d2i_PrivateKey.3ossl 10 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265
  1. .\" Automatically generated by Pod::Man 4.14 (Pod::Simple 3.42)
  2. .\"
  3. .\" Standard preamble:
  4. .\" ========================================================================
  5. .de Sp \" Vertical space (when we can't use .PP)
  6. .if t .sp .5v
  7. .if n .sp
  8. ..
  9. .de Vb \" Begin verbatim text
  10. .ft CW
  11. .nf
  12. .ne \\$1
  13. ..
  14. .de Ve \" End verbatim text
  15. .ft R
  16. .fi
  17. ..
  18. .\" Set up some character translations and predefined strings. \*(-- will
  19. .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
  20. .\" double quote, and \*(R" will give a right double quote. \*(C+ will
  21. .\" give a nicer C++. Capital omega is used to do unbreakable dashes and
  22. .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
  23. .\" nothing in troff, for use with C<>.
  24. .tr \(*W-
  25. .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
  26. .ie n \{\
  27. . ds -- \(*W-
  28. . ds PI pi
  29. . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
  30. . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
  31. . ds L" ""
  32. . ds R" ""
  33. . ds C` ""
  34. . ds C' ""
  35. 'br\}
  36. .el\{\
  37. . ds -- \|\(em\|
  38. . ds PI \(*p
  39. . ds L" ``
  40. . ds R" ''
  41. . ds C`
  42. . ds C'
  43. 'br\}
  44. .\"
  45. .\" Escape single quotes in literal strings from groff's Unicode transform.
  46. .ie \n(.g .ds Aq \(aq
  47. .el .ds Aq '
  48. .\"
  49. .\" If the F register is >0, we'll generate index entries on stderr for
  50. .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
  51. .\" entries marked with X<> in POD. Of course, you'll have to process the
  52. .\" output yourself in some meaningful fashion.
  53. .\"
  54. .\" Avoid warning from groff about undefined register 'F'.
  55. .de IX
  56. ..
  57. .nr rF 0
  58. .if \n(.g .if rF .nr rF 1
  59. .if (\n(rF:(\n(.g==0)) \{\
  60. . if \nF \{\
  61. . de IX
  62. . tm Index:\\$1\t\\n%\t"\\$2"
  63. ..
  64. . if !\nF==2 \{\
  65. . nr % 0
  66. . nr F 2
  67. . \}
  68. . \}
  69. .\}
  70. .rr rF
  71. .\"
  72. .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
  73. .\" Fear. Run. Save yourself. No user-serviceable parts.
  74. . \" fudge factors for nroff and troff
  75. .if n \{\
  76. . ds #H 0
  77. . ds #V .8m
  78. . ds #F .3m
  79. . ds #[ \f1
  80. . ds #] \fP
  81. .\}
  82. .if t \{\
  83. . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
  84. . ds #V .6m
  85. . ds #F 0
  86. . ds #[ \&
  87. . ds #] \&
  88. .\}
  89. . \" simple accents for nroff and troff
  90. .if n \{\
  91. . ds ' \&
  92. . ds ` \&
  93. . ds ^ \&
  94. . ds , \&
  95. . ds ~ ~
  96. . ds /
  97. .\}
  98. .if t \{\
  99. . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
  100. . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
  101. . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
  102. . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
  103. . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
  104. . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
  105. .\}
  106. . \" troff and (daisy-wheel) nroff accents
  107. .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
  108. .ds 8 \h'\*(#H'\(*b\h'-\*(#H'
  109. .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
  110. .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
  111. .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
  112. .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
  113. .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
  114. .ds ae a\h'-(\w'a'u*4/10)'e
  115. .ds Ae A\h'-(\w'A'u*4/10)'E
  116. . \" corrections for vroff
  117. .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
  118. .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
  119. . \" for low resolution devices (crt and lpr)
  120. .if \n(.H>23 .if \n(.V>19 \
  121. \{\
  122. . ds : e
  123. . ds 8 ss
  124. . ds o a
  125. . ds d- d\h'-1'\(ga
  126. . ds D- D\h'-1'\(hy
  127. . ds th \o'bp'
  128. . ds Th \o'LP'
  129. . ds ae ae
  130. . ds Ae AE
  131. .\}
  132. .rm #[ #] #H #V #F C
  133. .\" ========================================================================
  134. .\"
  135. .IX Title "D2I_PRIVATEKEY 3ossl"
  136. .TH D2I_PRIVATEKEY 3ossl "2024-09-03" "3.3.2" "OpenSSL"
  137. .\" For nroff, turn off justification. Always turn off hyphenation; it makes
  138. .\" way too many mistakes in technical documents.
  139. .if n .ad l
  140. .nh
  141. .SH "NAME"
  142. d2i_PrivateKey_ex, d2i_PrivateKey, d2i_PublicKey, d2i_KeyParams,
  143. d2i_AutoPrivateKey_ex, d2i_AutoPrivateKey, i2d_PrivateKey, i2d_PublicKey,
  144. i2d_KeyParams, i2d_KeyParams_bio, d2i_PrivateKey_ex_bio, d2i_PrivateKey_bio,
  145. d2i_PrivateKey_ex_fp, d2i_PrivateKey_fp, d2i_KeyParams_bio, i2d_PrivateKey_bio,
  146. i2d_PrivateKey_fp
  147. \&\- decode and encode functions for reading and saving EVP_PKEY structures
  148. .SH "SYNOPSIS"
  149. .IX Header "SYNOPSIS"
  150. .Vb 1
  151. \& #include <openssl/evp.h>
  152. \&
  153. \& EVP_PKEY *d2i_PrivateKey_ex(int type, EVP_PKEY **a, const unsigned char **pp,
  154. \& long length, OSSL_LIB_CTX *libctx,
  155. \& const char *propq);
  156. \& EVP_PKEY *d2i_PrivateKey(int type, EVP_PKEY **a, const unsigned char **pp,
  157. \& long length);
  158. \& EVP_PKEY *d2i_PublicKey(int type, EVP_PKEY **a, const unsigned char **pp,
  159. \& long length);
  160. \& EVP_PKEY *d2i_KeyParams(int type, EVP_PKEY **a, const unsigned char **pp,
  161. \& long length);
  162. \& EVP_PKEY *d2i_AutoPrivateKey_ex(EVP_PKEY **a, const unsigned char **pp,
  163. \& long length, OSSL_LIB_CTX *libctx,
  164. \& const char *propq);
  165. \& EVP_PKEY *d2i_AutoPrivateKey(EVP_PKEY **a, const unsigned char **pp,
  166. \& long length);
  167. \&
  168. \& int i2d_PrivateKey(const EVP_PKEY *a, unsigned char **pp);
  169. \& int i2d_PublicKey(const EVP_PKEY *a, unsigned char **pp);
  170. \& int i2d_KeyParams(const EVP_PKEY *a, unsigned char **pp);
  171. \& int i2d_KeyParams_bio(BIO *bp, const EVP_PKEY *pkey);
  172. \& EVP_PKEY *d2i_KeyParams_bio(int type, EVP_PKEY **a, BIO *in);
  173. \&
  174. \&
  175. \& #include <openssl/x509.h>
  176. \&
  177. \& EVP_PKEY *d2i_PrivateKey_ex_bio(BIO *bp, EVP_PKEY **a, OSSL_LIB_CTX *libctx,
  178. \& const char *propq);
  179. \& EVP_PKEY *d2i_PrivateKey_bio(BIO *bp, EVP_PKEY **a);
  180. \& EVP_PKEY *d2i_PrivateKey_ex_fp(FILE *fp, EVP_PKEY **a, OSSL_LIB_CTX *libctx,
  181. \& const char *propq);
  182. \& EVP_PKEY *d2i_PrivateKey_fp(FILE *fp, EVP_PKEY **a);
  183. \&
  184. \& int i2d_PrivateKey_bio(BIO *bp, const EVP_PKEY *pkey);
  185. \& int i2d_PrivateKey_fp(FILE *fp, const EVP_PKEY *pkey);
  186. .Ve
  187. .SH "DESCRIPTION"
  188. .IX Header "DESCRIPTION"
  189. \&\fBd2i_PrivateKey_ex()\fR decodes a private key using algorithm \fItype\fR. It attempts
  190. to use any key-specific format or PKCS#8 unencrypted PrivateKeyInfo format.
  191. The \fItype\fR parameter should be a public key algorithm constant such as
  192. \&\fB\s-1EVP_PKEY_RSA\s0\fR. An error occurs if the decoded key does not match \fItype\fR. Some
  193. private key decoding implementations may use cryptographic algorithms (for
  194. example to automatically derive the public key if it is not explicitly
  195. included in the encoding). In this case the supplied library context \fIlibctx\fR
  196. and property query string \fIpropq\fR are used.
  197. If successful and the \fIa\fR parameter is not \s-1NULL\s0 the function assigns the
  198. returned \fB\s-1EVP_PKEY\s0\fR structure pointer to \fI*a\fR, overwriting any previous value.
  199. .PP
  200. \&\fBd2i_PrivateKey()\fR does the same as \fBd2i_PrivateKey_ex()\fR except that the default
  201. library context and property query string are used.
  202. \&\fBd2i_PublicKey()\fR does the same for public keys.
  203. \&\fBd2i_KeyParams()\fR does the same for key parameters.
  204. .PP
  205. The \fBd2i_PrivateKey_ex_bio()\fR and \fBd2i_PrivateKey_bio()\fR functions are similar to
  206. \&\fBd2i_PrivateKey_ex()\fR and \fBd2i_PrivateKey()\fR respectively except that they decode
  207. the data read from the given \s-1BIO.\s0 The \fBd2i_PrivateKey_ex_fp()\fR and
  208. \&\fBd2i_PrivateKey_fp()\fR functions are the same except that they read the data from
  209. the given \s-1FILE.\s0
  210. .PP
  211. \&\fBd2i_AutoPrivateKey_ex()\fR and \fBd2i_AutoPrivateKey()\fR are similar to
  212. \&\fBd2i_PrivateKey_ex()\fR and \fBd2i_PrivateKey()\fR respectively except that they attempt
  213. to automatically detect the private key format.
  214. .PP
  215. \&\fBi2d_PrivateKey()\fR encodes \fIa\fR. It uses a key specific format or, if none is
  216. defined for that key type, PKCS#8 unencrypted PrivateKeyInfo format.
  217. \&\fBi2d_PublicKey()\fR does the same for public keys.
  218. \&\fBi2d_KeyParams()\fR does the same for key parameters.
  219. These functions are similar to the \fBd2i_X509()\fR functions; see \fBd2i_X509\fR\|(3).
  220. \&\fBi2d_PrivateKey_bio()\fR and \fBi2d_PrivateKey_fp()\fR do the same thing except that they
  221. encode to a \fB\s-1BIO\s0\fR or \fB\s-1FILE\s0\fR respectively. Again, these work similarly to the
  222. functions described in \fBd2i_X509\fR\|(3).
  223. .SH "NOTES"
  224. .IX Header "NOTES"
  225. All the functions that operate on data in memory update the data pointer \fI*pp\fR
  226. after a successful operation, just like the other d2i and i2d functions;
  227. see \fBd2i_X509\fR\|(3).
  228. .PP
  229. All these functions use \s-1DER\s0 format and unencrypted keys. Applications wishing
  230. to encrypt or decrypt private keys should use other functions such as
  231. \&\fBd2i_PKCS8PrivateKey()\fR instead.
  232. .PP
  233. To decode a key with type \fB\s-1EVP_PKEY_EC\s0\fR, \fBd2i_PublicKey()\fR requires \fI*a\fR to be
  234. a non-NULL \s-1EVP_PKEY\s0 structure assigned an \s-1EC_KEY\s0 structure referencing the proper
  235. \&\s-1EC_GROUP.\s0
  236. .SH "RETURN VALUES"
  237. .IX Header "RETURN VALUES"
  238. The \fBd2i_PrivateKey_ex()\fR, \fBd2i_PrivateKey()\fR, \fBd2i_AutoPrivateKey_ex()\fR,
  239. \&\fBd2i_AutoPrivateKey()\fR, \fBd2i_PrivateKey_ex_bio()\fR, \fBd2i_PrivateKey_bio()\fR,
  240. \&\fBd2i_PrivateKey_ex_fp()\fR, \fBd2i_PrivateKey_fp()\fR, \fBd2i_PublicKey()\fR, \fBd2i_KeyParams()\fR
  241. and \fBd2i_KeyParams_bio()\fR functions return a valid \fB\s-1EVP_PKEY\s0\fR structure or \s-1NULL\s0 if
  242. an error occurs. The error code can be obtained by calling \fBERR_get_error\fR\|(3).
  243. .PP
  244. \&\fBi2d_PrivateKey()\fR, \fBi2d_PublicKey()\fR and \fBi2d_KeyParams()\fR return the number of
  245. bytes successfully encoded or a negative value if an error occurs. The error
  246. code can be obtained by calling \fBERR_get_error\fR\|(3).
  247. .PP
  248. \&\fBi2d_PrivateKey_bio()\fR, \fBi2d_PrivateKey_fp()\fR and \fBi2d_KeyParams_bio()\fR return 1 if
  249. successfully encoded or zero if an error occurs.
  250. .SH "SEE ALSO"
  251. .IX Header "SEE ALSO"
  252. \&\fBcrypto\fR\|(7),
  253. \&\fBd2i_PKCS8PrivateKey_bio\fR\|(3)
  254. .SH "HISTORY"
  255. .IX Header "HISTORY"
  256. \&\fBd2i_PrivateKey_ex()\fR, \fBd2i_PrivateKey_ex_bio()\fR, \fBd2i_PrivateKey_ex_fp()\fR, and
  257. \&\fBd2i_AutoPrivateKey_ex()\fR were added in OpenSSL 3.0.
  258. .SH "COPYRIGHT"
  259. .IX Header "COPYRIGHT"
  260. Copyright 2017\-2021 The OpenSSL Project Authors. All Rights Reserved.
  261. .PP
  262. Licensed under the Apache License 2.0 (the \*(L"License\*(R"). You may not use
  263. this file except in compliance with the License. You can obtain a copy
  264. in the file \s-1LICENSE\s0 in the source distribution or at
  265. <https://www.openssl.org/source/license.html>.