EVP_PKEY_encrypt.3ossl 7.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249
  1. .\" Automatically generated by Pod::Man 4.14 (Pod::Simple 3.42)
  2. .\"
  3. .\" Standard preamble:
  4. .\" ========================================================================
  5. .de Sp \" Vertical space (when we can't use .PP)
  6. .if t .sp .5v
  7. .if n .sp
  8. ..
  9. .de Vb \" Begin verbatim text
  10. .ft CW
  11. .nf
  12. .ne \\$1
  13. ..
  14. .de Ve \" End verbatim text
  15. .ft R
  16. .fi
  17. ..
  18. .\" Set up some character translations and predefined strings. \*(-- will
  19. .\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left
  20. .\" double quote, and \*(R" will give a right double quote. \*(C+ will
  21. .\" give a nicer C++. Capital omega is used to do unbreakable dashes and
  22. .\" therefore won't be available. \*(C` and \*(C' expand to `' in nroff,
  23. .\" nothing in troff, for use with C<>.
  24. .tr \(*W-
  25. .ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
  26. .ie n \{\
  27. . ds -- \(*W-
  28. . ds PI pi
  29. . if (\n(.H=4u)&(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\" diablo 10 pitch
  30. . if (\n(.H=4u)&(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\" diablo 12 pitch
  31. . ds L" ""
  32. . ds R" ""
  33. . ds C` ""
  34. . ds C' ""
  35. 'br\}
  36. .el\{\
  37. . ds -- \|\(em\|
  38. . ds PI \(*p
  39. . ds L" ``
  40. . ds R" ''
  41. . ds C`
  42. . ds C'
  43. 'br\}
  44. .\"
  45. .\" Escape single quotes in literal strings from groff's Unicode transform.
  46. .ie \n(.g .ds Aq \(aq
  47. .el .ds Aq '
  48. .\"
  49. .\" If the F register is >0, we'll generate index entries on stderr for
  50. .\" titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
  51. .\" entries marked with X<> in POD. Of course, you'll have to process the
  52. .\" output yourself in some meaningful fashion.
  53. .\"
  54. .\" Avoid warning from groff about undefined register 'F'.
  55. .de IX
  56. ..
  57. .nr rF 0
  58. .if \n(.g .if rF .nr rF 1
  59. .if (\n(rF:(\n(.g==0)) \{\
  60. . if \nF \{\
  61. . de IX
  62. . tm Index:\\$1\t\\n%\t"\\$2"
  63. ..
  64. . if !\nF==2 \{\
  65. . nr % 0
  66. . nr F 2
  67. . \}
  68. . \}
  69. .\}
  70. .rr rF
  71. .\"
  72. .\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
  73. .\" Fear. Run. Save yourself. No user-serviceable parts.
  74. . \" fudge factors for nroff and troff
  75. .if n \{\
  76. . ds #H 0
  77. . ds #V .8m
  78. . ds #F .3m
  79. . ds #[ \f1
  80. . ds #] \fP
  81. .\}
  82. .if t \{\
  83. . ds #H ((1u-(\\\\n(.fu%2u))*.13m)
  84. . ds #V .6m
  85. . ds #F 0
  86. . ds #[ \&
  87. . ds #] \&
  88. .\}
  89. . \" simple accents for nroff and troff
  90. .if n \{\
  91. . ds ' \&
  92. . ds ` \&
  93. . ds ^ \&
  94. . ds , \&
  95. . ds ~ ~
  96. . ds /
  97. .\}
  98. .if t \{\
  99. . ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h"|\\n:u"
  100. . ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
  101. . ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
  102. . ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
  103. . ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
  104. . ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
  105. .\}
  106. . \" troff and (daisy-wheel) nroff accents
  107. .ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
  108. .ds 8 \h'\*(#H'\(*b\h'-\*(#H'
  109. .ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
  110. .ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
  111. .ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
  112. .ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
  113. .ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
  114. .ds ae a\h'-(\w'a'u*4/10)'e
  115. .ds Ae A\h'-(\w'A'u*4/10)'E
  116. . \" corrections for vroff
  117. .if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
  118. .if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
  119. . \" for low resolution devices (crt and lpr)
  120. .if \n(.H>23 .if \n(.V>19 \
  121. \{\
  122. . ds : e
  123. . ds 8 ss
  124. . ds o a
  125. . ds d- d\h'-1'\(ga
  126. . ds D- D\h'-1'\(hy
  127. . ds th \o'bp'
  128. . ds Th \o'LP'
  129. . ds ae ae
  130. . ds Ae AE
  131. .\}
  132. .rm #[ #] #H #V #F C
  133. .\" ========================================================================
  134. .\"
  135. .IX Title "EVP_PKEY_ENCRYPT 3ossl"
  136. .TH EVP_PKEY_ENCRYPT 3ossl "2024-09-03" "3.3.2" "OpenSSL"
  137. .\" For nroff, turn off justification. Always turn off hyphenation; it makes
  138. .\" way too many mistakes in technical documents.
  139. .if n .ad l
  140. .nh
  141. .SH "NAME"
  142. EVP_PKEY_encrypt_init_ex,
  143. EVP_PKEY_encrypt_init, EVP_PKEY_encrypt \- encrypt using a public key algorithm
  144. .SH "SYNOPSIS"
  145. .IX Header "SYNOPSIS"
  146. .Vb 1
  147. \& #include <openssl/evp.h>
  148. \&
  149. \& int EVP_PKEY_encrypt_init(EVP_PKEY_CTX *ctx);
  150. \& int EVP_PKEY_encrypt_init_ex(EVP_PKEY_CTX *ctx, const OSSL_PARAM params[]);
  151. \& int EVP_PKEY_encrypt(EVP_PKEY_CTX *ctx,
  152. \& unsigned char *out, size_t *outlen,
  153. \& const unsigned char *in, size_t inlen);
  154. .Ve
  155. .SH "DESCRIPTION"
  156. .IX Header "DESCRIPTION"
  157. The \fBEVP_PKEY_encrypt_init()\fR function initializes a public key algorithm
  158. context using key \fBpkey\fR for an encryption operation.
  159. .PP
  160. The \fBEVP_PKEY_encrypt_init_ex()\fR function initializes a public key algorithm
  161. context using key \fBpkey\fR for an encryption operation and sets the
  162. algorithm specific \fBparams\fR.
  163. .PP
  164. The \fBEVP_PKEY_encrypt()\fR function performs a public key encryption operation
  165. using \fBctx\fR. The data to be encrypted is specified using the \fBin\fR and
  166. \&\fBinlen\fR parameters. If \fBout\fR is \fB\s-1NULL\s0\fR then the maximum size of the output
  167. buffer is written to the \fBoutlen\fR parameter. If \fBout\fR is not \fB\s-1NULL\s0\fR then
  168. before the call the \fBoutlen\fR parameter should contain the length of the
  169. \&\fBout\fR buffer, if the call is successful the encrypted data is written to
  170. \&\fBout\fR and the amount of data written to \fBoutlen\fR.
  171. .SH "NOTES"
  172. .IX Header "NOTES"
  173. After the call to \fBEVP_PKEY_encrypt_init()\fR algorithm specific control
  174. operations can be performed to set any appropriate parameters for the
  175. operation. These operations can be included in the \fBEVP_PKEY_encrypt_init_ex()\fR
  176. call.
  177. .PP
  178. The function \fBEVP_PKEY_encrypt()\fR can be called more than once on the same
  179. context if several operations are performed using the same parameters.
  180. .SH "RETURN VALUES"
  181. .IX Header "RETURN VALUES"
  182. \&\fBEVP_PKEY_encrypt_init()\fR, \fBEVP_PKEY_encrypt_init_ex()\fR and \fBEVP_PKEY_encrypt()\fR
  183. return 1 for success and 0 or a negative value for failure. In particular a
  184. return value of \-2 indicates the operation is not supported by the public key
  185. algorithm.
  186. .SH "EXAMPLES"
  187. .IX Header "EXAMPLES"
  188. Encrypt data using \s-1OAEP\s0 (for \s-1RSA\s0 keys). See also \fBPEM_read_PUBKEY\fR\|(3) or
  189. \&\fBd2i_X509\fR\|(3) for means to load a public key. You may also simply
  190. set 'eng = \s-1NULL\s0;' to start with the default OpenSSL \s-1RSA\s0 implementation:
  191. .PP
  192. .Vb 3
  193. \& #include <openssl/evp.h>
  194. \& #include <openssl/rsa.h>
  195. \& #include <openssl/engine.h>
  196. \&
  197. \& EVP_PKEY_CTX *ctx;
  198. \& ENGINE *eng;
  199. \& unsigned char *out, *in;
  200. \& size_t outlen, inlen;
  201. \& EVP_PKEY *key;
  202. \&
  203. \& /*
  204. \& * NB: assumes eng, key, in, inlen are already set up,
  205. \& * and that key is an RSA public key
  206. \& */
  207. \& ctx = EVP_PKEY_CTX_new(key, eng);
  208. \& if (!ctx)
  209. \& /* Error occurred */
  210. \& if (EVP_PKEY_encrypt_init(ctx) <= 0)
  211. \& /* Error */
  212. \& if (EVP_PKEY_CTX_set_rsa_padding(ctx, RSA_PKCS1_OAEP_PADDING) <= 0)
  213. \& /* Error */
  214. \&
  215. \& /* Determine buffer length */
  216. \& if (EVP_PKEY_encrypt(ctx, NULL, &outlen, in, inlen) <= 0)
  217. \& /* Error */
  218. \&
  219. \& out = OPENSSL_malloc(outlen);
  220. \&
  221. \& if (!out)
  222. \& /* malloc failure */
  223. \&
  224. \& if (EVP_PKEY_encrypt(ctx, out, &outlen, in, inlen) <= 0)
  225. \& /* Error */
  226. \&
  227. \& /* Encrypted data is outlen bytes written to buffer out */
  228. .Ve
  229. .SH "SEE ALSO"
  230. .IX Header "SEE ALSO"
  231. \&\fBd2i_X509\fR\|(3),
  232. \&\fBENGINE_by_id\fR\|(3),
  233. \&\fBEVP_PKEY_CTX_new\fR\|(3),
  234. \&\fBEVP_PKEY_decrypt\fR\|(3),
  235. \&\fBEVP_PKEY_sign\fR\|(3),
  236. \&\fBEVP_PKEY_verify\fR\|(3),
  237. \&\fBEVP_PKEY_verify_recover\fR\|(3),
  238. \&\fBEVP_PKEY_derive\fR\|(3)
  239. .SH "HISTORY"
  240. .IX Header "HISTORY"
  241. These functions were added in OpenSSL 1.0.0.
  242. .SH "COPYRIGHT"
  243. .IX Header "COPYRIGHT"
  244. Copyright 2006\-2021 The OpenSSL Project Authors. All Rights Reserved.
  245. .PP
  246. Licensed under the Apache License 2.0 (the \*(L"License\*(R"). You may not use
  247. this file except in compliance with the License. You can obtain a copy
  248. in the file \s-1LICENSE\s0 in the source distribution or at
  249. <https://www.openssl.org/source/license.html>.