summaryrefslogtreecommitdiff
path: root/src/lib/libcrypto/evp/evp.h
diff options
context:
space:
mode:
authorcvs2svn <admin@example.com>2015-08-02 21:54:22 +0000
committercvs2svn <admin@example.com>2015-08-02 21:54:22 +0000
commited3760bf4be4a96a89233fb8f8b84a0d44725862 (patch)
tree5609c82060f75c53af0a7641d9b33a88574876cd /src/lib/libcrypto/evp/evp.h
parentf8b563fb5ba1524c821d37308f4e6abfc866bc3f (diff)
downloadopenbsd-OPENBSD_5_8_BASE.tar.gz
openbsd-OPENBSD_5_8_BASE.tar.bz2
openbsd-OPENBSD_5_8_BASE.zip
This commit was manufactured by cvs2git to create tag 'OPENBSD_5_8_BASE'.OPENBSD_5_8_BASE
Diffstat (limited to 'src/lib/libcrypto/evp/evp.h')
-rw-r--r--src/lib/libcrypto/evp/evp.h1495
1 files changed, 0 insertions, 1495 deletions
diff --git a/src/lib/libcrypto/evp/evp.h b/src/lib/libcrypto/evp/evp.h
deleted file mode 100644
index 57f8753ced..0000000000
--- a/src/lib/libcrypto/evp/evp.h
+++ /dev/null
@@ -1,1495 +0,0 @@
1/* $OpenBSD: evp.h,v 1.45 2015/06/20 01:07:24 doug Exp $ */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved.
4 *
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
8 *
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to. The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code. The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15 *
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
22 *
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
25 * are met:
26 * 1. Redistributions of source code must retain the copyright
27 * notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 * notice, this list of conditions and the following disclaimer in the
30 * documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 * must display the following acknowledgement:
33 * "This product includes cryptographic software written by
34 * Eric Young (eay@cryptsoft.com)"
35 * The word 'cryptographic' can be left out if the rouines from the library
36 * being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 * the apps directory (application code) you must include an acknowledgement:
39 * "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40 *
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51 * SUCH DAMAGE.
52 *
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed. i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
57 */
58
59#ifndef HEADER_ENVELOPE_H
60#define HEADER_ENVELOPE_H
61
62#include <openssl/opensslconf.h>
63
64#include <openssl/ossl_typ.h>
65
66#ifndef OPENSSL_NO_BIO
67#include <openssl/bio.h>
68#endif
69
70/*
71#define EVP_RC2_KEY_SIZE 16
72#define EVP_RC4_KEY_SIZE 16
73#define EVP_BLOWFISH_KEY_SIZE 16
74#define EVP_CAST5_KEY_SIZE 16
75#define EVP_RC5_32_12_16_KEY_SIZE 16
76*/
77#define EVP_MAX_MD_SIZE 64 /* longest known is SHA512 */
78#define EVP_MAX_KEY_LENGTH 64
79#define EVP_MAX_IV_LENGTH 16
80#define EVP_MAX_BLOCK_LENGTH 32
81
82#define PKCS5_SALT_LEN 8
83/* Default PKCS#5 iteration count */
84#define PKCS5_DEFAULT_ITER 2048
85
86#include <openssl/objects.h>
87
88#define EVP_PK_RSA 0x0001
89#define EVP_PK_DSA 0x0002
90#define EVP_PK_DH 0x0004
91#define EVP_PK_EC 0x0008
92#define EVP_PKT_SIGN 0x0010
93#define EVP_PKT_ENC 0x0020
94#define EVP_PKT_EXCH 0x0040
95#define EVP_PKS_RSA 0x0100
96#define EVP_PKS_DSA 0x0200
97#define EVP_PKS_EC 0x0400
98#define EVP_PKT_EXP 0x1000 /* <= 512 bit key */
99
100#define EVP_PKEY_NONE NID_undef
101#define EVP_PKEY_RSA NID_rsaEncryption
102#define EVP_PKEY_RSA2 NID_rsa
103#define EVP_PKEY_DSA NID_dsa
104#define EVP_PKEY_DSA1 NID_dsa_2
105#define EVP_PKEY_DSA2 NID_dsaWithSHA
106#define EVP_PKEY_DSA3 NID_dsaWithSHA1
107#define EVP_PKEY_DSA4 NID_dsaWithSHA1_2
108#define EVP_PKEY_DH NID_dhKeyAgreement
109#define EVP_PKEY_EC NID_X9_62_id_ecPublicKey
110#define EVP_PKEY_GOSTR01 NID_id_GostR3410_2001
111#define EVP_PKEY_GOSTIMIT NID_id_Gost28147_89_MAC
112#define EVP_PKEY_HMAC NID_hmac
113#define EVP_PKEY_CMAC NID_cmac
114#define EVP_PKEY_GOSTR12_256 NID_id_tc26_gost3410_2012_256
115#define EVP_PKEY_GOSTR12_512 NID_id_tc26_gost3410_2012_512
116
117#ifdef __cplusplus
118extern "C" {
119#endif
120
121/* Type needs to be a bit field
122 * Sub-type needs to be for variations on the method, as in, can it do
123 * arbitrary encryption.... */
124struct evp_pkey_st {
125 int type;
126 int save_type;
127 int references;
128 const EVP_PKEY_ASN1_METHOD *ameth;
129 ENGINE *engine;
130 union {
131 char *ptr;
132#ifndef OPENSSL_NO_RSA
133 struct rsa_st *rsa; /* RSA */
134#endif
135#ifndef OPENSSL_NO_DSA
136 struct dsa_st *dsa; /* DSA */
137#endif
138#ifndef OPENSSL_NO_DH
139 struct dh_st *dh; /* DH */
140#endif
141#ifndef OPENSSL_NO_EC
142 struct ec_key_st *ec; /* ECC */
143#endif
144#ifndef OPENSSL_NO_GOST
145 struct gost_key_st *gost; /* GOST */
146#endif
147 } pkey;
148 int save_parameters;
149 STACK_OF(X509_ATTRIBUTE) *attributes; /* [ 0 ] */
150} /* EVP_PKEY */;
151
152#define EVP_PKEY_MO_SIGN 0x0001
153#define EVP_PKEY_MO_VERIFY 0x0002
154#define EVP_PKEY_MO_ENCRYPT 0x0004
155#define EVP_PKEY_MO_DECRYPT 0x0008
156
157typedef int evp_sign_method(int type, const unsigned char *m,
158 unsigned int m_length, unsigned char *sigret, unsigned int *siglen,
159 void *key);
160typedef int evp_verify_method(int type, const unsigned char *m,
161 unsigned int m_length, const unsigned char *sigbuf, unsigned int siglen,
162 void *key);
163
164#ifndef EVP_MD
165struct env_md_st {
166 int type;
167 int pkey_type;
168 int md_size;
169 unsigned long flags;
170 int (*init)(EVP_MD_CTX *ctx);
171 int (*update)(EVP_MD_CTX *ctx, const void *data, size_t count);
172 int (*final)(EVP_MD_CTX *ctx, unsigned char *md);
173 int (*copy)(EVP_MD_CTX *to, const EVP_MD_CTX *from);
174 int (*cleanup)(EVP_MD_CTX *ctx);
175
176 evp_sign_method *sign;
177 evp_verify_method *verify;
178 int required_pkey_type[5]; /*EVP_PKEY_xxx */
179 int block_size;
180 int ctx_size; /* how big does the ctx->md_data need to be */
181 /* control function */
182 int (*md_ctrl)(EVP_MD_CTX *ctx, int cmd, int p1, void *p2);
183} /* EVP_MD */;
184
185#define EVP_MD_FLAG_ONESHOT 0x0001 /* digest can only handle a single
186 * block */
187
188#define EVP_MD_FLAG_PKEY_DIGEST 0x0002 /* digest is a "clone" digest used
189 * which is a copy of an existing
190 * one for a specific public key type.
191 * EVP_dss1() etc */
192
193/* Digest uses EVP_PKEY_METHOD for signing instead of MD specific signing */
194
195#define EVP_MD_FLAG_PKEY_METHOD_SIGNATURE 0x0004
196
197/* DigestAlgorithmIdentifier flags... */
198
199#define EVP_MD_FLAG_DIGALGID_MASK 0x0018
200
201/* NULL or absent parameter accepted. Use NULL */
202
203#define EVP_MD_FLAG_DIGALGID_NULL 0x0000
204
205/* NULL or absent parameter accepted. Use NULL for PKCS#1 otherwise absent */
206
207#define EVP_MD_FLAG_DIGALGID_ABSENT 0x0008
208
209/* Custom handling via ctrl */
210
211#define EVP_MD_FLAG_DIGALGID_CUSTOM 0x0018
212
213#define EVP_MD_FLAG_FIPS 0x0400 /* Note if suitable for use in FIPS mode */
214
215/* Digest ctrls */
216
217#define EVP_MD_CTRL_DIGALGID 0x1
218#define EVP_MD_CTRL_MICALG 0x2
219#define EVP_MD_CTRL_SET_KEY 0x3
220#define EVP_MD_CTRL_GOST_SET_SBOX 0x4
221
222/* Minimum Algorithm specific ctrl value */
223
224#define EVP_MD_CTRL_ALG_CTRL 0x1000
225
226#define EVP_PKEY_NULL_method NULL,NULL,{0,0,0,0}
227
228#ifndef OPENSSL_NO_DSA
229#define EVP_PKEY_DSA_method (evp_sign_method *)DSA_sign, \
230 (evp_verify_method *)DSA_verify, \
231 {EVP_PKEY_DSA,EVP_PKEY_DSA2,EVP_PKEY_DSA3, \
232 EVP_PKEY_DSA4,0}
233#else
234#define EVP_PKEY_DSA_method EVP_PKEY_NULL_method
235#endif
236
237#ifndef OPENSSL_NO_ECDSA
238#define EVP_PKEY_ECDSA_method (evp_sign_method *)ECDSA_sign, \
239 (evp_verify_method *)ECDSA_verify, \
240 {EVP_PKEY_EC,0,0,0}
241#else
242#define EVP_PKEY_ECDSA_method EVP_PKEY_NULL_method
243#endif
244
245#ifndef OPENSSL_NO_RSA
246#define EVP_PKEY_RSA_method (evp_sign_method *)RSA_sign, \
247 (evp_verify_method *)RSA_verify, \
248 {EVP_PKEY_RSA,EVP_PKEY_RSA2,0,0}
249#define EVP_PKEY_RSA_ASN1_OCTET_STRING_method \
250 (evp_sign_method *)RSA_sign_ASN1_OCTET_STRING, \
251 (evp_verify_method *)RSA_verify_ASN1_OCTET_STRING, \
252 {EVP_PKEY_RSA,EVP_PKEY_RSA2,0,0}
253#else
254#define EVP_PKEY_RSA_method EVP_PKEY_NULL_method
255#define EVP_PKEY_RSA_ASN1_OCTET_STRING_method EVP_PKEY_NULL_method
256#endif
257
258#endif /* !EVP_MD */
259
260struct env_md_ctx_st {
261 const EVP_MD *digest;
262 ENGINE *engine; /* functional reference if 'digest' is ENGINE-provided */
263 unsigned long flags;
264 void *md_data;
265 /* Public key context for sign/verify */
266 EVP_PKEY_CTX *pctx;
267 /* Update function: usually copied from EVP_MD */
268 int (*update)(EVP_MD_CTX *ctx, const void *data, size_t count);
269} /* EVP_MD_CTX */;
270
271/* values for EVP_MD_CTX flags */
272
273#define EVP_MD_CTX_FLAG_ONESHOT 0x0001 /* digest update will be called
274 * once only */
275#define EVP_MD_CTX_FLAG_CLEANED 0x0002 /* context has already been
276 * cleaned */
277#define EVP_MD_CTX_FLAG_REUSE 0x0004 /* Don't free up ctx->md_data
278 * in EVP_MD_CTX_cleanup */
279/* FIPS and pad options are ignored in 1.0.0, definitions are here
280 * so we don't accidentally reuse the values for other purposes.
281 */
282
283#define EVP_MD_CTX_FLAG_NON_FIPS_ALLOW 0x0008 /* Allow use of non FIPS digest
284 * in FIPS mode */
285
286/* The following PAD options are also currently ignored in 1.0.0, digest
287 * parameters are handled through EVP_DigestSign*() and EVP_DigestVerify*()
288 * instead.
289 */
290#define EVP_MD_CTX_FLAG_PAD_MASK 0xF0 /* RSA mode to use */
291#define EVP_MD_CTX_FLAG_PAD_PKCS1 0x00 /* PKCS#1 v1.5 mode */
292#define EVP_MD_CTX_FLAG_PAD_X931 0x10 /* X9.31 mode */
293#define EVP_MD_CTX_FLAG_PAD_PSS 0x20 /* PSS mode */
294
295#define EVP_MD_CTX_FLAG_NO_INIT 0x0100 /* Don't initialize md_data */
296
297struct evp_cipher_st {
298 int nid;
299 int block_size;
300 int key_len; /* Default value for variable length ciphers */
301 int iv_len;
302 unsigned long flags; /* Various flags */
303 int (*init)(EVP_CIPHER_CTX *ctx, const unsigned char *key,
304 const unsigned char *iv, int enc); /* init key */
305 int (*do_cipher)(EVP_CIPHER_CTX *ctx, unsigned char *out,
306 const unsigned char *in, size_t inl);/* encrypt/decrypt data */
307 int (*cleanup)(EVP_CIPHER_CTX *); /* cleanup ctx */
308 int ctx_size; /* how big ctx->cipher_data needs to be */
309 int (*set_asn1_parameters)(EVP_CIPHER_CTX *, ASN1_TYPE *); /* Populate a ASN1_TYPE with parameters */
310 int (*get_asn1_parameters)(EVP_CIPHER_CTX *, ASN1_TYPE *); /* Get parameters from a ASN1_TYPE */
311 int (*ctrl)(EVP_CIPHER_CTX *, int type, int arg, void *ptr); /* Miscellaneous operations */
312 void *app_data; /* Application data */
313} /* EVP_CIPHER */;
314
315/* Values for cipher flags */
316
317/* Modes for ciphers */
318
319#define EVP_CIPH_STREAM_CIPHER 0x0
320#define EVP_CIPH_ECB_MODE 0x1
321#define EVP_CIPH_CBC_MODE 0x2
322#define EVP_CIPH_CFB_MODE 0x3
323#define EVP_CIPH_OFB_MODE 0x4
324#define EVP_CIPH_CTR_MODE 0x5
325#define EVP_CIPH_GCM_MODE 0x6
326#define EVP_CIPH_CCM_MODE 0x7
327#define EVP_CIPH_XTS_MODE 0x10001
328#define EVP_CIPH_MODE 0xF0007
329/* Set if variable length cipher */
330#define EVP_CIPH_VARIABLE_LENGTH 0x8
331/* Set if the iv handling should be done by the cipher itself */
332#define EVP_CIPH_CUSTOM_IV 0x10
333/* Set if the cipher's init() function should be called if key is NULL */
334#define EVP_CIPH_ALWAYS_CALL_INIT 0x20
335/* Call ctrl() to init cipher parameters */
336#define EVP_CIPH_CTRL_INIT 0x40
337/* Don't use standard key length function */
338#define EVP_CIPH_CUSTOM_KEY_LENGTH 0x80
339/* Don't use standard block padding */
340#define EVP_CIPH_NO_PADDING 0x100
341/* cipher handles random key generation */
342#define EVP_CIPH_RAND_KEY 0x200
343/* cipher has its own additional copying logic */
344#define EVP_CIPH_CUSTOM_COPY 0x400
345/* Allow use default ASN1 get/set iv */
346#define EVP_CIPH_FLAG_DEFAULT_ASN1 0x1000
347/* Buffer length in bits not bytes: CFB1 mode only */
348#define EVP_CIPH_FLAG_LENGTH_BITS 0x2000
349/* Note if suitable for use in FIPS mode */
350#define EVP_CIPH_FLAG_FIPS 0x4000
351/* Allow non FIPS cipher in FIPS mode */
352#define EVP_CIPH_FLAG_NON_FIPS_ALLOW 0x8000
353/* Cipher handles any and all padding logic as well
354 * as finalisation.
355 */
356#define EVP_CIPH_FLAG_CUSTOM_CIPHER 0x100000
357#define EVP_CIPH_FLAG_AEAD_CIPHER 0x200000
358
359/* ctrl() values */
360
361#define EVP_CTRL_INIT 0x0
362#define EVP_CTRL_SET_KEY_LENGTH 0x1
363#define EVP_CTRL_GET_RC2_KEY_BITS 0x2
364#define EVP_CTRL_SET_RC2_KEY_BITS 0x3
365#define EVP_CTRL_GET_RC5_ROUNDS 0x4
366#define EVP_CTRL_SET_RC5_ROUNDS 0x5
367#define EVP_CTRL_RAND_KEY 0x6
368#define EVP_CTRL_PBE_PRF_NID 0x7
369#define EVP_CTRL_COPY 0x8
370#define EVP_CTRL_GCM_SET_IVLEN 0x9
371#define EVP_CTRL_GCM_GET_TAG 0x10
372#define EVP_CTRL_GCM_SET_TAG 0x11
373#define EVP_CTRL_GCM_SET_IV_FIXED 0x12
374#define EVP_CTRL_GCM_IV_GEN 0x13
375#define EVP_CTRL_CCM_SET_IVLEN EVP_CTRL_GCM_SET_IVLEN
376#define EVP_CTRL_CCM_GET_TAG EVP_CTRL_GCM_GET_TAG
377#define EVP_CTRL_CCM_SET_TAG EVP_CTRL_GCM_SET_TAG
378#define EVP_CTRL_CCM_SET_L 0x14
379#define EVP_CTRL_CCM_SET_MSGLEN 0x15
380/* AEAD cipher deduces payload length and returns number of bytes
381 * required to store MAC and eventual padding. Subsequent call to
382 * EVP_Cipher even appends/verifies MAC.
383 */
384#define EVP_CTRL_AEAD_TLS1_AAD 0x16
385/* Used by composite AEAD ciphers, no-op in GCM, CCM... */
386#define EVP_CTRL_AEAD_SET_MAC_KEY 0x17
387/* Set the GCM invocation field, decrypt only */
388#define EVP_CTRL_GCM_SET_IV_INV 0x18
389/* Set the S-BOX NID for GOST ciphers */
390#define EVP_CTRL_GOST_SET_SBOX 0x19
391
392/* GCM TLS constants */
393/* Length of fixed part of IV derived from PRF */
394#define EVP_GCM_TLS_FIXED_IV_LEN 4
395/* Length of explicit part of IV part of TLS records */
396#define EVP_GCM_TLS_EXPLICIT_IV_LEN 8
397/* Length of tag for TLS */
398#define EVP_GCM_TLS_TAG_LEN 16
399
400typedef struct evp_cipher_info_st {
401 const EVP_CIPHER *cipher;
402 unsigned char iv[EVP_MAX_IV_LENGTH];
403} EVP_CIPHER_INFO;
404
405struct evp_cipher_ctx_st {
406 const EVP_CIPHER *cipher;
407 ENGINE *engine; /* functional reference if 'cipher' is ENGINE-provided */
408 int encrypt; /* encrypt or decrypt */
409 int buf_len; /* number we have left */
410
411 unsigned char oiv[EVP_MAX_IV_LENGTH]; /* original iv */
412 unsigned char iv[EVP_MAX_IV_LENGTH]; /* working iv */
413 unsigned char buf[EVP_MAX_BLOCK_LENGTH];/* saved partial block */
414 int num; /* used by cfb/ofb/ctr mode */
415
416 void *app_data; /* application stuff */
417 int key_len; /* May change for variable length cipher */
418 unsigned long flags; /* Various flags */
419 void *cipher_data; /* per EVP data */
420 int final_used;
421 int block_mask;
422 unsigned char final[EVP_MAX_BLOCK_LENGTH];/* possible final block */
423} /* EVP_CIPHER_CTX */;
424
425typedef struct evp_Encode_Ctx_st {
426 int num; /* number saved in a partial encode/decode */
427 int length; /* The length is either the output line length
428 * (in input bytes) or the shortest input line
429 * length that is ok. Once decoding begins,
430 * the length is adjusted up each time a longer
431 * line is decoded */
432 unsigned char enc_data[80]; /* data to encode */
433 int line_num; /* number read on current line */
434 int expect_nl;
435} EVP_ENCODE_CTX;
436
437/* Password based encryption function */
438typedef int (EVP_PBE_KEYGEN)(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
439 ASN1_TYPE *param, const EVP_CIPHER *cipher, const EVP_MD *md, int en_de);
440
441#ifndef OPENSSL_NO_RSA
442#define EVP_PKEY_assign_RSA(pkey,rsa) EVP_PKEY_assign((pkey),EVP_PKEY_RSA,\
443 (char *)(rsa))
444#endif
445
446#ifndef OPENSSL_NO_DSA
447#define EVP_PKEY_assign_DSA(pkey,dsa) EVP_PKEY_assign((pkey),EVP_PKEY_DSA,\
448 (char *)(dsa))
449#endif
450
451#ifndef OPENSSL_NO_DH
452#define EVP_PKEY_assign_DH(pkey,dh) EVP_PKEY_assign((pkey),EVP_PKEY_DH,\
453 (char *)(dh))
454#endif
455
456#ifndef OPENSSL_NO_EC
457#define EVP_PKEY_assign_EC_KEY(pkey,eckey) EVP_PKEY_assign((pkey),EVP_PKEY_EC,\
458 (char *)(eckey))
459#endif
460
461#ifndef OPENSSL_NO_GOST
462#define EVP_PKEY_assign_GOST(pkey,gostkey) EVP_PKEY_assign((pkey),EVP_PKEY_GOSTR01,\
463 (char *)(gostkey))
464#endif
465
466/* Add some extra combinations */
467#define EVP_get_digestbynid(a) EVP_get_digestbyname(OBJ_nid2sn(a))
468#define EVP_get_digestbyobj(a) EVP_get_digestbynid(OBJ_obj2nid(a))
469#define EVP_get_cipherbynid(a) EVP_get_cipherbyname(OBJ_nid2sn(a))
470#define EVP_get_cipherbyobj(a) EVP_get_cipherbynid(OBJ_obj2nid(a))
471
472int EVP_MD_type(const EVP_MD *md);
473#define EVP_MD_nid(e) EVP_MD_type(e)
474#define EVP_MD_name(e) OBJ_nid2sn(EVP_MD_nid(e))
475int EVP_MD_pkey_type(const EVP_MD *md);
476int EVP_MD_size(const EVP_MD *md);
477int EVP_MD_block_size(const EVP_MD *md);
478unsigned long EVP_MD_flags(const EVP_MD *md);
479
480const EVP_MD *EVP_MD_CTX_md(const EVP_MD_CTX *ctx);
481#define EVP_MD_CTX_size(e) EVP_MD_size(EVP_MD_CTX_md(e))
482#define EVP_MD_CTX_block_size(e) EVP_MD_block_size(EVP_MD_CTX_md(e))
483#define EVP_MD_CTX_type(e) EVP_MD_type(EVP_MD_CTX_md(e))
484
485int EVP_CIPHER_nid(const EVP_CIPHER *cipher);
486#define EVP_CIPHER_name(e) OBJ_nid2sn(EVP_CIPHER_nid(e))
487int EVP_CIPHER_block_size(const EVP_CIPHER *cipher);
488int EVP_CIPHER_key_length(const EVP_CIPHER *cipher);
489int EVP_CIPHER_iv_length(const EVP_CIPHER *cipher);
490unsigned long EVP_CIPHER_flags(const EVP_CIPHER *cipher);
491#define EVP_CIPHER_mode(e) (EVP_CIPHER_flags(e) & EVP_CIPH_MODE)
492
493const EVP_CIPHER * EVP_CIPHER_CTX_cipher(const EVP_CIPHER_CTX *ctx);
494int EVP_CIPHER_CTX_nid(const EVP_CIPHER_CTX *ctx);
495int EVP_CIPHER_CTX_block_size(const EVP_CIPHER_CTX *ctx);
496int EVP_CIPHER_CTX_key_length(const EVP_CIPHER_CTX *ctx);
497int EVP_CIPHER_CTX_iv_length(const EVP_CIPHER_CTX *ctx);
498int EVP_CIPHER_CTX_copy(EVP_CIPHER_CTX *out, const EVP_CIPHER_CTX *in);
499void * EVP_CIPHER_CTX_get_app_data(const EVP_CIPHER_CTX *ctx);
500void EVP_CIPHER_CTX_set_app_data(EVP_CIPHER_CTX *ctx, void *data);
501#define EVP_CIPHER_CTX_type(c) EVP_CIPHER_type(EVP_CIPHER_CTX_cipher(c))
502unsigned long EVP_CIPHER_CTX_flags(const EVP_CIPHER_CTX *ctx);
503#define EVP_CIPHER_CTX_mode(e) (EVP_CIPHER_CTX_flags(e) & EVP_CIPH_MODE)
504
505#define EVP_ENCODE_LENGTH(l) (((l+2)/3*4)+(l/48+1)*2+80)
506#define EVP_DECODE_LENGTH(l) ((l+3)/4*3+80)
507
508#define EVP_SignInit_ex(a,b,c) EVP_DigestInit_ex(a,b,c)
509#define EVP_SignInit(a,b) EVP_DigestInit(a,b)
510#define EVP_SignUpdate(a,b,c) EVP_DigestUpdate(a,b,c)
511#define EVP_VerifyInit_ex(a,b,c) EVP_DigestInit_ex(a,b,c)
512#define EVP_VerifyInit(a,b) EVP_DigestInit(a,b)
513#define EVP_VerifyUpdate(a,b,c) EVP_DigestUpdate(a,b,c)
514#define EVP_OpenUpdate(a,b,c,d,e) EVP_DecryptUpdate(a,b,c,d,e)
515#define EVP_SealUpdate(a,b,c,d,e) EVP_EncryptUpdate(a,b,c,d,e)
516#define EVP_DigestSignUpdate(a,b,c) EVP_DigestUpdate(a,b,c)
517#define EVP_DigestVerifyUpdate(a,b,c) EVP_DigestUpdate(a,b,c)
518
519#define BIO_set_md(b,md) BIO_ctrl(b,BIO_C_SET_MD,0,(char *)md)
520#define BIO_get_md(b,mdp) BIO_ctrl(b,BIO_C_GET_MD,0,(char *)mdp)
521#define BIO_get_md_ctx(b,mdcp) BIO_ctrl(b,BIO_C_GET_MD_CTX,0,(char *)mdcp)
522#define BIO_set_md_ctx(b,mdcp) BIO_ctrl(b,BIO_C_SET_MD_CTX,0,(char *)mdcp)
523#define BIO_get_cipher_status(b) BIO_ctrl(b,BIO_C_GET_CIPHER_STATUS,0,NULL)
524#define BIO_get_cipher_ctx(b,c_pp) BIO_ctrl(b,BIO_C_GET_CIPHER_CTX,0,(char *)c_pp)
525
526int EVP_Cipher(EVP_CIPHER_CTX *c, unsigned char *out, const unsigned char *in,
527 unsigned int inl);
528
529#define EVP_add_cipher_alias(n,alias) \
530 OBJ_NAME_add((alias),OBJ_NAME_TYPE_CIPHER_METH|OBJ_NAME_ALIAS,(n))
531#define EVP_add_digest_alias(n,alias) \
532 OBJ_NAME_add((alias),OBJ_NAME_TYPE_MD_METH|OBJ_NAME_ALIAS,(n))
533#define EVP_delete_cipher_alias(alias) \
534 OBJ_NAME_remove(alias,OBJ_NAME_TYPE_CIPHER_METH|OBJ_NAME_ALIAS);
535#define EVP_delete_digest_alias(alias) \
536 OBJ_NAME_remove(alias,OBJ_NAME_TYPE_MD_METH|OBJ_NAME_ALIAS);
537
538void EVP_MD_CTX_init(EVP_MD_CTX *ctx);
539int EVP_MD_CTX_cleanup(EVP_MD_CTX *ctx);
540EVP_MD_CTX *EVP_MD_CTX_create(void);
541void EVP_MD_CTX_destroy(EVP_MD_CTX *ctx);
542int EVP_MD_CTX_copy_ex(EVP_MD_CTX *out, const EVP_MD_CTX *in);
543void EVP_MD_CTX_set_flags(EVP_MD_CTX *ctx, int flags);
544void EVP_MD_CTX_clear_flags(EVP_MD_CTX *ctx, int flags);
545int EVP_MD_CTX_ctrl(EVP_MD_CTX *ctx, int type, int arg, void *ptr);
546int EVP_MD_CTX_test_flags(const EVP_MD_CTX *ctx, int flags);
547int EVP_DigestInit_ex(EVP_MD_CTX *ctx, const EVP_MD *type, ENGINE *impl);
548int EVP_DigestUpdate(EVP_MD_CTX *ctx, const void *d, size_t cnt);
549int EVP_DigestFinal_ex(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *s);
550int EVP_Digest(const void *data, size_t count, unsigned char *md,
551 unsigned int *size, const EVP_MD *type, ENGINE *impl);
552
553int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
554int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
555int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *s);
556
557int EVP_read_pw_string(char *buf, int length, const char *prompt, int verify);
558int EVP_read_pw_string_min(char *buf, int minlen, int maxlen,
559 const char *prompt, int verify);
560void EVP_set_pw_prompt(const char *prompt);
561char *EVP_get_pw_prompt(void);
562
563int EVP_BytesToKey(const EVP_CIPHER *type, const EVP_MD *md,
564 const unsigned char *salt, const unsigned char *data, int datal, int count,
565 unsigned char *key, unsigned char *iv);
566
567void EVP_CIPHER_CTX_set_flags(EVP_CIPHER_CTX *ctx, int flags);
568void EVP_CIPHER_CTX_clear_flags(EVP_CIPHER_CTX *ctx, int flags);
569int EVP_CIPHER_CTX_test_flags(const EVP_CIPHER_CTX *ctx, int flags);
570
571int EVP_EncryptInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
572 const unsigned char *key, const unsigned char *iv);
573int EVP_EncryptInit_ex(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
574 ENGINE *impl, const unsigned char *key, const unsigned char *iv);
575int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
576 const unsigned char *in, int inl);
577int EVP_EncryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
578int EVP_EncryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
579
580int EVP_DecryptInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
581 const unsigned char *key, const unsigned char *iv);
582int EVP_DecryptInit_ex(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
583 ENGINE *impl, const unsigned char *key, const unsigned char *iv);
584int EVP_DecryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
585 const unsigned char *in, int inl);
586int EVP_DecryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *outm, int *outl);
587int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *outm, int *outl);
588
589int EVP_CipherInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
590 const unsigned char *key, const unsigned char *iv, int enc);
591int EVP_CipherInit_ex(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
592 ENGINE *impl, const unsigned char *key, const unsigned char *iv, int enc);
593int EVP_CipherUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
594 const unsigned char *in, int inl);
595int EVP_CipherFinal(EVP_CIPHER_CTX *ctx, unsigned char *outm, int *outl);
596int EVP_CipherFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *outm, int *outl);
597
598int EVP_SignFinal(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *s,
599 EVP_PKEY *pkey);
600
601int EVP_VerifyFinal(EVP_MD_CTX *ctx, const unsigned char *sigbuf,
602 unsigned int siglen, EVP_PKEY *pkey);
603
604int EVP_DigestSignInit(EVP_MD_CTX *ctx, EVP_PKEY_CTX **pctx,
605 const EVP_MD *type, ENGINE *e, EVP_PKEY *pkey);
606int EVP_DigestSignFinal(EVP_MD_CTX *ctx, unsigned char *sigret, size_t *siglen);
607
608int EVP_DigestVerifyInit(EVP_MD_CTX *ctx, EVP_PKEY_CTX **pctx,
609 const EVP_MD *type, ENGINE *e, EVP_PKEY *pkey);
610int EVP_DigestVerifyFinal(EVP_MD_CTX *ctx, unsigned char *sig, size_t siglen);
611
612int EVP_OpenInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
613 const unsigned char *ek, int ekl, const unsigned char *iv, EVP_PKEY *priv);
614int EVP_OpenFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
615
616int EVP_SealInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
617 unsigned char **ek, int *ekl, unsigned char *iv, EVP_PKEY **pubk,
618 int npubk);
619int EVP_SealFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
620
621void EVP_EncodeInit(EVP_ENCODE_CTX *ctx);
622void EVP_EncodeUpdate(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl,
623 const unsigned char *in, int inl);
624void EVP_EncodeFinal(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl);
625int EVP_EncodeBlock(unsigned char *t, const unsigned char *f, int n);
626
627void EVP_DecodeInit(EVP_ENCODE_CTX *ctx);
628int EVP_DecodeUpdate(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl,
629 const unsigned char *in, int inl);
630int EVP_DecodeFinal(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl);
631int EVP_DecodeBlock(unsigned char *t, const unsigned char *f, int n);
632
633void EVP_CIPHER_CTX_init(EVP_CIPHER_CTX *a);
634int EVP_CIPHER_CTX_cleanup(EVP_CIPHER_CTX *a);
635EVP_CIPHER_CTX *EVP_CIPHER_CTX_new(void);
636void EVP_CIPHER_CTX_free(EVP_CIPHER_CTX *a);
637int EVP_CIPHER_CTX_set_key_length(EVP_CIPHER_CTX *x, int keylen);
638int EVP_CIPHER_CTX_set_padding(EVP_CIPHER_CTX *c, int pad);
639int EVP_CIPHER_CTX_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void *ptr);
640int EVP_CIPHER_CTX_rand_key(EVP_CIPHER_CTX *ctx, unsigned char *key);
641
642#ifndef OPENSSL_NO_BIO
643BIO_METHOD *BIO_f_md(void);
644BIO_METHOD *BIO_f_base64(void);
645BIO_METHOD *BIO_f_cipher(void);
646void BIO_set_cipher(BIO *b, const EVP_CIPHER *c, const unsigned char *k,
647 const unsigned char *i, int enc);
648#endif
649
650const EVP_MD *EVP_md_null(void);
651#ifndef OPENSSL_NO_MD4
652const EVP_MD *EVP_md4(void);
653#endif
654#ifndef OPENSSL_NO_MD5
655const EVP_MD *EVP_md5(void);
656#endif
657#ifndef OPENSSL_NO_SHA
658const EVP_MD *EVP_sha(void);
659const EVP_MD *EVP_sha1(void);
660const EVP_MD *EVP_dss(void);
661const EVP_MD *EVP_dss1(void);
662const EVP_MD *EVP_ecdsa(void);
663#endif
664#ifndef OPENSSL_NO_SHA256
665const EVP_MD *EVP_sha224(void);
666const EVP_MD *EVP_sha256(void);
667#endif
668#ifndef OPENSSL_NO_SHA512
669const EVP_MD *EVP_sha384(void);
670const EVP_MD *EVP_sha512(void);
671#endif
672#ifndef OPENSSL_NO_RIPEMD
673const EVP_MD *EVP_ripemd160(void);
674#endif
675#ifndef OPENSSL_NO_WHIRLPOOL
676const EVP_MD *EVP_whirlpool(void);
677#endif
678#ifndef OPENSSL_NO_GOST
679const EVP_MD *EVP_gostr341194(void);
680const EVP_MD *EVP_gost2814789imit(void);
681const EVP_MD *EVP_streebog256(void);
682const EVP_MD *EVP_streebog512(void);
683#endif
684const EVP_CIPHER *EVP_enc_null(void); /* does nothing :-) */
685#ifndef OPENSSL_NO_DES
686const EVP_CIPHER *EVP_des_ecb(void);
687const EVP_CIPHER *EVP_des_ede(void);
688const EVP_CIPHER *EVP_des_ede3(void);
689const EVP_CIPHER *EVP_des_ede_ecb(void);
690const EVP_CIPHER *EVP_des_ede3_ecb(void);
691const EVP_CIPHER *EVP_des_cfb64(void);
692# define EVP_des_cfb EVP_des_cfb64
693const EVP_CIPHER *EVP_des_cfb1(void);
694const EVP_CIPHER *EVP_des_cfb8(void);
695const EVP_CIPHER *EVP_des_ede_cfb64(void);
696# define EVP_des_ede_cfb EVP_des_ede_cfb64
697const EVP_CIPHER *EVP_des_ede3_cfb64(void);
698# define EVP_des_ede3_cfb EVP_des_ede3_cfb64
699const EVP_CIPHER *EVP_des_ede3_cfb1(void);
700const EVP_CIPHER *EVP_des_ede3_cfb8(void);
701const EVP_CIPHER *EVP_des_ofb(void);
702const EVP_CIPHER *EVP_des_ede_ofb(void);
703const EVP_CIPHER *EVP_des_ede3_ofb(void);
704const EVP_CIPHER *EVP_des_cbc(void);
705const EVP_CIPHER *EVP_des_ede_cbc(void);
706const EVP_CIPHER *EVP_des_ede3_cbc(void);
707const EVP_CIPHER *EVP_desx_cbc(void);
708#endif
709#ifndef OPENSSL_NO_RC4
710const EVP_CIPHER *EVP_rc4(void);
711const EVP_CIPHER *EVP_rc4_40(void);
712#ifndef OPENSSL_NO_MD5
713const EVP_CIPHER *EVP_rc4_hmac_md5(void);
714#endif
715#endif
716#ifndef OPENSSL_NO_IDEA
717const EVP_CIPHER *EVP_idea_ecb(void);
718const EVP_CIPHER *EVP_idea_cfb64(void);
719# define EVP_idea_cfb EVP_idea_cfb64
720const EVP_CIPHER *EVP_idea_ofb(void);
721const EVP_CIPHER *EVP_idea_cbc(void);
722#endif
723#ifndef OPENSSL_NO_RC2
724const EVP_CIPHER *EVP_rc2_ecb(void);
725const EVP_CIPHER *EVP_rc2_cbc(void);
726const EVP_CIPHER *EVP_rc2_40_cbc(void);
727const EVP_CIPHER *EVP_rc2_64_cbc(void);
728const EVP_CIPHER *EVP_rc2_cfb64(void);
729# define EVP_rc2_cfb EVP_rc2_cfb64
730const EVP_CIPHER *EVP_rc2_ofb(void);
731#endif
732#ifndef OPENSSL_NO_BF
733const EVP_CIPHER *EVP_bf_ecb(void);
734const EVP_CIPHER *EVP_bf_cbc(void);
735const EVP_CIPHER *EVP_bf_cfb64(void);
736# define EVP_bf_cfb EVP_bf_cfb64
737const EVP_CIPHER *EVP_bf_ofb(void);
738#endif
739#ifndef OPENSSL_NO_CAST
740const EVP_CIPHER *EVP_cast5_ecb(void);
741const EVP_CIPHER *EVP_cast5_cbc(void);
742const EVP_CIPHER *EVP_cast5_cfb64(void);
743# define EVP_cast5_cfb EVP_cast5_cfb64
744const EVP_CIPHER *EVP_cast5_ofb(void);
745#endif
746#ifndef OPENSSL_NO_AES
747const EVP_CIPHER *EVP_aes_128_ecb(void);
748const EVP_CIPHER *EVP_aes_128_cbc(void);
749const EVP_CIPHER *EVP_aes_128_cfb1(void);
750const EVP_CIPHER *EVP_aes_128_cfb8(void);
751const EVP_CIPHER *EVP_aes_128_cfb128(void);
752# define EVP_aes_128_cfb EVP_aes_128_cfb128
753const EVP_CIPHER *EVP_aes_128_ofb(void);
754const EVP_CIPHER *EVP_aes_128_ctr(void);
755const EVP_CIPHER *EVP_aes_128_ccm(void);
756const EVP_CIPHER *EVP_aes_128_gcm(void);
757const EVP_CIPHER *EVP_aes_128_xts(void);
758const EVP_CIPHER *EVP_aes_192_ecb(void);
759const EVP_CIPHER *EVP_aes_192_cbc(void);
760const EVP_CIPHER *EVP_aes_192_cfb1(void);
761const EVP_CIPHER *EVP_aes_192_cfb8(void);
762const EVP_CIPHER *EVP_aes_192_cfb128(void);
763# define EVP_aes_192_cfb EVP_aes_192_cfb128
764const EVP_CIPHER *EVP_aes_192_ofb(void);
765const EVP_CIPHER *EVP_aes_192_ctr(void);
766const EVP_CIPHER *EVP_aes_192_ccm(void);
767const EVP_CIPHER *EVP_aes_192_gcm(void);
768const EVP_CIPHER *EVP_aes_256_ecb(void);
769const EVP_CIPHER *EVP_aes_256_cbc(void);
770const EVP_CIPHER *EVP_aes_256_cfb1(void);
771const EVP_CIPHER *EVP_aes_256_cfb8(void);
772const EVP_CIPHER *EVP_aes_256_cfb128(void);
773# define EVP_aes_256_cfb EVP_aes_256_cfb128
774const EVP_CIPHER *EVP_aes_256_ofb(void);
775const EVP_CIPHER *EVP_aes_256_ctr(void);
776const EVP_CIPHER *EVP_aes_256_ccm(void);
777const EVP_CIPHER *EVP_aes_256_gcm(void);
778const EVP_CIPHER *EVP_aes_256_xts(void);
779#if !defined(OPENSSL_NO_SHA) && !defined(OPENSSL_NO_SHA1)
780const EVP_CIPHER *EVP_aes_128_cbc_hmac_sha1(void);
781const EVP_CIPHER *EVP_aes_256_cbc_hmac_sha1(void);
782#endif
783#endif
784#ifndef OPENSSL_NO_CAMELLIA
785const EVP_CIPHER *EVP_camellia_128_ecb(void);
786const EVP_CIPHER *EVP_camellia_128_cbc(void);
787const EVP_CIPHER *EVP_camellia_128_cfb1(void);
788const EVP_CIPHER *EVP_camellia_128_cfb8(void);
789const EVP_CIPHER *EVP_camellia_128_cfb128(void);
790# define EVP_camellia_128_cfb EVP_camellia_128_cfb128
791const EVP_CIPHER *EVP_camellia_128_ofb(void);
792const EVP_CIPHER *EVP_camellia_192_ecb(void);
793const EVP_CIPHER *EVP_camellia_192_cbc(void);
794const EVP_CIPHER *EVP_camellia_192_cfb1(void);
795const EVP_CIPHER *EVP_camellia_192_cfb8(void);
796const EVP_CIPHER *EVP_camellia_192_cfb128(void);
797# define EVP_camellia_192_cfb EVP_camellia_192_cfb128
798const EVP_CIPHER *EVP_camellia_192_ofb(void);
799const EVP_CIPHER *EVP_camellia_256_ecb(void);
800const EVP_CIPHER *EVP_camellia_256_cbc(void);
801const EVP_CIPHER *EVP_camellia_256_cfb1(void);
802const EVP_CIPHER *EVP_camellia_256_cfb8(void);
803const EVP_CIPHER *EVP_camellia_256_cfb128(void);
804# define EVP_camellia_256_cfb EVP_camellia_256_cfb128
805const EVP_CIPHER *EVP_camellia_256_ofb(void);
806#endif
807
808#ifndef OPENSSL_NO_CHACHA
809const EVP_CIPHER *EVP_chacha20(void);
810#endif
811
812#ifndef OPENSSL_NO_GOST
813const EVP_CIPHER *EVP_gost2814789_ecb(void);
814const EVP_CIPHER *EVP_gost2814789_cfb64(void);
815const EVP_CIPHER *EVP_gost2814789_cnt(void);
816#endif
817
818void OPENSSL_add_all_algorithms_noconf(void);
819void OPENSSL_add_all_algorithms_conf(void);
820
821#ifdef OPENSSL_LOAD_CONF
822#define OpenSSL_add_all_algorithms() OPENSSL_add_all_algorithms_conf()
823#else
824#define OpenSSL_add_all_algorithms() OPENSSL_add_all_algorithms_noconf()
825#endif
826
827void OpenSSL_add_all_ciphers(void);
828void OpenSSL_add_all_digests(void);
829
830#define SSLeay_add_all_algorithms() OpenSSL_add_all_algorithms()
831#define SSLeay_add_all_ciphers() OpenSSL_add_all_ciphers()
832#define SSLeay_add_all_digests() OpenSSL_add_all_digests()
833
834int EVP_add_cipher(const EVP_CIPHER *cipher);
835int EVP_add_digest(const EVP_MD *digest);
836
837const EVP_CIPHER *EVP_get_cipherbyname(const char *name);
838const EVP_MD *EVP_get_digestbyname(const char *name);
839void EVP_cleanup(void);
840
841void EVP_CIPHER_do_all(void (*fn)(const EVP_CIPHER *ciph, const char *from,
842 const char *to, void *x), void *arg);
843void EVP_CIPHER_do_all_sorted(void (*fn)(const EVP_CIPHER *ciph,
844 const char *from, const char *to, void *x), void *arg);
845
846void EVP_MD_do_all(void (*fn)(const EVP_MD *ciph, const char *from,
847 const char *to, void *x), void *arg);
848void EVP_MD_do_all_sorted(void (*fn)(const EVP_MD *ciph, const char *from,
849 const char *to, void *x), void *arg);
850
851int EVP_PKEY_decrypt_old(unsigned char *dec_key, const unsigned char *enc_key,
852 int enc_key_len, EVP_PKEY *private_key);
853int EVP_PKEY_encrypt_old(unsigned char *enc_key, const unsigned char *key,
854 int key_len, EVP_PKEY *pub_key);
855int EVP_PKEY_type(int type);
856int EVP_PKEY_id(const EVP_PKEY *pkey);
857int EVP_PKEY_base_id(const EVP_PKEY *pkey);
858int EVP_PKEY_bits(EVP_PKEY *pkey);
859int EVP_PKEY_size(EVP_PKEY *pkey);
860int EVP_PKEY_set_type(EVP_PKEY *pkey, int type);
861int EVP_PKEY_set_type_str(EVP_PKEY *pkey, const char *str, int len);
862int EVP_PKEY_assign(EVP_PKEY *pkey, int type, void *key);
863void *EVP_PKEY_get0(EVP_PKEY *pkey);
864
865#ifndef OPENSSL_NO_RSA
866struct rsa_st;
867int EVP_PKEY_set1_RSA(EVP_PKEY *pkey, struct rsa_st *key);
868struct rsa_st *EVP_PKEY_get1_RSA(EVP_PKEY *pkey);
869#endif
870#ifndef OPENSSL_NO_DSA
871struct dsa_st;
872int EVP_PKEY_set1_DSA(EVP_PKEY *pkey, struct dsa_st *key);
873struct dsa_st *EVP_PKEY_get1_DSA(EVP_PKEY *pkey);
874#endif
875#ifndef OPENSSL_NO_DH
876struct dh_st;
877int EVP_PKEY_set1_DH(EVP_PKEY *pkey, struct dh_st *key);
878struct dh_st *EVP_PKEY_get1_DH(EVP_PKEY *pkey);
879#endif
880#ifndef OPENSSL_NO_EC
881struct ec_key_st;
882int EVP_PKEY_set1_EC_KEY(EVP_PKEY *pkey, struct ec_key_st *key);
883struct ec_key_st *EVP_PKEY_get1_EC_KEY(EVP_PKEY *pkey);
884#endif
885#ifndef OPENSSL_NO_GOST
886struct gost_key_st;
887#endif
888
889EVP_PKEY *EVP_PKEY_new(void);
890void EVP_PKEY_free(EVP_PKEY *pkey);
891
892EVP_PKEY *d2i_PublicKey(int type, EVP_PKEY **a, const unsigned char **pp,
893 long length);
894int i2d_PublicKey(EVP_PKEY *a, unsigned char **pp);
895
896EVP_PKEY *d2i_PrivateKey(int type, EVP_PKEY **a, const unsigned char **pp,
897 long length);
898EVP_PKEY *d2i_AutoPrivateKey(EVP_PKEY **a, const unsigned char **pp,
899 long length);
900int i2d_PrivateKey(EVP_PKEY *a, unsigned char **pp);
901
902int EVP_PKEY_copy_parameters(EVP_PKEY *to, const EVP_PKEY *from);
903int EVP_PKEY_missing_parameters(const EVP_PKEY *pkey);
904int EVP_PKEY_save_parameters(EVP_PKEY *pkey, int mode);
905int EVP_PKEY_cmp_parameters(const EVP_PKEY *a, const EVP_PKEY *b);
906
907int EVP_PKEY_cmp(const EVP_PKEY *a, const EVP_PKEY *b);
908
909int EVP_PKEY_print_public(BIO *out, const EVP_PKEY *pkey, int indent,
910 ASN1_PCTX *pctx);
911int EVP_PKEY_print_private(BIO *out, const EVP_PKEY *pkey, int indent,
912 ASN1_PCTX *pctx);
913int EVP_PKEY_print_params(BIO *out, const EVP_PKEY *pkey, int indent,
914 ASN1_PCTX *pctx);
915
916int EVP_PKEY_get_default_digest_nid(EVP_PKEY *pkey, int *pnid);
917
918int EVP_CIPHER_type(const EVP_CIPHER *ctx);
919
920/* calls methods */
921int EVP_CIPHER_param_to_asn1(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
922int EVP_CIPHER_asn1_to_param(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
923
924/* These are used by EVP_CIPHER methods */
925int EVP_CIPHER_set_asn1_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
926int EVP_CIPHER_get_asn1_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
927
928/* PKCS5 password based encryption */
929int PKCS5_PBE_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
930 ASN1_TYPE *param, const EVP_CIPHER *cipher, const EVP_MD *md, int en_de);
931int PKCS5_PBKDF2_HMAC_SHA1(const char *pass, int passlen,
932 const unsigned char *salt, int saltlen, int iter, int keylen,
933 unsigned char *out);
934int PKCS5_PBKDF2_HMAC(const char *pass, int passlen, const unsigned char *salt,
935 int saltlen, int iter, const EVP_MD *digest, int keylen,
936 unsigned char *out);
937int PKCS5_v2_PBE_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
938 ASN1_TYPE *param, const EVP_CIPHER *cipher, const EVP_MD *md,
939 int en_de);
940
941void PKCS5_PBE_add(void);
942
943int EVP_PBE_CipherInit (ASN1_OBJECT *pbe_obj, const char *pass, int passlen,
944 ASN1_TYPE *param, EVP_CIPHER_CTX *ctx, int en_de);
945
946/* PBE type */
947
948/* Can appear as the outermost AlgorithmIdentifier */
949#define EVP_PBE_TYPE_OUTER 0x0
950/* Is an PRF type OID */
951#define EVP_PBE_TYPE_PRF 0x1
952
953int EVP_PBE_alg_add_type(int pbe_type, int pbe_nid, int cipher_nid, int md_nid,
954 EVP_PBE_KEYGEN *keygen);
955int EVP_PBE_alg_add(int nid, const EVP_CIPHER *cipher, const EVP_MD *md,
956 EVP_PBE_KEYGEN *keygen);
957int EVP_PBE_find(int type, int pbe_nid, int *pcnid, int *pmnid,
958 EVP_PBE_KEYGEN **pkeygen);
959void EVP_PBE_cleanup(void);
960
961#define ASN1_PKEY_ALIAS 0x1
962#define ASN1_PKEY_DYNAMIC 0x2
963#define ASN1_PKEY_SIGPARAM_NULL 0x4
964
965#define ASN1_PKEY_CTRL_PKCS7_SIGN 0x1
966#define ASN1_PKEY_CTRL_PKCS7_ENCRYPT 0x2
967#define ASN1_PKEY_CTRL_DEFAULT_MD_NID 0x3
968#define ASN1_PKEY_CTRL_CMS_SIGN 0x5
969#define ASN1_PKEY_CTRL_CMS_ENVELOPE 0x7
970
971int EVP_PKEY_asn1_get_count(void);
972const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_get0(int idx);
973const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_find(ENGINE **pe, int type);
974const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_find_str(ENGINE **pe,
975 const char *str, int len);
976int EVP_PKEY_asn1_add0(const EVP_PKEY_ASN1_METHOD *ameth);
977int EVP_PKEY_asn1_add_alias(int to, int from);
978int EVP_PKEY_asn1_get0_info(int *ppkey_id, int *pkey_base_id, int *ppkey_flags,
979 const char **pinfo, const char **ppem_str,
980 const EVP_PKEY_ASN1_METHOD *ameth);
981
982const EVP_PKEY_ASN1_METHOD* EVP_PKEY_get0_asn1(EVP_PKEY *pkey);
983EVP_PKEY_ASN1_METHOD* EVP_PKEY_asn1_new(int id, int flags, const char *pem_str,
984 const char *info);
985void EVP_PKEY_asn1_copy(EVP_PKEY_ASN1_METHOD *dst,
986 const EVP_PKEY_ASN1_METHOD *src);
987void EVP_PKEY_asn1_free(EVP_PKEY_ASN1_METHOD *ameth);
988void EVP_PKEY_asn1_set_public(EVP_PKEY_ASN1_METHOD *ameth,
989 int (*pub_decode)(EVP_PKEY *pk, X509_PUBKEY *pub),
990 int (*pub_encode)(X509_PUBKEY *pub, const EVP_PKEY *pk),
991 int (*pub_cmp)(const EVP_PKEY *a, const EVP_PKEY *b),
992 int (*pub_print)(BIO *out, const EVP_PKEY *pkey, int indent,
993 ASN1_PCTX *pctx),
994 int (*pkey_size)(const EVP_PKEY *pk),
995 int (*pkey_bits)(const EVP_PKEY *pk));
996void EVP_PKEY_asn1_set_private(EVP_PKEY_ASN1_METHOD *ameth,
997 int (*priv_decode)(EVP_PKEY *pk, PKCS8_PRIV_KEY_INFO *p8inf),
998 int (*priv_encode)(PKCS8_PRIV_KEY_INFO *p8, const EVP_PKEY *pk),
999 int (*priv_print)(BIO *out, const EVP_PKEY *pkey, int indent,
1000 ASN1_PCTX *pctx));
1001void EVP_PKEY_asn1_set_param(EVP_PKEY_ASN1_METHOD *ameth,
1002 int (*param_decode)(EVP_PKEY *pkey, const unsigned char **pder, int derlen),
1003 int (*param_encode)(const EVP_PKEY *pkey, unsigned char **pder),
1004 int (*param_missing)(const EVP_PKEY *pk),
1005 int (*param_copy)(EVP_PKEY *to, const EVP_PKEY *from),
1006 int (*param_cmp)(const EVP_PKEY *a, const EVP_PKEY *b),
1007 int (*param_print)(BIO *out, const EVP_PKEY *pkey, int indent,
1008 ASN1_PCTX *pctx));
1009
1010void EVP_PKEY_asn1_set_free(EVP_PKEY_ASN1_METHOD *ameth,
1011 void (*pkey_free)(EVP_PKEY *pkey));
1012void EVP_PKEY_asn1_set_ctrl(EVP_PKEY_ASN1_METHOD *ameth,
1013 int (*pkey_ctrl)(EVP_PKEY *pkey, int op, long arg1, void *arg2));
1014
1015#define EVP_PKEY_OP_UNDEFINED 0
1016#define EVP_PKEY_OP_PARAMGEN (1<<1)
1017#define EVP_PKEY_OP_KEYGEN (1<<2)
1018#define EVP_PKEY_OP_SIGN (1<<3)
1019#define EVP_PKEY_OP_VERIFY (1<<4)
1020#define EVP_PKEY_OP_VERIFYRECOVER (1<<5)
1021#define EVP_PKEY_OP_SIGNCTX (1<<6)
1022#define EVP_PKEY_OP_VERIFYCTX (1<<7)
1023#define EVP_PKEY_OP_ENCRYPT (1<<8)
1024#define EVP_PKEY_OP_DECRYPT (1<<9)
1025#define EVP_PKEY_OP_DERIVE (1<<10)
1026
1027#define EVP_PKEY_OP_TYPE_SIG \
1028 (EVP_PKEY_OP_SIGN | EVP_PKEY_OP_VERIFY | EVP_PKEY_OP_VERIFYRECOVER \
1029 | EVP_PKEY_OP_SIGNCTX | EVP_PKEY_OP_VERIFYCTX)
1030
1031#define EVP_PKEY_OP_TYPE_CRYPT \
1032 (EVP_PKEY_OP_ENCRYPT | EVP_PKEY_OP_DECRYPT)
1033
1034#define EVP_PKEY_OP_TYPE_NOGEN \
1035 (EVP_PKEY_OP_SIG | EVP_PKEY_OP_CRYPT | EVP_PKEY_OP_DERIVE)
1036
1037#define EVP_PKEY_OP_TYPE_GEN \
1038 (EVP_PKEY_OP_PARAMGEN | EVP_PKEY_OP_KEYGEN)
1039
1040#define EVP_PKEY_CTX_set_signature_md(ctx, md) \
1041 EVP_PKEY_CTX_ctrl(ctx, -1, EVP_PKEY_OP_TYPE_SIG, \
1042 EVP_PKEY_CTRL_MD, 0, (void *)md)
1043
1044#define EVP_PKEY_CTRL_MD 1
1045#define EVP_PKEY_CTRL_PEER_KEY 2
1046
1047#define EVP_PKEY_CTRL_PKCS7_ENCRYPT 3
1048#define EVP_PKEY_CTRL_PKCS7_DECRYPT 4
1049
1050#define EVP_PKEY_CTRL_PKCS7_SIGN 5
1051
1052#define EVP_PKEY_CTRL_SET_MAC_KEY 6
1053
1054#define EVP_PKEY_CTRL_DIGESTINIT 7
1055
1056/* Used by GOST key encryption in TLS */
1057#define EVP_PKEY_CTRL_SET_IV 8
1058
1059#define EVP_PKEY_CTRL_CMS_ENCRYPT 9
1060#define EVP_PKEY_CTRL_CMS_DECRYPT 10
1061#define EVP_PKEY_CTRL_CMS_SIGN 11
1062
1063#define EVP_PKEY_CTRL_CIPHER 12
1064
1065#define EVP_PKEY_ALG_CTRL 0x1000
1066
1067
1068#define EVP_PKEY_FLAG_AUTOARGLEN 2
1069/* Method handles all operations: don't assume any digest related
1070 * defaults.
1071 */
1072#define EVP_PKEY_FLAG_SIGCTX_CUSTOM 4
1073
1074const EVP_PKEY_METHOD *EVP_PKEY_meth_find(int type);
1075EVP_PKEY_METHOD* EVP_PKEY_meth_new(int id, int flags);
1076void EVP_PKEY_meth_get0_info(int *ppkey_id, int *pflags,
1077 const EVP_PKEY_METHOD *meth);
1078void EVP_PKEY_meth_copy(EVP_PKEY_METHOD *dst, const EVP_PKEY_METHOD *src);
1079void EVP_PKEY_meth_free(EVP_PKEY_METHOD *pmeth);
1080int EVP_PKEY_meth_add0(const EVP_PKEY_METHOD *pmeth);
1081
1082EVP_PKEY_CTX *EVP_PKEY_CTX_new(EVP_PKEY *pkey, ENGINE *e);
1083EVP_PKEY_CTX *EVP_PKEY_CTX_new_id(int id, ENGINE *e);
1084EVP_PKEY_CTX *EVP_PKEY_CTX_dup(EVP_PKEY_CTX *ctx);
1085void EVP_PKEY_CTX_free(EVP_PKEY_CTX *ctx);
1086
1087int EVP_PKEY_CTX_ctrl(EVP_PKEY_CTX *ctx, int keytype, int optype, int cmd,
1088 int p1, void *p2);
1089int EVP_PKEY_CTX_ctrl_str(EVP_PKEY_CTX *ctx, const char *type,
1090 const char *value);
1091
1092int EVP_PKEY_CTX_get_operation(EVP_PKEY_CTX *ctx);
1093void EVP_PKEY_CTX_set0_keygen_info(EVP_PKEY_CTX *ctx, int *dat, int datlen);
1094
1095EVP_PKEY *EVP_PKEY_new_mac_key(int type, ENGINE *e, const unsigned char *key,
1096 int keylen);
1097
1098void EVP_PKEY_CTX_set_data(EVP_PKEY_CTX *ctx, void *data);
1099void *EVP_PKEY_CTX_get_data(EVP_PKEY_CTX *ctx);
1100EVP_PKEY *EVP_PKEY_CTX_get0_pkey(EVP_PKEY_CTX *ctx);
1101
1102EVP_PKEY *EVP_PKEY_CTX_get0_peerkey(EVP_PKEY_CTX *ctx);
1103
1104void EVP_PKEY_CTX_set_app_data(EVP_PKEY_CTX *ctx, void *data);
1105void *EVP_PKEY_CTX_get_app_data(EVP_PKEY_CTX *ctx);
1106
1107int EVP_PKEY_sign_init(EVP_PKEY_CTX *ctx);
1108int EVP_PKEY_sign(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
1109 const unsigned char *tbs, size_t tbslen);
1110int EVP_PKEY_verify_init(EVP_PKEY_CTX *ctx);
1111int EVP_PKEY_verify(EVP_PKEY_CTX *ctx, const unsigned char *sig, size_t siglen,
1112 const unsigned char *tbs, size_t tbslen);
1113int EVP_PKEY_verify_recover_init(EVP_PKEY_CTX *ctx);
1114int EVP_PKEY_verify_recover(EVP_PKEY_CTX *ctx, unsigned char *rout,
1115 size_t *routlen, const unsigned char *sig, size_t siglen);
1116int EVP_PKEY_encrypt_init(EVP_PKEY_CTX *ctx);
1117int EVP_PKEY_encrypt(EVP_PKEY_CTX *ctx, unsigned char *out, size_t *outlen,
1118 const unsigned char *in, size_t inlen);
1119int EVP_PKEY_decrypt_init(EVP_PKEY_CTX *ctx);
1120int EVP_PKEY_decrypt(EVP_PKEY_CTX *ctx, unsigned char *out, size_t *outlen,
1121 const unsigned char *in, size_t inlen);
1122
1123int EVP_PKEY_derive_init(EVP_PKEY_CTX *ctx);
1124int EVP_PKEY_derive_set_peer(EVP_PKEY_CTX *ctx, EVP_PKEY *peer);
1125int EVP_PKEY_derive(EVP_PKEY_CTX *ctx, unsigned char *key, size_t *keylen);
1126
1127typedef int EVP_PKEY_gen_cb(EVP_PKEY_CTX *ctx);
1128
1129int EVP_PKEY_paramgen_init(EVP_PKEY_CTX *ctx);
1130int EVP_PKEY_paramgen(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey);
1131int EVP_PKEY_keygen_init(EVP_PKEY_CTX *ctx);
1132int EVP_PKEY_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey);
1133
1134void EVP_PKEY_CTX_set_cb(EVP_PKEY_CTX *ctx, EVP_PKEY_gen_cb *cb);
1135EVP_PKEY_gen_cb *EVP_PKEY_CTX_get_cb(EVP_PKEY_CTX *ctx);
1136
1137int EVP_PKEY_CTX_get_keygen_info(EVP_PKEY_CTX *ctx, int idx);
1138
1139void EVP_PKEY_meth_set_init(EVP_PKEY_METHOD *pmeth,
1140 int (*init)(EVP_PKEY_CTX *ctx));
1141
1142void EVP_PKEY_meth_set_copy(EVP_PKEY_METHOD *pmeth,
1143 int (*copy)(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src));
1144
1145void EVP_PKEY_meth_set_cleanup(EVP_PKEY_METHOD *pmeth,
1146 void (*cleanup)(EVP_PKEY_CTX *ctx));
1147
1148void EVP_PKEY_meth_set_paramgen(EVP_PKEY_METHOD *pmeth,
1149 int (*paramgen_init)(EVP_PKEY_CTX *ctx),
1150 int (*paramgen)(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey));
1151
1152void EVP_PKEY_meth_set_keygen(EVP_PKEY_METHOD *pmeth,
1153 int (*keygen_init)(EVP_PKEY_CTX *ctx),
1154 int (*keygen)(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey));
1155
1156void EVP_PKEY_meth_set_sign(EVP_PKEY_METHOD *pmeth,
1157 int (*sign_init)(EVP_PKEY_CTX *ctx),
1158 int (*sign)(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
1159 const unsigned char *tbs, size_t tbslen));
1160
1161void EVP_PKEY_meth_set_verify(EVP_PKEY_METHOD *pmeth,
1162 int (*verify_init)(EVP_PKEY_CTX *ctx),
1163 int (*verify)(EVP_PKEY_CTX *ctx, const unsigned char *sig, size_t siglen,
1164 const unsigned char *tbs, size_t tbslen));
1165
1166void EVP_PKEY_meth_set_verify_recover(EVP_PKEY_METHOD *pmeth,
1167 int (*verify_recover_init)(EVP_PKEY_CTX *ctx),
1168 int (*verify_recover)(EVP_PKEY_CTX *ctx, unsigned char *sig,
1169 size_t *siglen, const unsigned char *tbs, size_t tbslen));
1170
1171void EVP_PKEY_meth_set_signctx(EVP_PKEY_METHOD *pmeth,
1172 int (*signctx_init)(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx),
1173 int (*signctx)(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
1174 EVP_MD_CTX *mctx));
1175
1176void EVP_PKEY_meth_set_verifyctx(EVP_PKEY_METHOD *pmeth,
1177 int (*verifyctx_init)(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx),
1178 int (*verifyctx)(EVP_PKEY_CTX *ctx, const unsigned char *sig, int siglen,
1179 EVP_MD_CTX *mctx));
1180
1181void EVP_PKEY_meth_set_encrypt(EVP_PKEY_METHOD *pmeth,
1182 int (*encrypt_init)(EVP_PKEY_CTX *ctx),
1183 int (*encryptfn)(EVP_PKEY_CTX *ctx, unsigned char *out, size_t *outlen,
1184 const unsigned char *in, size_t inlen));
1185
1186void EVP_PKEY_meth_set_decrypt(EVP_PKEY_METHOD *pmeth,
1187 int (*decrypt_init)(EVP_PKEY_CTX *ctx),
1188 int (*decrypt)(EVP_PKEY_CTX *ctx, unsigned char *out, size_t *outlen,
1189 const unsigned char *in, size_t inlen));
1190
1191void EVP_PKEY_meth_set_derive(EVP_PKEY_METHOD *pmeth,
1192 int (*derive_init)(EVP_PKEY_CTX *ctx),
1193 int (*derive)(EVP_PKEY_CTX *ctx, unsigned char *key, size_t *keylen));
1194
1195void EVP_PKEY_meth_set_ctrl(EVP_PKEY_METHOD *pmeth,
1196 int (*ctrl)(EVP_PKEY_CTX *ctx, int type, int p1, void *p2),
1197 int (*ctrl_str)(EVP_PKEY_CTX *ctx, const char *type, const char *value));
1198
1199/* Authenticated Encryption with Additional Data.
1200 *
1201 * AEAD couples confidentiality and integrity in a single primtive. AEAD
1202 * algorithms take a key and then can seal and open individual messages. Each
1203 * message has a unique, per-message nonce and, optionally, additional data
1204 * which is authenticated but not included in the output. */
1205
1206struct evp_aead_st;
1207typedef struct evp_aead_st EVP_AEAD;
1208
1209#ifndef OPENSSL_NO_AES
1210/* EVP_aes_128_gcm is AES-128 in Galois Counter Mode. */
1211const EVP_AEAD *EVP_aead_aes_128_gcm(void);
1212/* EVP_aes_256_gcm is AES-256 in Galois Counter Mode. */
1213const EVP_AEAD *EVP_aead_aes_256_gcm(void);
1214#endif
1215
1216#if !defined(OPENSSL_NO_CHACHA) && !defined(OPENSSL_NO_POLY1305)
1217/* EVP_aead_chacha20_poly1305 is ChaCha20 with a Poly1305 authenticator. */
1218const EVP_AEAD *EVP_aead_chacha20_poly1305(void);
1219#endif
1220
1221/* EVP_AEAD_key_length returns the length of the keys used. */
1222size_t EVP_AEAD_key_length(const EVP_AEAD *aead);
1223
1224/* EVP_AEAD_nonce_length returns the length of the per-message nonce. */
1225size_t EVP_AEAD_nonce_length(const EVP_AEAD *aead);
1226
1227/* EVP_AEAD_max_overhead returns the maximum number of additional bytes added
1228 * by the act of sealing data with the AEAD. */
1229size_t EVP_AEAD_max_overhead(const EVP_AEAD *aead);
1230
1231/* EVP_AEAD_max_tag_len returns the maximum tag length when using this AEAD.
1232 * This * is the largest value that can be passed as a tag length to
1233 * EVP_AEAD_CTX_init. */
1234size_t EVP_AEAD_max_tag_len(const EVP_AEAD *aead);
1235
1236/* An EVP_AEAD_CTX represents an AEAD algorithm configured with a specific key
1237 * and message-independent IV. */
1238typedef struct evp_aead_ctx_st {
1239 const EVP_AEAD *aead;
1240 /* aead_state is an opaque pointer to the AEAD specific state. */
1241 void *aead_state;
1242} EVP_AEAD_CTX;
1243
1244/* EVP_AEAD_MAX_TAG_LENGTH is the maximum tag length used by any AEAD
1245 * defined in this header. */
1246#define EVP_AEAD_MAX_TAG_LENGTH 16
1247
1248/* EVP_AEAD_DEFAULT_TAG_LENGTH is a magic value that can be passed to
1249 * EVP_AEAD_CTX_init to indicate that the default tag length for an AEAD
1250 * should be used. */
1251#define EVP_AEAD_DEFAULT_TAG_LENGTH 0
1252
1253/* EVP_AEAD_init initializes the context for the given AEAD algorithm.
1254 * The implementation argument may be NULL to choose the default implementation.
1255 * Authentication tags may be truncated by passing a tag length. A tag length
1256 * of zero indicates the default tag length should be used. */
1257int EVP_AEAD_CTX_init(EVP_AEAD_CTX *ctx, const EVP_AEAD *aead,
1258 const unsigned char *key, size_t key_len, size_t tag_len, ENGINE *impl);
1259
1260/* EVP_AEAD_CTX_cleanup frees any data allocated for this context. */
1261void EVP_AEAD_CTX_cleanup(EVP_AEAD_CTX *ctx);
1262
1263/* EVP_AEAD_CTX_seal encrypts and authenticates the input and authenticates
1264 * any additional data (AD), the result being written as output. One is
1265 * returned on success, otherwise zero.
1266 *
1267 * This function may be called (with the same EVP_AEAD_CTX) concurrently with
1268 * itself or EVP_AEAD_CTX_open.
1269 *
1270 * At most max_out_len bytes are written as output and, in order to ensure
1271 * success, this value should be the length of the input plus the result of
1272 * EVP_AEAD_overhead. On successful return, out_len is set to the actual
1273 * number of bytes written.
1274 *
1275 * The length of the nonce is must be equal to the result of
1276 * EVP_AEAD_nonce_length for this AEAD.
1277 *
1278 * EVP_AEAD_CTX_seal never results in a partial output. If max_out_len is
1279 * insufficient, zero will be returned and out_len will be set to zero.
1280 *
1281 * If the input and output are aliased then out must be <= in. */
1282int EVP_AEAD_CTX_seal(const EVP_AEAD_CTX *ctx, unsigned char *out,
1283 size_t *out_len, size_t max_out_len, const unsigned char *nonce,
1284 size_t nonce_len, const unsigned char *in, size_t in_len,
1285 const unsigned char *ad, size_t ad_len);
1286
1287/* EVP_AEAD_CTX_open authenticates the input and additional data, decrypting
1288 * the input and writing it as output. One is returned on success, otherwise
1289 * zero.
1290 *
1291 * This function may be called (with the same EVP_AEAD_CTX) concurrently with
1292 * itself or EVP_AEAD_CTX_seal.
1293 *
1294 * At most the number of input bytes are written as output. In order to ensure
1295 * success, max_out_len should be at least the same as the input length. On
1296 * successful return out_len is set to the actual number of bytes written.
1297 *
1298 * The length of nonce must be equal to the result of EVP_AEAD_nonce_length
1299 * for this AEAD.
1300 *
1301 * EVP_AEAD_CTX_open never results in a partial output. If max_out_len is
1302 * insufficient, zero will be returned and out_len will be set to zero.
1303 *
1304 * If the input and output are aliased then out must be <= in. */
1305int EVP_AEAD_CTX_open(const EVP_AEAD_CTX *ctx, unsigned char *out,
1306 size_t *out_len, size_t max_out_len, const unsigned char *nonce,
1307 size_t nonce_len, const unsigned char *in, size_t in_len,
1308 const unsigned char *ad, size_t ad_len);
1309
1310void EVP_add_alg_module(void);
1311
1312/* BEGIN ERROR CODES */
1313/* The following lines are auto generated by the script mkerr.pl. Any changes
1314 * made after this point may be overwritten when the script is next run.
1315 */
1316void ERR_load_EVP_strings(void);
1317
1318/* Error codes for the EVP functions. */
1319
1320/* Function codes. */
1321#define EVP_F_AEAD_AES_GCM_INIT 187
1322#define EVP_F_AEAD_AES_GCM_OPEN 188
1323#define EVP_F_AEAD_AES_GCM_SEAL 189
1324#define EVP_F_AEAD_CHACHA20_POLY1305_INIT 192
1325#define EVP_F_AEAD_CHACHA20_POLY1305_OPEN 193
1326#define EVP_F_AEAD_CHACHA20_POLY1305_SEAL 194
1327#define EVP_F_AEAD_CTX_OPEN 185
1328#define EVP_F_AEAD_CTX_SEAL 186
1329#define EVP_F_AESNI_INIT_KEY 165
1330#define EVP_F_AESNI_XTS_CIPHER 176
1331#define EVP_F_AES_INIT_KEY 133
1332#define EVP_F_AES_XTS 172
1333#define EVP_F_AES_XTS_CIPHER 175
1334#define EVP_F_ALG_MODULE_INIT 177
1335#define EVP_F_CAMELLIA_INIT_KEY 159
1336#define EVP_F_CMAC_INIT 173
1337#define EVP_F_D2I_PKEY 100
1338#define EVP_F_DO_SIGVER_INIT 161
1339#define EVP_F_DSAPKEY2PKCS8 134
1340#define EVP_F_DSA_PKEY2PKCS8 135
1341#define EVP_F_ECDSA_PKEY2PKCS8 129
1342#define EVP_F_ECKEY_PKEY2PKCS8 132
1343#define EVP_F_EVP_AEAD_CTX_INIT 180
1344#define EVP_F_EVP_AEAD_CTX_OPEN 190
1345#define EVP_F_EVP_AEAD_CTX_SEAL 191
1346#define EVP_F_EVP_BYTESTOKEY 200
1347#define EVP_F_EVP_CIPHERINIT_EX 123
1348#define EVP_F_EVP_CIPHER_CTX_COPY 163
1349#define EVP_F_EVP_CIPHER_CTX_CTRL 124
1350#define EVP_F_EVP_CIPHER_CTX_SET_KEY_LENGTH 122
1351#define EVP_F_EVP_CIPHER_GET_ASN1_IV 201
1352#define EVP_F_EVP_CIPHER_SET_ASN1_IV 202
1353#define EVP_F_EVP_DECRYPTFINAL_EX 101
1354#define EVP_F_EVP_DECRYPTUPDATE 199
1355#define EVP_F_EVP_DIGESTFINAL_EX 196
1356#define EVP_F_EVP_DIGESTINIT_EX 128
1357#define EVP_F_EVP_ENCRYPTFINAL_EX 127
1358#define EVP_F_EVP_ENCRYPTUPDATE 198
1359#define EVP_F_EVP_MD_CTX_COPY_EX 110
1360#define EVP_F_EVP_MD_CTX_CTRL 195
1361#define EVP_F_EVP_MD_SIZE 162
1362#define EVP_F_EVP_OPENINIT 102
1363#define EVP_F_EVP_PBE_ALG_ADD 115
1364#define EVP_F_EVP_PBE_ALG_ADD_TYPE 160
1365#define EVP_F_EVP_PBE_CIPHERINIT 116
1366#define EVP_F_EVP_PKCS82PKEY 111
1367#define EVP_F_EVP_PKCS82PKEY_BROKEN 136
1368#define EVP_F_EVP_PKEY2PKCS8_BROKEN 113
1369#define EVP_F_EVP_PKEY_COPY_PARAMETERS 103
1370#define EVP_F_EVP_PKEY_CTX_CTRL 137
1371#define EVP_F_EVP_PKEY_CTX_CTRL_STR 150
1372#define EVP_F_EVP_PKEY_CTX_DUP 156
1373#define EVP_F_EVP_PKEY_DECRYPT 104
1374#define EVP_F_EVP_PKEY_DECRYPT_INIT 138
1375#define EVP_F_EVP_PKEY_DECRYPT_OLD 151
1376#define EVP_F_EVP_PKEY_DERIVE 153
1377#define EVP_F_EVP_PKEY_DERIVE_INIT 154
1378#define EVP_F_EVP_PKEY_DERIVE_SET_PEER 155
1379#define EVP_F_EVP_PKEY_ENCRYPT 105
1380#define EVP_F_EVP_PKEY_ENCRYPT_INIT 139
1381#define EVP_F_EVP_PKEY_ENCRYPT_OLD 152
1382#define EVP_F_EVP_PKEY_GET1_DH 119
1383#define EVP_F_EVP_PKEY_GET1_DSA 120
1384#define EVP_F_EVP_PKEY_GET1_ECDSA 130
1385#define EVP_F_EVP_PKEY_GET1_EC_KEY 131
1386#define EVP_F_EVP_PKEY_GET1_RSA 121
1387#define EVP_F_EVP_PKEY_KEYGEN 146
1388#define EVP_F_EVP_PKEY_KEYGEN_INIT 147
1389#define EVP_F_EVP_PKEY_NEW 106
1390#define EVP_F_EVP_PKEY_PARAMGEN 148
1391#define EVP_F_EVP_PKEY_PARAMGEN_INIT 149
1392#define EVP_F_EVP_PKEY_SIGN 140
1393#define EVP_F_EVP_PKEY_SIGN_INIT 141
1394#define EVP_F_EVP_PKEY_VERIFY 142
1395#define EVP_F_EVP_PKEY_VERIFY_INIT 143
1396#define EVP_F_EVP_PKEY_VERIFY_RECOVER 144
1397#define EVP_F_EVP_PKEY_VERIFY_RECOVER_INIT 145
1398#define EVP_F_EVP_RIJNDAEL 126
1399#define EVP_F_EVP_SIGNFINAL 107
1400#define EVP_F_EVP_VERIFYFINAL 108
1401#define EVP_F_FIPS_CIPHERINIT 166
1402#define EVP_F_FIPS_CIPHER_CTX_COPY 170
1403#define EVP_F_FIPS_CIPHER_CTX_CTRL 167
1404#define EVP_F_FIPS_CIPHER_CTX_SET_KEY_LENGTH 171
1405#define EVP_F_FIPS_DIGESTINIT 168
1406#define EVP_F_FIPS_MD_CTX_COPY 169
1407#define EVP_F_HMAC_INIT_EX 174
1408#define EVP_F_INT_CTX_NEW 157
1409#define EVP_F_PKCS5_PBE_KEYIVGEN 117
1410#define EVP_F_PKCS5_V2_PBE_KEYIVGEN 118
1411#define EVP_F_PKCS5_V2_PBKDF2_KEYIVGEN 164
1412#define EVP_F_PKCS8_SET_BROKEN 112
1413#define EVP_F_PKEY_SET_TYPE 158
1414#define EVP_F_RC2_GET_ASN1_TYPE_AND_IV 197
1415#define EVP_F_RC2_MAGIC_TO_METH 109
1416#define EVP_F_RC5_CTRL 125
1417
1418/* Reason codes. */
1419#define EVP_R_AES_IV_SETUP_FAILED 162
1420#define EVP_R_AES_KEY_SETUP_FAILED 143
1421#define EVP_R_ASN1_LIB 140
1422#define EVP_R_BAD_BLOCK_LENGTH 136
1423#define EVP_R_BAD_DECRYPT 100
1424#define EVP_R_BAD_KEY_LENGTH 137
1425#define EVP_R_BN_DECODE_ERROR 112
1426#define EVP_R_BN_PUBKEY_ERROR 113
1427#define EVP_R_BUFFER_TOO_SMALL 155
1428#define EVP_R_CAMELLIA_KEY_SETUP_FAILED 157
1429#define EVP_R_CIPHER_PARAMETER_ERROR 122
1430#define EVP_R_COMMAND_NOT_SUPPORTED 147
1431#define EVP_R_CTRL_NOT_IMPLEMENTED 132
1432#define EVP_R_CTRL_OPERATION_NOT_IMPLEMENTED 133
1433#define EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH 138
1434#define EVP_R_DECODE_ERROR 114
1435#define EVP_R_DIFFERENT_KEY_TYPES 101
1436#define EVP_R_DIFFERENT_PARAMETERS 153
1437#define EVP_R_DISABLED_FOR_FIPS 163
1438#define EVP_R_ENCODE_ERROR 115
1439#define EVP_R_ERROR_LOADING_SECTION 165
1440#define EVP_R_ERROR_SETTING_FIPS_MODE 166
1441#define EVP_R_EVP_PBE_CIPHERINIT_ERROR 119
1442#define EVP_R_EXPECTING_AN_RSA_KEY 127
1443#define EVP_R_EXPECTING_A_DH_KEY 128
1444#define EVP_R_EXPECTING_A_DSA_KEY 129
1445#define EVP_R_EXPECTING_A_ECDSA_KEY 141
1446#define EVP_R_EXPECTING_A_EC_KEY 142
1447#define EVP_R_FIPS_MODE_NOT_SUPPORTED 167
1448#define EVP_R_INITIALIZATION_ERROR 134
1449#define EVP_R_INPUT_NOT_INITIALIZED 111
1450#define EVP_R_INVALID_DIGEST 152
1451#define EVP_R_INVALID_FIPS_MODE 168
1452#define EVP_R_INVALID_KEY_LENGTH 130
1453#define EVP_R_INVALID_OPERATION 148
1454#define EVP_R_IV_TOO_LARGE 102
1455#define EVP_R_KEYGEN_FAILURE 120
1456#define EVP_R_MESSAGE_DIGEST_IS_NULL 159
1457#define EVP_R_METHOD_NOT_SUPPORTED 144
1458#define EVP_R_MISSING_PARAMETERS 103
1459#define EVP_R_NO_CIPHER_SET 131
1460#define EVP_R_NO_DEFAULT_DIGEST 158
1461#define EVP_R_NO_DIGEST_SET 139
1462#define EVP_R_NO_DSA_PARAMETERS 116
1463#define EVP_R_NO_KEY_SET 154
1464#define EVP_R_NO_OPERATION_SET 149
1465#define EVP_R_NO_SIGN_FUNCTION_CONFIGURED 104
1466#define EVP_R_NO_VERIFY_FUNCTION_CONFIGURED 105
1467#define EVP_R_OPERATION_NOT_SUPPORTED_FOR_THIS_KEYTYPE 150
1468#define EVP_R_OPERATON_NOT_INITIALIZED 151
1469#define EVP_R_OUTPUT_ALIASES_INPUT 172
1470#define EVP_R_PKCS8_UNKNOWN_BROKEN_TYPE 117
1471#define EVP_R_PRIVATE_KEY_DECODE_ERROR 145
1472#define EVP_R_PRIVATE_KEY_ENCODE_ERROR 146
1473#define EVP_R_PUBLIC_KEY_NOT_RSA 106
1474#define EVP_R_TAG_TOO_LARGE 171
1475#define EVP_R_TOO_LARGE 164
1476#define EVP_R_UNKNOWN_CIPHER 160
1477#define EVP_R_UNKNOWN_DIGEST 161
1478#define EVP_R_UNKNOWN_OPTION 169
1479#define EVP_R_UNKNOWN_PBE_ALGORITHM 121
1480#define EVP_R_UNSUPORTED_NUMBER_OF_ROUNDS 135
1481#define EVP_R_UNSUPPORTED_ALGORITHM 156
1482#define EVP_R_UNSUPPORTED_CIPHER 107
1483#define EVP_R_UNSUPPORTED_KEYLENGTH 123
1484#define EVP_R_UNSUPPORTED_KEY_DERIVATION_FUNCTION 124
1485#define EVP_R_UNSUPPORTED_KEY_SIZE 108
1486#define EVP_R_UNSUPPORTED_PRF 125
1487#define EVP_R_UNSUPPORTED_PRIVATE_KEY_ALGORITHM 118
1488#define EVP_R_UNSUPPORTED_SALT_TYPE 126
1489#define EVP_R_WRONG_FINAL_BLOCK_LENGTH 109
1490#define EVP_R_WRONG_PUBLIC_KEY_TYPE 110
1491
1492#ifdef __cplusplus
1493}
1494#endif
1495#endif
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-20 15:20:21 +0000