIPHER *EVP_des_ede3_cfb8(void);
  671. const EVP_CIPHER *EVP_des_ofb(void);
  672. const EVP_CIPHER *EVP_des_ede_ofb(void);
  673. const EVP_CIPHER *EVP_des_ede3_ofb(void);
  674. const EVP_CIPHER *EVP_des_cbc(void);
  675. const EVP_CIPHER *EVP_des_ede_cbc(void);
  676. const EVP_CIPHER *EVP_des_ede3_cbc(void);
  677. const EVP_CIPHER *EVP_desx_cbc(void);
  678. const EVP_CIPHER *EVP_des_ede3_wrap(void);
  679. /*
  680. * This should now be supported through the dev_crypto ENGINE. But also, why
  681. * are rc4 and md5 declarations made here inside a "NO_DES" precompiler
  682. * branch?
  683. */
  684. # if 0
  685. # ifdef OPENSSL_OPENBSD_DEV_CRYPTO
  686. const EVP_CIPHER *EVP_dev_crypto_des_ede3_cbc(void);
  687. const EVP_CIPHER *EVP_dev_crypto_rc4(void);
  688. const EVP_MD *EVP_dev_crypto_md5(void);
  689. # endif
  690. # endif
  691. # endif
  692. # ifndef OPENSSL_NO_RC4
  693. const EVP_CIPHER *EVP_rc4(void);
  694. const EVP_CIPHER *EVP_rc4_40(void);
  695. # ifndef OPENSSL_NO_MD5
  696. const EVP_CIPHER *EVP_rc4_hmac_md5(void);
  697. # endif
  698. # endif
  699. # ifndef OPENSSL_NO_IDEA
  700. const EVP_CIPHER *EVP_idea_ecb(void);
  701. const EVP_CIPHER *EVP_idea_cfb64(void);
  702. # define EVP_idea_cfb EVP_idea_cfb64
  703. const EVP_CIPHER *EVP_idea_ofb(void);
  704. const EVP_CIPHER *EVP_idea_cbc(void);
  705. # endif
  706. # ifndef OPENSSL_NO_RC2
  707. const EVP_CIPHER *EVP_rc2_ecb(void);
  708. const EVP_CIPHER *EVP_rc2_cbc(void);
  709. const EVP_CIPHER *EVP_rc2_40_cbc(void);
  710. const EVP_CIPHER *EVP_rc2_64_cbc(void);
  711. const EVP_CIPHER *EVP_rc2_cfb64(void);
  712. # define EVP_rc2_cfb EVP_rc2_cfb64
  713. const EVP_CIPHER *EVP_rc2_ofb(void);
  714. # endif
  715. # ifndef OPENSSL_NO_BF
  716. const EVP_CIPHER *EVP_bf_ecb(void);
  717. const EVP_CIPHER *EVP_bf_cbc(void);
  718. const EVP_CIPHER *EVP_bf_cfb64(void);
  719. # define EVP_bf_cfb EVP_bf_cfb64
  720. const EVP_CIPHER *EVP_bf_ofb(void);
  721. # endif
  722. # ifndef OPENSSL_NO_CAST
  723. const EVP_CIPHER *EVP_cast5_ecb(void);
  724. const EVP_CIPHER *EVP_cast5_cbc(void);
  725. const EVP_CIPHER *EVP_cast5_cfb64(void);
  726. # define EVP_cast5_cfb EVP_cast5_cfb64
  727. const EVP_CIPHER *EVP_cast5_ofb(void);
  728. # endif
  729. # ifndef OPENSSL_NO_RC5
  730. const EVP_CIPHER *EVP_rc5_32_12_16_cbc(void);
  731. const EVP_CIPHER *EVP_rc5_32_12_16_ecb(void);
  732. const EVP_CIPHER *EVP_rc5_32_12_16_cfb64(void);
  733. # define EVP_rc5_32_12_16_cfb EVP_rc5_32_12_16_cfb64
  734. const EVP_CIPHER *EVP_rc5_32_12_16_ofb(void);
  735. # endif
  736. # ifndef OPENSSL_NO_AES
  737. const EVP_CIPHER *EVP_aes_128_ecb(void);
  738. const EVP_CIPHER *EVP_aes_128_cbc(void);
  739. const EVP_CIPHER *EVP_aes_128_cfb1(void);
  740. const EVP_CIPHER *EVP_aes_128_cfb8(void);
  741. const EVP_CIPHER *EVP_aes_128_cfb128(void);
  742. # define EVP_aes_128_cfb EVP_aes_128_cfb128
  743. const EVP_CIPHER *EVP_aes_128_ofb(void);
  744. const EVP_CIPHER *EVP_aes_128_ctr(void);
  745. const EVP_CIPHER *EVP_aes_128_ccm(void);
  746. const EVP_CIPHER *EVP_aes_128_gcm(void);
  747. const EVP_CIPHER *EVP_aes_128_xts(void);
  748. const EVP_CIPHER *EVP_aes_128_wrap(void);
  749. const EVP_CIPHER *EVP_aes_192_ecb(void);
  750. const EVP_CIPHER *EVP_aes_192_cbc(void);
  751. const EVP_CIPHER *EVP_aes_192_cfb1(void);
  752. const EVP_CIPHER *EVP_aes_192_cfb8(void);
  753. const EVP_CIPHER *EVP_aes_192_cfb128(void);
  754. # define EVP_aes_192_cfb EVP_aes_192_cfb128
  755. const EVP_CIPHER *EVP_aes_192_ofb(void);
  756. const EVP_CIPHER *EVP_aes_192_ctr(void);
  757. const EVP_CIPHER *EVP_aes_192_ccm(void);
  758. const EVP_CIPHER *EVP_aes_192_gcm(void);
  759. const EVP_CIPHER *EVP_aes_192_wrap(void);
  760. const EVP_CIPHER *EVP_aes_256_ecb(void);
  761. const EVP_CIPHER *EVP_aes_256_cbc(void);
  762. const EVP_CIPHER *EVP_aes_256_cfb1(void);
  763. const EVP_CIPHER *EVP_aes_256_cfb8(void);
  764. const EVP_CIPHER *EVP_aes_256_cfb128(void);
  765. # define EVP_aes_256_cfb EVP_aes_256_cfb128
  766. const EVP_CIPHER *EVP_aes_256_ofb(void);
  767. const EVP_CIPHER *EVP_aes_256_ctr(void);
  768. const EVP_CIPHER *EVP_aes_256_ccm(void);
  769. const EVP_CIPHER *EVP_aes_256_gcm(void);
  770. const EVP_CIPHER *EVP_aes_256_xts(void);
  771. const EVP_CIPHER *EVP_aes_256_wrap(void);
  772. # if !defined(OPENSSL_NO_SHA) && !defined(OPENSSL_NO_SHA1)
  773. const EVP_CIPHER *EVP_aes_128_cbc_hmac_sha1(void);
  774. const EVP_CIPHER *EVP_aes_256_cbc_hmac_sha1(void);
  775. # endif
  776. # ifndef OPENSSL_NO_SHA256
  777. const EVP_CIPHER *EVP_aes_128_cbc_hmac_sha256(void);
  778. const EVP_CIPHER *EVP_aes_256_cbc_hmac_sha256(void);
  779. # endif
  780. # endif
  781. # ifndef OPENSSL_NO_CAMELLIA
  782. const EVP_CIPHER *EVP_camellia_128_ecb(void);
  783. const EVP_CIPHER *EVP_camellia_128_cbc(void);
  784. const EVP_CIPHER *EVP_camellia_128_cfb1(void);
  785. const EVP_CIPHER *EVP_camellia_128_cfb8(void);
  786. const EVP_CIPHER *EVP_camellia_128_cfb128(void);
  787. # define EVP_camellia_128_cfb EVP_camellia_128_cfb128
  788. const EVP_CIPHER *EVP_camellia_128_ofb(void);
  789. const EVP_CIPHER *EVP_camellia_192_ecb(void);
  790. const EVP_CIPHER *EVP_camellia_192_cbc(void);
  791. const EVP_CIPHER *EVP_camellia_192_cfb1(void);
  792. const EVP_CIPHER *EVP_camellia_192_cfb8(void);
  793. const EVP_CIPHER *EVP_camellia_192_cfb128(void);
  794. # define EVP_camellia_192_cfb EVP_camellia_192_cfb128
  795. const EVP_CIPHER *EVP_camellia_192_ofb(void);
  796. const EVP_CIPHER *EVP_camellia_256_ecb(void);
  797. const EVP_CIPHER *EVP_camellia_256_cbc(void);
  798. const EVP_CIPHER *EVP_camellia_256_cfb1(void);
  799. const EVP_CIPHER *EVP_camellia_256_cfb8(void);
  800. const EVP_CIPHER *EVP_camellia_256_cfb128(void);
  801. # define EVP_camellia_256_cfb EVP_camellia_256_cfb128
  802. const EVP_CIPHER *EVP_camellia_256_ofb(void);
  803. # endif
  804. # ifndef OPENSSL_NO_SEED
  805. const EVP_CIPHER *EVP_seed_ecb(void);
  806. const EVP_CIPHER *EVP_seed_cbc(void);
  807. const EVP_CIPHER *EVP_seed_cfb128(void);
  808. # define EVP_seed_cfb EVP_seed_cfb128
  809. const EVP_CIPHER *EVP_seed_ofb(void);
  810. # endif
  811. void OPENSSL_add_all_algorithms_noconf(void);
  812. void OPENSSL_add_all_algorithms_conf(void);
  813. # ifdef OPENSSL_LOAD_CONF
  814. # define OpenSSL_add_all_algorithms() \
  815. OPENSSL_add_all_algorithms_conf()
  816. # else
  817. # define OpenSSL_add_all_algorithms() \
  818. OPENSSL_add_all_algorithms_noconf()
  819. # endif
  820. void OpenSSL_add_all_ciphers(void);
  821. void OpenSSL_add_all_digests(void);
  822. # define SSLeay_add_all_algorithms() OpenSSL_add_all_algorithms()
  823. # define SSLeay_add_all_ciphers() OpenSSL_add_all_ciphers()
  824. # define SSLeay_add_all_digests() OpenSSL_add_all_digests()
  825. int EVP_add_cipher(const EVP_CIPHER *cipher);
  826. int EVP_add_digest(const EVP_MD *digest);
  827. const EVP_CIPHER *EVP_get_cipherbyname(const char *name);
  828. const EVP_MD *EVP_get_digestbyname(const char *name);
  829. void EVP_cleanup(void);
  830. void EVP_CIPHER_do_all(void (*fn) (const EVP_CIPHER *ciph,
  831. const char *from, const char *to, void *x),
  832. void *arg);
  833. void EVP_CIPHER_do_all_sorted(void (*fn)
  834. (const EVP_CIPHER *ciph, const char *from,
  835. const char *to, void *x), void *arg);
  836. void EVP_MD_do_all(void (*fn) (const EVP_MD *ciph,
  837. const char *from, const char *to, void *x),
  838. void *arg);
  839. void EVP_MD_do_all_sorted(void (*fn)
  840. (const EVP_MD *ciph, const char *from,
  841. const char *to, void *x), void *arg);
  842. int EVP_PKEY_decrypt_old(unsigned char *dec_key,
  843. const unsigned char *enc_key, int enc_key_len,
  844. EVP_PKEY *private_key);
  845. int EVP_PKEY_encrypt_old(unsigned char *enc_key,
  846. const unsigned char *key, int key_len,
  847. EVP_PKEY *pub_key);
  848. int EVP_PKEY_type(int type);
  849. int EVP_PKEY_id(const EVP_PKEY *pkey);
  850. int EVP_PKEY_base_id(const EVP_PKEY *pkey);
  851. int EVP_PKEY_bits(EVP_PKEY *pkey);
  852. int EVP_PKEY_size(EVP_PKEY *pkey);
  853. int EVP_PKEY_set_type(EVP_PKEY *pkey, int type);
  854. int EVP_PKEY_set_type_str(EVP_PKEY *pkey, const char *str, int len);
  855. int EVP_PKEY_assign(EVP_PKEY *pkey, int type, void *key);
  856. void *EVP_PKEY_get0(EVP_PKEY *pkey);
  857. # ifndef OPENSSL_NO_RSA
  858. struct rsa_st;
  859. int EVP_PKEY_set1_RSA(EVP_PKEY *pkey, struct rsa_st *key);
  860. struct rsa_st *EVP_PKEY_get1_RSA(EVP_PKEY *pkey);
  861. # endif
  862. # ifndef OPENSSL_NO_DSA
  863. struct dsa_st;
  864. int EVP_PKEY_set1_DSA(EVP_PKEY *pkey, struct dsa_st *key);
  865. struct dsa_st *EVP_PKEY_get1_DSA(EVP_PKEY *pkey);
  866. # endif
  867. # ifndef OPENSSL_NO_DH
  868. struct dh_st;
  869. int EVP_PKEY_set1_DH(EVP_PKEY *pkey, struct dh_st *key);
  870. struct dh_st *EVP_PKEY_get1_DH(EVP_PKEY *pkey);
  871. # endif
  872. # ifndef OPENSSL_NO_EC
  873. struct ec_key_st;
  874. int EVP_PKEY_set1_EC_KEY(EVP_PKEY *pkey, struct ec_key_st *key);
  875. struct ec_key_st *EVP_PKEY_get1_EC_KEY(EVP_PKEY *pkey);
  876. # endif
  877. EVP_PKEY *EVP_PKEY_new(void);
  878. void EVP_PKEY_free(EVP_PKEY *pkey);
  879. EVP_PKEY *d2i_PublicKey(int type, EVP_PKEY **a, const unsigned char **pp,
  880. long length);
  881. int i2d_PublicKey(EVP_PKEY *a, unsigned char **pp);
  882. EVP_PKEY *d2i_PrivateKey(int type, EVP_PKEY **a, const unsigned char **pp,
  883. long length);
  884. EVP_PKEY *d2i_AutoPrivateKey(EVP_PKEY **a, const unsigned char **pp,
  885. long length);
  886. int i2d_PrivateKey(EVP_PKEY *a, unsigned char **pp);
  887. int EVP_PKEY_copy_parameters(EVP_PKEY *to, const EVP_PKEY *from);
  888. int EVP_PKEY_missing_parameters(const EVP_PKEY *pkey);
  889. int EVP_PKEY_save_parameters(EVP_PKEY *pkey, int mode);
  890. int EVP_PKEY_cmp_parameters(const EVP_PKEY *a, const EVP_PKEY *b);
  891. int EVP_PKEY_cmp(const EVP_PKEY *a, const EVP_PKEY *b);
  892. int EVP_PKEY_print_public(BIO *out, const EVP_PKEY *pkey,
  893. int indent, ASN1_PCTX *pctx);
  894. int EVP_PKEY_print_private(BIO *out, const EVP_PKEY *pkey,
  895. int indent, ASN1_PCTX *pctx);
  896. int EVP_PKEY_print_params(BIO *out, const EVP_PKEY *pkey,
  897. int indent, ASN1_PCTX *pctx);
  898. int EVP_PKEY_get_default_digest_nid(EVP_PKEY *pkey, int *pnid);
  899. int EVP_CIPHER_type(const EVP_CIPHER *ctx);
  900. /* calls methods */
  901. int EVP_CIPHER_param_to_asn1(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
  902. int EVP_CIPHER_asn1_to_param(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
  903. /* These are used by EVP_CIPHER methods */
  904. int EVP_CIPHER_set_asn1_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
  905. int EVP_CIPHER_get_asn1_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
  906. /* PKCS5 password based encryption */
  907. int PKCS5_PBE_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
  908. ASN1_TYPE *param, const EVP_CIPHER *cipher,
  909. const EVP_MD *md, int en_de);
  910. int PKCS5_PBKDF2_HMAC_SHA1(const char *pass, int passlen,
  911. const unsigned char *salt, int saltlen, int iter,
  912. int keylen, unsigned char *out);
  913. int PKCS5_PBKDF2_HMAC(const char *pass, int passlen,
  914. const unsigned char *salt, int saltlen, int iter,
  915. const EVP_MD *digest, int keylen, unsigned char *out);
  916. int PKCS5_v2_PBE_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
  917. ASN1_TYPE *param, const EVP_CIPHER *cipher,
  918. const EVP_MD *md, int en_de);
  919. void PKCS5_PBE_add(void);
  920. int EVP_PBE_CipherInit(ASN1_OBJECT *pbe_obj, const char *pass, int passlen,
  921. ASN1_TYPE *param, EVP_CIPHER_CTX *ctx, int en_de);
  922. /* PBE type */
  923. /* Can appear as the outermost AlgorithmIdentifier */
  924. # define EVP_PBE_TYPE_OUTER 0x0
  925. /* Is an PRF type OID */
  926. # define EVP_PBE_TYPE_PRF 0x1
  927. int EVP_PBE_alg_add_type(int pbe_type, int pbe_nid, int cipher_nid,
  928. int md_nid, EVP_PBE_KEYGEN *keygen);
  929. int EVP_PBE_alg_add(int nid, const EVP_CIPHER *cipher, const EVP_MD *md,
  930. EVP_PBE_KEYGEN *keygen);
  931. int EVP_PBE_find(int type, int pbe_nid, int *pcnid, int *pmnid,
  932. EVP_PBE_KEYGEN **pkeygen);
  933. void EVP_PBE_cleanup(void);
  934. # define ASN1_PKEY_ALIAS 0x1
  935. # define ASN1_PKEY_DYNAMIC 0x2
  936. # define ASN1_PKEY_SIGPARAM_NULL 0x4
  937. # define ASN1_PKEY_CTRL_PKCS7_SIGN 0x1
  938. # define ASN1_PKEY_CTRL_PKCS7_ENCRYPT 0x2
  939. # define ASN1_PKEY_CTRL_DEFAULT_MD_NID 0x3
  940. # define ASN1_PKEY_CTRL_CMS_SIGN 0x5
  941. # define ASN1_PKEY_CTRL_CMS_ENVELOPE 0x7
  942. # define ASN1_PKEY_CTRL_CMS_RI_TYPE 0x8
  943. int EVP_PKEY_asn1_get_count(void);
  944. const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_get0(int idx);
  945. const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_find(ENGINE **pe, int type);
  946. const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_find_str(ENGINE **pe,
  947. const char *str, int len);
  948. int EVP_PKEY_asn1_add0(const EVP_PKEY_ASN1_METHOD *ameth);
  949. int EVP_PKEY_asn1_add_alias(int to, int from);
  950. int EVP_PKEY_asn1_get0_info(int *ppkey_id, int *pkey_base_id,
  951. int *ppkey_flags, const char **pinfo,
  952. const char **ppem_str,
  953. const EVP_PKEY_ASN1_METHOD *ameth);
  954. const EVP_PKEY_ASN1_METHOD *EVP_PKEY_get0_asn1(EVP_PKEY *pkey);
  955. EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_new(int id, int flags,
  956. const char *pem_str,
  957. const char *info);
  958. void EVP_PKEY_asn1_copy(EVP_PKEY_ASN1_METHOD *dst,
  959. const EVP_PKEY_ASN1_METHOD *src);
  960. void EVP_PKEY_asn1_free(EVP_PKEY_ASN1_METHOD *ameth);
  961. void EVP_PKEY_asn1_set_public(EVP_PKEY_ASN1_METHOD *ameth,
  962. int (*pub_decode) (EVP_PKEY *pk,
  963. X509_PUBKEY *pub),
  964. int (*pub_encode) (X509_PUBKEY *pub,
  965. const EVP_PKEY *pk),
  966. int (*pub_cmp) (const EVP_PKEY *a,
  967. const EVP_PKEY *b),
  968. int (*pub_print) (BIO *out,
  969. const EVP_PKEY *pkey,
  970. int indent, ASN1_PCTX *pctx),
  971. int (*pkey_size) (const EVP_PKEY *pk),
  972. int (*pkey_bits) (const EVP_PKEY *pk));
  973. void EVP_PKEY_asn1_set_private(EVP_PKEY_ASN1_METHOD *ameth,
  974. int (*priv_decode) (EVP_PKEY *pk,
  975. PKCS8_PRIV_KEY_INFO
  976. *p8inf),
  977. int (*priv_encode) (PKCS8_PRIV_KEY_INFO *p8,
  978. const EVP_PKEY *pk),
  979. int (*priv_print) (BIO *out,
  980. const EVP_PKEY *pkey,
  981. int indent,
  982. ASN1_PCTX *pctx));
  983. void EVP_PKEY_asn1_set_param(EVP_PKEY_ASN1_METHOD *ameth,
  984. int (*param_decode) (EVP_PKEY *pkey,
  985. const unsigned char **pder,
  986. int derlen),
  987. int (*param_encode) (const EVP_PKEY *pkey,
  988. unsigned char **pder),
  989. int (*param_missing) (const EVP_PKEY *pk),
  990. int (*param_copy) (EVP_PKEY *to,
  991. const EVP_PKEY *from),
  992. int (*param_cmp) (const EVP_PKEY *a,
  993. const EVP_PKEY *b),
  994. int (*param_print) (BIO *out,
  995. const EVP_PKEY *pkey,
  996. int indent,
  997. ASN1_PCTX *pctx));
  998. void EVP_PKEY_asn1_set_free(EVP_PKEY_ASN1_METHOD *ameth,
  999. void (*pkey_free) (EVP_PKEY *pkey));
  1000. void EVP_PKEY_asn1_set_ctrl(EVP_PKEY_ASN1_METHOD *ameth,
  1001. int (*pkey_ctrl) (EVP_PKEY *pkey, int op,
  1002. long arg1, void *arg2));
  1003. void EVP_PKEY_asn1_set_item(EVP_PKEY_ASN1_METHOD *ameth,
  1004. int (*item_verify) (EVP_MD_CTX *ctx,
  1005. const ASN1_ITEM *it,
  1006. void *asn,
  1007. X509_ALGOR *a,
  1008. ASN1_BIT_STRING *sig,
  1009. EVP_PKEY *pkey),
  1010. int (*item_sign) (EVP_MD_CTX *ctx,
  1011. const ASN1_ITEM *it,
  1012. void *asn,
  1013. X509_ALGOR *alg1,
  1014. X509_ALGOR *alg2,
  1015. ASN1_BIT_STRING *sig));
  1016. # define EVP_PKEY_OP_UNDEFINED 0
  1017. # define EVP_PKEY_OP_PARAMGEN (1<<1)
  1018. # define EVP_PKEY_OP_KEYGEN (1<<2)
  1019. # define EVP_PKEY_OP_SIGN (1<<3)
  1020. # define EVP_PKEY_OP_VERIFY (1<<4)
  1021. # define EVP_PKEY_OP_VERIFYRECOVER (1<<5)
  1022. # define EVP_PKEY_OP_SIGNCTX (1<<6)
  1023. # define EVP_PKEY_OP_VERIFYCTX (1<<7)
  1024. # define EVP_PKEY_OP_ENCRYPT (1<<8)
  1025. # define EVP_PKEY_OP_DECRYPT (1<<9)
  1026. # define EVP_PKEY_OP_DERIVE (1<<10)
  1027. # define EVP_PKEY_OP_TYPE_SIG \
  1028. (EVP_PKEY_OP_SIGN | EVP_PKEY_OP_VERIFY | EVP_PKEY_OP_VERIFYRECOVER \
  1029. | EVP_PKEY_OP_SIGNCTX | EVP_PKEY_OP_VERIFYCTX)
  1030. # define EVP_PKEY_OP_TYPE_CRYPT \
  1031. (EVP_PKEY_OP_ENCRYPT | EVP_PKEY_OP_DECRYPT)
  1032. # define EVP_PKEY_OP_TYPE_NOGEN \
  1033. (EVP_PKEY_OP_SIG | EVP_PKEY_OP_CRYPT | EVP_PKEY_OP_DERIVE)
  1034. # define EVP_PKEY_OP_TYPE_GEN \
  1035. (EVP_PKEY_OP_PARAMGEN | EVP_PKEY_OP_KEYGEN)
  1036. # define EVP_PKEY_CTX_set_signature_md(ctx, md) \
  1037. EVP_PKEY_CTX_ctrl(ctx, -1, EVP_PKEY_OP_TYPE_SIG, \
  1038. EVP_PKEY_CTRL_MD, 0, (void *)md)
  1039. # define EVP_PKEY_CTX_get_signature_md(ctx, pmd) \
  1040. EVP_PKEY_CTX_ctrl(ctx, -1, EVP_PKEY_OP_TYPE_SIG, \
  1041. EVP_PKEY_CTRL_GET_MD, 0, (void *)pmd)
  1042. # define EVP_PKEY_CTRL_MD 1
  1043. # define EVP_PKEY_CTRL_PEER_KEY 2
  1044. # define EVP_PKEY_CTRL_PKCS7_ENCRYPT 3
  1045. # define EVP_PKEY_CTRL_PKCS7_DECRYPT 4
  1046. # define EVP_PKEY_CTRL_PKCS7_SIGN 5
  1047. # define EVP_PKEY_CTRL_SET_MAC_KEY 6
  1048. # define EVP_PKEY_CTRL_DIGESTINIT 7
  1049. /* Used by GOST key encryption in TLS */
  1050. # define EVP_PKEY_CTRL_SET_IV 8
  1051. # define EVP_PKEY_CTRL_CMS_ENCRYPT 9
  1052. # define EVP_PKEY_CTRL_CMS_DECRYPT 10
  1053. # define EVP_PKEY_CTRL_CMS_SIGN 11
  1054. # define EVP_PKEY_CTRL_CIPHER 12
  1055. # define EVP_PKEY_CTRL_GET_MD 13
  1056. # define EVP_PKEY_ALG_CTRL 0x1000
  1057. # define EVP_PKEY_FLAG_AUTOARGLEN 2
  1058. /*
  1059. * Method handles all operations: don't assume any digest related defaults.
  1060. */
  1061. # define EVP_PKEY_FLAG_SIGCTX_CUSTOM 4
  1062. const EVP_PKEY_METHOD *EVP_PKEY_meth_find(int type);
  1063. EVP_PKEY_METHOD *EVP_PKEY_meth_new(int id, int flags);
  1064. void EVP_PKEY_meth_get0_info(int *ppkey_id, int *pflags,
  1065. const EVP_PKEY_METHOD *meth);
  1066. void EVP_PKEY_meth_copy(EVP_PKEY_METHOD *dst, const EVP_PKEY_METHOD *src);
  1067. void EVP_PKEY_meth_free(EVP_PKEY_METHOD *pmeth);
  1068. int EVP_PKEY_meth_add0(const EVP_PKEY_METHOD *pmeth);
  1069. EVP_PKEY_CTX *EVP_PKEY_CTX_new(EVP_PKEY *pkey, ENGINE *e);
  1070. EVP_PKEY_CTX *EVP_PKEY_CTX_new_id(int id, ENGINE *e);
  1071. EVP_PKEY_CTX *EVP_PKEY_CTX_dup(EVP_PKEY_CTX *ctx);
  1072. void EVP_PKEY_CTX_free(EVP_PKEY_CTX *ctx);
  1073. int EVP_PKEY_CTX_ctrl(EVP_PKEY_CTX *ctx, int keytype, int optype,
  1074. int cmd, int p1, void *p2);
  1075. int EVP_PKEY_CTX_ctrl_str(EVP_PKEY_CTX *ctx, const char *type,
  1076. const char *value);
  1077. int EVP_PKEY_CTX_get_operation(EVP_PKEY_CTX *ctx);
  1078. void EVP_PKEY_CTX_set0_keygen_info(EVP_PKEY_CTX *ctx, int *dat, int datlen);
  1079. EVP_PKEY *EVP_PKEY_new_mac_key(int type, ENGINE *e,
  1080. const unsigned char *key, int keylen);
  1081. void EVP_PKEY_CTX_set_data(EVP_PKEY_CTX *ctx, void *data);
  1082. void *EVP_PKEY_CTX_get_data(EVP_PKEY_CTX *ctx);
  1083. EVP_PKEY *EVP_PKEY_CTX_get0_pkey(EVP_PKEY_CTX *ctx);
  1084. EVP_PKEY *EVP_PKEY_CTX_get0_peerkey(EVP_PKEY_CTX *ctx);
  1085. void EVP_PKEY_CTX_set_app_data(EVP_PKEY_CTX *ctx, void *data);
  1086. void *EVP_PKEY_CTX_get_app_data(EVP_PKEY_CTX *ctx);
  1087. int EVP_PKEY_sign_init(EVP_PKEY_CTX *ctx);
  1088. int EVP_PKEY_sign(EVP_PKEY_CTX *ctx,
  1089. unsigned char *sig, size_t *siglen,
  1090. const unsigned char *tbs, size_t tbslen);
  1091. int EVP_PKEY_verify_init(EVP_PKEY_CTX *ctx);
  1092. int EVP_PKEY_verify(EVP_PKEY_CTX *ctx,
  1093. const unsigned char *sig, size_t siglen,
  1094. const unsigned char *tbs, size_t tbslen);
  1095. int EVP_PKEY_verify_recover_init(EVP_PKEY_CTX *ctx);
  1096. int EVP_PKEY_verify_recover(EVP_PKEY_CTX *ctx,
  1097. unsigned char *rout, size_t *routlen,
  1098. const unsigned char *sig, size_t siglen);
  1099. int EVP_PKEY_encrypt_init(EVP_PKEY_CTX *ctx);
  1100. int EVP_PKEY_encrypt(EVP_PKEY_CTX *ctx,
  1101. unsigned char *out, size_t *outlen,
  1102. const unsigned char *in, size_t inlen);
  1103. int EVP_PKEY_decrypt_init(EVP_PKEY_CTX *ctx);
  1104. int EVP_PKEY_decrypt(EVP_PKEY_CTX *ctx,
  1105. unsigned char *out, size_t *outlen,
  1106. const unsigned char *in, size_t inlen);
  1107. int EVP_PKEY_derive_init(EVP_PKEY_CTX *ctx);
  1108. int EVP_PKEY_derive_set_peer(EVP_PKEY_CTX *ctx, EVP_PKEY *peer);
  1109. int EVP_PKEY_derive(EVP_PKEY_CTX *ctx, unsigned char *key, size_t *keylen);
  1110. typedef int EVP_PKEY_gen_cb (EVP_PKEY_CTX *ctx);
  1111. int EVP_PKEY_paramgen_init(EVP_PKEY_CTX *ctx);
  1112. int EVP_PKEY_paramgen(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey);
  1113. int EVP_PKEY_keygen_init(EVP_PKEY_CTX *ctx);
  1114. int EVP_PKEY_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey);
  1115. void EVP_PKEY_CTX_set_cb(EVP_PKEY_CTX *ctx, EVP_PKEY_gen_cb *cb);
  1116. EVP_PKEY_gen_cb *EVP_PKEY_CTX_get_cb(EVP_PKEY_CTX *ctx);
  1117. int EVP_PKEY_CTX_get_keygen_info(EVP_PKEY_CTX *ctx, int idx);
  1118. void EVP_PKEY_meth_set_init(EVP_PKEY_METHOD *pmeth,
  1119. int (*init) (EVP_PKEY_CTX *ctx));
  1120. void EVP_PKEY_meth_set_copy(EVP_PKEY_METHOD *pmeth,
  1121. int (*copy) (EVP_PKEY_CTX *dst,
  1122. EVP_PKEY_CTX *src));
  1123. void EVP_PKEY_meth_set_cleanup(EVP_PKEY_METHOD *pmeth,
  1124. void (*cleanup) (EVP_PKEY_CTX *ctx));
  1125. void EVP_PKEY_meth_set_paramgen(EVP_PKEY_METHOD *pmeth,
  1126. int (*paramgen_init) (EVP_PKEY_CTX *ctx),
  1127. int (*paramgen) (EVP_PKEY_CTX *ctx,
  1128. EVP_PKEY *pkey));
  1129. void EVP_PKEY_meth_set_keygen(EVP_PKEY_METHOD *pmeth,
  1130. int (*keygen_init) (EVP_PKEY_CTX *ctx),
  1131. int (*keygen) (EVP_PKEY_CTX *ctx,
  1132. EVP_PKEY *pkey));
  1133. void EVP_PKEY_meth_set_sign(EVP_PKEY_METHOD *pmeth,
  1134. int (*sign_init) (EVP_PKEY_CTX *ctx),
  1135. int (*sign) (EVP_PKEY_CTX *ctx,
  1136. unsigned char *sig, size_t *siglen,
  1137. const unsigned char *tbs,
  1138. size_t tbslen));
  1139. void EVP_PKEY_meth_set_verify(EVP_PKEY_METHOD *pmeth,
  1140. int (*verify_init) (EVP_PKEY_CTX *ctx),
  1141. int (*verify) (EVP_PKEY_CTX *ctx,
  1142. const unsigned char *sig,
  1143. size_t siglen,
  1144. const unsigned char *tbs,
  1145. size_t tbslen));
  1146. void EVP_PKEY_meth_set_verify_recover(EVP_PKEY_METHOD *pmeth,
  1147. int (*verify_recover_init) (EVP_PKEY_CTX
  1148. *ctx),
  1149. int (*verify_recover) (EVP_PKEY_CTX
  1150. *ctx,
  1151. unsigned char
  1152. *sig,
  1153. size_t *siglen,
  1154. const unsigned
  1155. char *tbs,
  1156. size_t tbslen));
  1157. void EVP_PKEY_meth_set_signctx(EVP_PKEY_METHOD *pmeth,
  1158. int (*signctx_init) (EVP_PKEY_CTX *ctx,
  1159. EVP_MD_CTX *mctx),
  1160. int (*signctx) (EVP_PKEY_CTX *ctx,
  1161. unsigned char *sig,
  1162. size_t *siglen,
  1163. EVP_MD_CTX *mctx));
  1164. void EVP_PKEY_meth_set_verifyctx(EVP_PKEY_METHOD *pmeth,
  1165. int (*verifyctx_init) (EVP_PKEY_CTX *ctx,
  1166. EVP_MD_CTX *mctx),
  1167. int (*verifyctx) (EVP_PKEY_CTX *ctx,
  1168. const unsigned char *sig,
  1169. int siglen,
  1170. EVP_MD_CTX *mctx));
  1171. void EVP_PKEY_meth_set_encrypt(EVP_PKEY_METHOD *pmeth,
  1172. int (*encrypt_init) (EVP_PKEY_CTX *ctx),
  1173. int (*encryptfn) (EVP_PKEY_CTX *ctx,
  1174. unsigned char *out,
  1175. size_t *outlen,
  1176. const unsigned char *in,
  1177. size_t inlen));
  1178. void EVP_PKEY_meth_set_decrypt(EVP_PKEY_METHOD *pmeth,
  1179. int (*decrypt_init) (EVP_PKEY_CTX *ctx),
  1180. int (*decrypt) (EVP_PKEY_CTX *ctx,
  1181. unsigned char *out,
  1182. size_t *outlen,
  1183. const unsigned char *in,
  1184. size_t inlen));
  1185. void EVP_PKEY_meth_set_derive(EVP_PKEY_METHOD *pmeth,
  1186. int (*derive_init) (EVP_PKEY_CTX *ctx),
  1187. int (*derive) (EVP_PKEY_CTX *ctx,
  1188. unsigned char *key,
  1189. size_t *keylen));
  1190. void EVP_PKEY_meth_set_ctrl(EVP_PKEY_METHOD *pmeth,
  1191. int (*ctrl) (EVP_PKEY_CTX *ctx, int type, int p1,
  1192. void *p2),
  1193. int (*ctrl_str) (EVP_PKEY_CTX *ctx,
  1194. const char *type,
  1195. const char *value));
  1196. void EVP_add_alg_module(void);
  1197. /* BEGIN ERROR CODES */
  1198. /*
  1199. * The following lines are auto generated by the script mkerr.pl. Any changes
  1200. * made after this point may be overwritten when the script is next run.
  1201. */
  1202. void ERR_load_EVP_strings(void);
  1203. /* Error codes for the EVP functions. */
  1204. /* Function codes. */
  1205. # define EVP_F_AESNI_INIT_KEY 165
  1206. # define EVP_F_AESNI_XTS_CIPHER 176
  1207. # define EVP_F_AES_INIT_KEY 133
  1208. # define EVP_F_AES_T4_INIT_KEY 178
  1209. # define EVP_F_AES_XTS 172
  1210. # define EVP_F_AES_XTS_CIPHER 175
  1211. # define EVP_F_ALG_MODULE_INIT 177
  1212. # define EVP_F_CAMELLIA_INIT_KEY 159
  1213. # define EVP_F_CMAC_INIT 173
  1214. # define EVP_F_CMLL_T4_INIT_KEY 179
  1215. # define EVP_F_D2I_PKEY 100
  1216. # define EVP_F_DO_SIGVER_INIT 161
  1217. # define EVP_F_DSAPKEY2PKCS8 134
  1218. # define EVP_F_DSA_PKEY2PKCS8 135
  1219. # define EVP_F_ECDSA_PKEY2PKCS8 129
  1220. # define EVP_F_ECKEY_PKEY2PKCS8 132
  1221. # define EVP_F_EVP_CIPHERINIT_EX 123
  1222. # define EVP_F_EVP_CIPHER_CTX_COPY 163
  1223. # define EVP_F_EVP_CIPHER_CTX_CTRL 124
  1224. # define EVP_F_EVP_CIPHER_CTX_SET_KEY_LENGTH 122
  1225. # define EVP_F_EVP_DECRYPTFINAL_EX 101
  1226. # define EVP_F_EVP_DIGESTINIT_EX 128
  1227. # define EVP_F_EVP_ENCRYPTFINAL_EX 127
  1228. # define EVP_F_EVP_MD_CTX_COPY_EX 110
  1229. # define EVP_F_EVP_MD_SIZE 162
  1230. # define EVP_F_EVP_OPENINIT 102
  1231. # define EVP_F_EVP_PBE_ALG_ADD 115
  1232. # define EVP_F_EVP_PBE_ALG_ADD_TYPE 160
  1233. # define EVP_F_EVP_PBE_CIPHERINIT 116
  1234. # define EVP_F_EVP_PKCS82PKEY 111
  1235. # define EVP_F_EVP_PKCS82PKEY_BROKEN 136
  1236. # define EVP_F_EVP_PKEY2PKCS8_BROKEN 113
  1237. # define EVP_F_EVP_PKEY_COPY_PARAMETERS 103
  1238. # define EVP_F_EVP_PKEY_CTX_CTRL 137
  1239. # define EVP_F_EVP_PKEY_CTX_CTRL_STR 150
  1240. # define EVP_F_EVP_PKEY_CTX_DUP 156
  1241. # define EVP_F_EVP_PKEY_DECRYPT 104
  1242. # define EVP_F_EVP_PKEY_DECRYPT_INIT 138
  1243. # define EVP_F_EVP_PKEY_DECRYPT_OLD 151
  1244. # define EVP_F_EVP_PKEY_DERIVE 153
  1245. # define EVP_F_EVP_PKEY_DERIVE_INIT 154
  1246. # define EVP_F_EVP_PKEY_DERIVE_SET_PEER 155
  1247. # define EVP_F_EVP_PKEY_ENCRYPT 105
  1248. # define EVP_F_EVP_PKEY_ENCRYPT_INIT 139
  1249. # define EVP_F_EVP_PKEY_ENCRYPT_OLD 152
  1250. # define EVP_F_EVP_PKEY_GET1_DH 119
  1251. # define EVP_F_EVP_PKEY_GET1_DSA 120
  1252. # define EVP_F_EVP_PKEY_GET1_ECDSA 130
  1253. # define EVP_F_EVP_PKEY_GET1_EC_KEY 131
  1254. # define EVP_F_EVP_PKEY_GET1_RSA 121
  1255. # define EVP_F_EVP_PKEY_KEYGEN 146
  1256. # define EVP_F_EVP_PKEY_KEYGEN_INIT 147
  1257. # define EVP_F_EVP_PKEY_NEW 106
  1258. # define EVP_F_EVP_PKEY_PARAMGEN 148
  1259. # define EVP_F_EVP_PKEY_PARAMGEN_INIT 149
  1260. # define EVP_F_EVP_PKEY_SIGN 140
  1261. # define EVP_F_EVP_PKEY_SIGN_INIT 141
  1262. # define EVP_F_EVP_PKEY_VERIFY 142
  1263. # define EVP_F_EVP_PKEY_VERIFY_INIT 143
  1264. # define EVP_F_EVP_PKEY_VERIFY_RECOVER 144
  1265. # define EVP_F_EVP_PKEY_VERIFY_RECOVER_INIT 145
  1266. # define EVP_F_EVP_RIJNDAEL 126
  1267. # define EVP_F_EVP_SIGNFINAL 107
  1268. # define EVP_F_EVP_VERIFYFINAL 108
  1269. # define EVP_F_FIPS_CIPHERINIT 166
  1270. # define EVP_F_FIPS_CIPHER_CTX_COPY 170
  1271. # define EVP_F_FIPS_CIPHER_CTX_CTRL 167
  1272. # define EVP_F_FIPS_CIPHER_CTX_SET_KEY_LENGTH 171
  1273. # define EVP_F_FIPS_DIGESTINIT 168
  1274. # define EVP_F_FIPS_MD_CTX_COPY 169
  1275. # define EVP_F_HMAC_INIT_EX 174
  1276. # define EVP_F_INT_CTX_NEW 157
  1277. # define EVP_F_PKCS5_PBE_KEYIVGEN 117
  1278. # define EVP_F_PKCS5_V2_PBE_KEYIVGEN 118
  1279. # define EVP_F_PKCS5_V2_PBKDF2_KEYIVGEN 164
  1280. # define EVP_F_PKCS8_SET_BROKEN 112
  1281. # define EVP_F_PKEY_SET_TYPE 158
  1282. # define EVP_F_RC2_MAGIC_TO_METH 109
  1283. # define EVP_F_RC5_CTRL 125
  1284. /* Reason codes. */
  1285. # define EVP_R_AES_IV_SETUP_FAILED 162
  1286. # define EVP_R_AES_KEY_SETUP_FAILED 143
  1287. # define EVP_R_ASN1_LIB 140
  1288. # define EVP_R_BAD_BLOCK_LENGTH 136
  1289. # define EVP_R_BAD_DECRYPT 100
  1290. # define EVP_R_BAD_KEY_LENGTH 137
  1291. # define EVP_R_BN_DECODE_ERROR 112
  1292. # define EVP_R_BN_PUBKEY_ERROR 113
  1293. # define EVP_R_BUFFER_TOO_SMALL 155
  1294. # define EVP_R_CAMELLIA_KEY_SETUP_FAILED 157
  1295. # define EVP_R_CIPHER_PARAMETER_ERROR 122
  1296. # define EVP_R_COMMAND_NOT_SUPPORTED 147
  1297. # define EVP_R_CTRL_NOT_IMPLEMENTED 132
  1298. # define EVP_R_CTRL_OPERATION_NOT_IMPLEMENTED 133
  1299. # define EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH 138
  1300. # define EVP_R_DECODE_ERROR 114
  1301. # define EVP_R_DIFFERENT_KEY_TYPES 101
  1302. # define EVP_R_DIFFERENT_PARAMETERS 153
  1303. # define EVP_R_DISABLED_FOR_FIPS 163
  1304. # define EVP_R_ENCODE_ERROR 115
  1305. # define EVP_R_ERROR_LOADING_SECTION 165
  1306. # define EVP_R_ERROR_SETTING_FIPS_MODE 166
  1307. # define EVP_R_EVP_PBE_CIPHERINIT_ERROR 119
  1308. # define EVP_R_EXPECTING_AN_RSA_KEY 127
  1309. # define EVP_R_EXPECTING_A_DH_KEY 128
  1310. # define EVP_R_EXPECTING_A_DSA_KEY 129
  1311. # define EVP_R_EXPECTING_A_ECDSA_KEY 141
  1312. # define EVP_R_EXPECTING_A_EC_KEY 142
  1313. # define EVP_R_FIPS_MODE_NOT_SUPPORTED 167
  1314. # define EVP_R_INITIALIZATION_ERROR 134
  1315. # define EVP_R_INPUT_NOT_INITIALIZED 111
  1316. # define EVP_R_INVALID_DIGEST 152
  1317. # define EVP_R_INVALID_FIPS_MODE 168
  1318. # define EVP_R_INVALID_KEY 171
  1319. # define EVP_R_INVALID_KEY_LENGTH 130
  1320. # define EVP_R_INVALID_OPERATION 148
  1321. # define EVP_R_IV_TOO_LARGE 102
  1322. # define EVP_R_KEYGEN_FAILURE 120
  1323. # define EVP_R_MESSAGE_DIGEST_IS_NULL 159
  1324. # define EVP_R_METHOD_NOT_SUPPORTED 144
  1325. # define EVP_R_MISSING_PARAMETERS 103
  1326. # define EVP_R_NO_CIPHER_SET 131
  1327. # define EVP_R_NO_DEFAULT_DIGEST 158
  1328. # define EVP_R_NO_DIGEST_SET 139
  1329. # define EVP_R_NO_DSA_PARAMETERS 116
  1330. # define EVP_R_NO_KEY_SET 154
  1331. # define EVP_R_NO_OPERATION_SET 149
  1332. # define EVP_R_NO_SIGN_FUNCTION_CONFIGURED 104
  1333. # define EVP_R_NO_VERIFY_FUNCTION_CONFIGURED 105
  1334. # define EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE 150
  1335. # define EVP_R_OPERATON_NOT_INITIALIZED 151
  1336. # define EVP_R_PKCS8_UNKNOWN_BROKEN_TYPE 117
  1337. # define EVP_R_PRIVATE_KEY_DECODE_ERROR 145
  1338. # define EVP_R_PRIVATE_KEY_ENCODE_ERROR 146
  1339. # define EVP_R_PUBLIC_KEY_NOT_RSA 106
  1340. # define EVP_R_TOO_LARGE 164
  1341. # define EVP_R_UNKNOWN_CIPHER 160
  1342. # define EVP_R_UNKNOWN_DIGEST 161
  1343. # define EVP_R_UNKNOWN_OPTION 169
  1344. # define EVP_R_UNKNOWN_PBE_ALGORITHM 121
  1345. # define EVP_R_UNSUPORTED_NUMBER_OF_ROUNDS 135
  1346. # define EVP_R_UNSUPPORTED_ALGORITHM 156
  1347. # define EVP_R_UNSUPPORTED_CIPHER 107
  1348. # define EVP_R_UNSUPPORTED_KEYLENGTH 123
  1349. # define EVP_R_UNSUPPORTED_KEY_DERIVATION_FUNCTION 124
  1350. # define EVP_R_UNSUPPORTED_KEY_SIZE 108
  1351. # define EVP_R_UNSUPPORTED_PRF 125
  1352. # define EVP_R_UNSUPPORTED_PRIVATE_KEY_ALGORITHM 118
  1353. # define EVP_R_UNSUPPORTED_SALT_TYPE 126
  1354. # define EVP_R_WRAP_MODE_NOT_ALLOWED 170
  1355. # define EVP_R_WRONG_FINAL_BLOCK_LENGTH 109
  1356. # define EVP_R_WRONG_PUBLIC_KEY_TYPE 110
  1357. # ifdef __cplusplus
  1358. }
  1359. # endif
  1360. #endif