openbsd/src/lib/libcrypto/man/EVP_PKEY_CTX_ctrl.3, branch OPENBSD_7_9 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9 2025-06-08T22:40:31+00:00 .Lb libcrypto ; OK tb@ 2025-06-08T22:40:31+00:00 schwarze 2025-06-08T22:40:31+00:00 urn:sha1:8be86af02fed1bda350c8dd14ee064cb66e3b0f5 Use hyphenated spelling for the SHAs except for the API 2025-04-17T14:58:09+00:00 tb 2025-04-17T14:58:09+00:00 urn:sha1:b0c22498c7b42a3f38fcccfa862a8eef97712913 The mix of SHA256 and SHA-256 is jarring, so use FIPS's spelling. Leave HMAC-SHA256 as it is and fix a nearby RIPEMD-160. Add a paragraph about HMAC because that algorithm also involves 2024-12-10T14:54:20+00:00 schwarze 2024-12-10T14:54:20+00:00 urn:sha1:47870e67919cab2f6c5b5113dfa69eeb8d750c35 parameters that can be controlled with EVP_PKEY_CTX_ctrl(3). But rather than providing a detailed despription, instead point to what application programs should use instead and explain why using the control constant directly would be a particularly bad idea in this case. Delete the manual pages EVP_PKEY_meth_new(3) and EVP_PKEY_meth_get0_info(3) 2024-12-06T14:27:49+00:00 schwarze 2024-12-06T14:27:49+00:00 urn:sha1:c3e6b1fc0bdf65b2f769949445fe2ac5953873d8 because tb@ deleted almost all functions documented there from the API in evp.h 1.127 on March 2 this year, but move the functions EVP_PKEY_CTX_set_data(3) and EVP_PKEY_CTX_get_data(3) that we still support to EVP_PKEY_keygen(3), because that page already documents EVP_PKEY_CTX_set_app_data(3) and EVP_PKEY_CTX_get_app_data(3). Fix some inaccuracies and gaps in the paragraph i wrote about CMAC 2024-11-24T14:48:12+00:00 schwarze 2024-11-24T14:48:12+00:00 urn:sha1:0728d360c0069733084919589222cffd52b67eaa such that it becomes intelligible but not too long or prominent. In particular, don't talk about EVP_PKEY_CTX_new(3), don't forget to mention EVP_PKEY_keygen(3), mention EVP_PKEY_OP_KEYGEN, and mention how to proceed once you have the desired EVP_PKEY object in hand. Substantial feedback and OK tb@. document EVP_PKEY_CTRL_SET_MAC_KEY for CMAC 2024-11-07T17:33:42+00:00 schwarze 2024-11-07T17:33:42+00:00 urn:sha1:f4f04604d9c1236b75812d04c264762669f5b7ea document EVP_PKEY_CTRL_CIPHER, providing a bit of context 2024-11-06T18:58:01+00:00 schwarze 2024-11-06T18:58:01+00:00 urn:sha1:fe1a8a9154dd09421b7791719f884edaa83a5162 document the EVP_PKEY_CTRL_MD and EVP_PKEY_CTRL_GET_MD command constants 2023-09-13T13:32:01+00:00 schwarze 2023-09-13T13:32:01+00:00 urn:sha1:fe67b4b02f58d0665c7902393e7bcaf9b2930733 In rsa.h rev. 1.45, jsing@ provided the three 2019-11-01T13:53:25+00:00 schwarze 2019-11-01T13:53:25+00:00 urn:sha1:f0d1bafcb86f580a9dbc6e043c34322a3c3c8a09 macros EVP_PKEY_CTX_set_rsa_pss_keygen_*(3); document them. Text mostly taken from the OpenSSL 1.1.1 branch, which is still under a free license, but rearranged to fit the structure of our manual pages. The EVP_PKEY_CTX_ctrl(3) manual page requires additions for RSA-PSS 2019-11-01T12:02:58+00:00 schwarze 2019-11-01T12:02:58+00:00 urn:sha1:fbb97d76023f4ba8673003591e0bebf11559971b but it is growing to excessive size, so split out RSA_pkey_ctx_ctrl(3).