Delete the manual pages EVP_PKEY_meth_new(3) and EVP_PKEY_meth_get0_info(3)

because tb@ deleted almost all functions documented there from the API
in evp.h 1.127 on March 2 this year, but move the functions
EVP_PKEY_CTX_set_data(3) and EVP_PKEY_CTX_get_data(3) that we still
support to EVP_PKEY_keygen(3), because that page already documents
EVP_PKEY_CTX_set_app_data(3) and EVP_PKEY_CTX_get_app_data(3).

18 files changed, 60 insertions, 776 deletions

diff --git a/src/lib/libcrypto/man/EVP_DigestInit.3 b/src/lib/libcrypto/man/EVP_DigestInit.3
index e2fd6525a5..2b93f7fcb2 100644
--- a/src/lib/libcrypto/man/EVP_DigestInit.3
+++ b/src/lib/libcrypto/man/EVP_DigestInit.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: EVP_DigestInit.3,v 1.35 2024/08/30 07:03:19 tb Exp $
+.\" $OpenBSD: EVP_DigestInit.3,v 1.36 2024/12/06 14:27:49 schwarze Exp $
 .\" full merge up to: OpenSSL 7f572e95 Dec 2 13:57:04 2015 +0000
 .\" selective merge up to: OpenSSL 24a535ea Sep 22 13:14:20 2020 +0100
 .\"
@@ -70,7 +70,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: August 30 2024 $
+.Dd $Mdocdate: December 6 2024 $
 .Dt EVP_DIGESTINIT 3
 .Os
 .Sh NAME
@@ -530,7 +530,6 @@ main(int argc, char *argv[])
 .Xr EVP_MD_CTX_ctrl 3 ,
 .Xr EVP_MD_nid 3 ,
 .Xr EVP_PKEY_CTX_set_signature_md 3 ,
-.Xr EVP_PKEY_meth_set_signctx 3 ,
 .Xr EVP_sha1 3 ,
 .Xr EVP_sha3_224 3 ,
 .Xr EVP_SignInit 3 ,
diff --git a/src/lib/libcrypto/man/EVP_DigestSignInit.3 b/src/lib/libcrypto/man/EVP_DigestSignInit.3
index 22a0676278..caf519e28c 100644
--- a/src/lib/libcrypto/man/EVP_DigestSignInit.3
+++ b/src/lib/libcrypto/man/EVP_DigestSignInit.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: EVP_DigestSignInit.3,v 1.14 2024/11/08 22:23:35 schwarze Exp $
+.\" $OpenBSD: EVP_DigestSignInit.3,v 1.15 2024/12/06 14:27:49 schwarze Exp $
 .\" full merge up to: OpenSSL 28428130 Apr 17 15:18:40 2018 +0200
 .\" selective merge up to: OpenSSL 6328d367 Jul 4 21:58:30 2020 +0200
 .\"
@@ -50,7 +50,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: November 8 2024 $
+.Dd $Mdocdate: December 6 2024 $
 .Dt EVP_DIGESTSIGNINIT 3
 .Os
 .Sh NAME
@@ -229,8 +229,7 @@ The error codes can be obtained from
 .Sh SEE ALSO
 .Xr evp 3 ,
 .Xr EVP_DigestInit 3 ,
-.Xr EVP_DigestVerifyInit 3 ,
-.Xr EVP_PKEY_meth_set_signctx 3
+.Xr EVP_DigestVerifyInit 3
 .Sh HISTORY
 .Fn EVP_DigestSignInit ,
 .Fn EVP_DigestSignUpdate ,
diff --git a/src/lib/libcrypto/man/EVP_DigestVerifyInit.3 b/src/lib/libcrypto/man/EVP_DigestVerifyInit.3
index 7ecd7e94e3..fa62f5a0a5 100644
--- a/src/lib/libcrypto/man/EVP_DigestVerifyInit.3
+++ b/src/lib/libcrypto/man/EVP_DigestVerifyInit.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: EVP_DigestVerifyInit.3,v 1.16 2024/11/08 22:23:35 schwarze Exp $
+.\" $OpenBSD: EVP_DigestVerifyInit.3,v 1.17 2024/12/06 14:27:49 schwarze Exp $
 .\" full merge up to OpenSSL f097e875 Aug 23 11:37:22 2018 +0100
 .\" selective merge up to 24a535ea Sep 22 13:14:20 2020 +0100
 .\"
@@ -50,7 +50,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: November 8 2024 $
+.Dd $Mdocdate: December 6 2024 $
 .Dt EVP_DIGESTVERIFYINIT 3
 .Os
 .Sh NAME
@@ -209,8 +209,7 @@ The error codes can be obtained from
 .Sh SEE ALSO
 .Xr evp 3 ,
 .Xr EVP_DigestInit 3 ,
-.Xr EVP_DigestSignInit 3 ,
-.Xr EVP_PKEY_meth_set_verifyctx 3
+.Xr EVP_DigestSignInit 3
 .Sh HISTORY
 .Fn EVP_DigestVerifyInit ,
 .Fn EVP_DigestVerifyUpdate ,
diff --git a/src/lib/libcrypto/man/EVP_PKEY_CTX_ctrl.3 b/src/lib/libcrypto/man/EVP_PKEY_CTX_ctrl.3
index 0a70e51ad6..fe70acd03d 100644
--- a/src/lib/libcrypto/man/EVP_PKEY_CTX_ctrl.3
+++ b/src/lib/libcrypto/man/EVP_PKEY_CTX_ctrl.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: EVP_PKEY_CTX_ctrl.3,v 1.26 2024/11/24 14:48:12 schwarze Exp $
+.\" $OpenBSD: EVP_PKEY_CTX_ctrl.3,v 1.27 2024/12/06 14:27:49 schwarze Exp $
 .\" full merge up to: OpenSSL 99d63d46 Oct 26 13:56:48 2016 -0400
 .\" selective merge up to: OpenSSL 24a535ea Sep 22 13:14:20 2020 +0100
 .\" Parts were split out into RSA_pkey_ctx_ctrl(3).
@@ -69,7 +69,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: November 24 2024 $
+.Dd $Mdocdate: December 6 2024 $
 .Dt EVP_PKEY_CTX_CTRL 3
 .Os
 .Sh NAME
@@ -527,7 +527,6 @@ supported by the public key algorithm.
 .Xr EVP_PKEY_encrypt 3 ,
 .Xr EVP_PKEY_get_default_digest_nid 3 ,
 .Xr EVP_PKEY_keygen 3 ,
-.Xr EVP_PKEY_meth_set_ctrl 3 ,
 .Xr EVP_PKEY_sign 3 ,
 .Xr EVP_PKEY_verify 3 ,
 .Xr EVP_PKEY_verify_recover 3 ,
diff --git a/src/lib/libcrypto/man/EVP_PKEY_CTX_new.3 b/src/lib/libcrypto/man/EVP_PKEY_CTX_new.3
index 6d9a94d108..e74bce9dfb 100644
--- a/src/lib/libcrypto/man/EVP_PKEY_CTX_new.3
+++ b/src/lib/libcrypto/man/EVP_PKEY_CTX_new.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: EVP_PKEY_CTX_new.3,v 1.15 2024/12/06 13:10:43 schwarze Exp $
+.\" $OpenBSD: EVP_PKEY_CTX_new.3,v 1.16 2024/12/06 14:27:49 schwarze Exp $
 .\" full merge up to: OpenSSL df75c2bf Dec 9 01:02:36 2018 +0100
 .\"
 .\" This file is a derived work.
@@ -161,7 +161,6 @@ if an error occurred.
 .Xr EVP_PKEY_derive 3 ,
 .Xr EVP_PKEY_encrypt 3 ,
 .Xr EVP_PKEY_keygen 3 ,
-.Xr EVP_PKEY_meth_set_init 3 ,
 .Xr EVP_PKEY_new 3 ,
 .Xr EVP_PKEY_sign 3 ,
 .Xr EVP_PKEY_verify 3 ,
diff --git a/src/lib/libcrypto/man/EVP_PKEY_decrypt.3 b/src/lib/libcrypto/man/EVP_PKEY_decrypt.3
index 2166003af8..c063847b10 100644
--- a/src/lib/libcrypto/man/EVP_PKEY_decrypt.3
+++ b/src/lib/libcrypto/man/EVP_PKEY_decrypt.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: EVP_PKEY_decrypt.3,v 1.9 2024/07/21 08:10:17 tb Exp $
+.\" $OpenBSD: EVP_PKEY_decrypt.3,v 1.10 2024/12/06 14:27:49 schwarze Exp $
 .\" full merge up to: OpenSSL 48e5119a Jan 19 10:49:22 2018 +0100
 .\"
 .\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
@@ -49,7 +49,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: July 21 2024 $
+.Dd $Mdocdate: December 6 2024 $
 .Dt EVP_PKEY_DECRYPT 3
 .Os
 .Sh NAME
@@ -164,7 +164,6 @@ if (EVP_PKEY_decrypt(ctx, out, &outlen, in, inlen) <= 0)
 .Xr EVP_PKEY_CTX_new 3 ,
 .Xr EVP_PKEY_derive 3 ,
 .Xr EVP_PKEY_encrypt 3 ,
-.Xr EVP_PKEY_meth_set_decrypt 3 ,
 .Xr EVP_PKEY_sign 3 ,
 .Xr EVP_PKEY_verify 3 ,
 .Xr EVP_PKEY_verify_recover 3
diff --git a/src/lib/libcrypto/man/EVP_PKEY_derive.3 b/src/lib/libcrypto/man/EVP_PKEY_derive.3
index 398540a5bf..47f467fea1 100644
--- a/src/lib/libcrypto/man/EVP_PKEY_derive.3
+++ b/src/lib/libcrypto/man/EVP_PKEY_derive.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: EVP_PKEY_derive.3,v 1.11 2024/07/21 08:25:33 tb Exp $
+.\" $OpenBSD: EVP_PKEY_derive.3,v 1.12 2024/12/06 14:27:49 schwarze Exp $
 .\" full merge up to: OpenSSL 48e5119a Jan 19 10:49:22 2018 +0100
 .\"
 .\" This file is a derived work.
@@ -66,7 +66,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: July 21 2024 $
+.Dd $Mdocdate: December 6 2024 $
 .Dt EVP_PKEY_DERIVE 3
 .Os
 .Sh NAME
@@ -240,7 +240,6 @@ if (EVP_PKEY_derive(ctx, skey, &skeylen) <= 0)
 .Xr EVP_PKEY_CTX_new 3 ,
 .Xr EVP_PKEY_decrypt 3 ,
 .Xr EVP_PKEY_encrypt 3 ,
-.Xr EVP_PKEY_meth_set_derive 3 ,
 .Xr EVP_PKEY_sign 3 ,
 .Xr EVP_PKEY_verify 3 ,
 .Xr EVP_PKEY_verify_recover 3 ,
diff --git a/src/lib/libcrypto/man/EVP_PKEY_encrypt.3 b/src/lib/libcrypto/man/EVP_PKEY_encrypt.3
index 6b9f8fa68d..c2e70cb31f 100644
--- a/src/lib/libcrypto/man/EVP_PKEY_encrypt.3
+++ b/src/lib/libcrypto/man/EVP_PKEY_encrypt.3
@@ -1,4 +1,4 @@
-.\"     $OpenBSD: EVP_PKEY_encrypt.3,v 1.9 2023/11/19 10:09:27 tb Exp $
+.\"     $OpenBSD: EVP_PKEY_encrypt.3,v 1.10 2024/12/06 14:27:49 schwarze Exp $
 .\"     OpenSSL b97fdb57 Nov 11 09:33:09 2016 +0100
 .\"
 .\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
@@ -49,7 +49,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: November 19 2023 $
+.Dd $Mdocdate: December 6 2024 $
 .Dt EVP_PKEY_ENCRYPT 3
 .Os
 .Sh NAME
@@ -172,7 +172,6 @@ if (EVP_PKEY_encrypt(ctx, out, &outlen, in, inlen) <= 0)
 .Xr EVP_PKEY_CTX_new 3 ,
 .Xr EVP_PKEY_decrypt 3 ,
 .Xr EVP_PKEY_derive 3 ,
-.Xr EVP_PKEY_meth_set_encrypt 3 ,
 .Xr EVP_PKEY_sign 3 ,
 .Xr EVP_PKEY_verify 3 ,
 .Xr EVP_PKEY_verify_recover 3
diff --git a/src/lib/libcrypto/man/EVP_PKEY_keygen.3 b/src/lib/libcrypto/man/EVP_PKEY_keygen.3
index 32ed4a15c8..e75859b486 100644
--- a/src/lib/libcrypto/man/EVP_PKEY_keygen.3
+++ b/src/lib/libcrypto/man/EVP_PKEY_keygen.3
@@ -1,10 +1,10 @@
-.\" $OpenBSD: EVP_PKEY_keygen.3,v 1.14 2024/07/21 08:02:17 tb Exp $
+.\" $OpenBSD: EVP_PKEY_keygen.3,v 1.15 2024/12/06 14:27:49 schwarze Exp $
 .\" full merge up to: OpenSSL 24a535ea Sep 22 13:14:20 2020 +0100
 .\"
 .\" This file is a derived work.
 .\" The changes are covered by the following Copyright and license:
 .\"
-.\" Copyright (c) 2023 Ingo Schwarze <schwarze@openbsd.org>
+.\" Copyright (c) 2023, 2024 Ingo Schwarze <schwarze@openbsd.org>
 .\"
 .\" Permission to use, copy, modify, and distribute this software for any
 .\" purpose with or without fee is hereby granted, provided that the above
@@ -66,7 +66,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: July 21 2024 $
+.Dd $Mdocdate: December 6 2024 $
 .Dt EVP_PKEY_KEYGEN 3
 .Os
 .Sh NAME
@@ -80,7 +80,9 @@
 .Nm EVP_PKEY_CTX_set0_keygen_info ,
 .Nm EVP_PKEY_CTX_get_keygen_info ,
 .Nm EVP_PKEY_CTX_set_app_data ,
-.Nm EVP_PKEY_CTX_get_app_data
+.Nm EVP_PKEY_CTX_get_app_data ,
+.Nm EVP_PKEY_CTX_set_data ,
+.Nm EVP_PKEY_CTX_get_data
 .Nd key and parameter generation functions
 .Sh SYNOPSIS
 .In openssl/evp.h
@@ -129,12 +131,21 @@
 .Ft void
 .Fo EVP_PKEY_CTX_set_app_data
 .Fa "EVP_PKEY_CTX *ctx"
-.Fa "void *data"
+.Fa "void *app_data"
 .Fc
 .Ft void *
 .Fo EVP_PKEY_CTX_get_app_data
 .Fa "EVP_PKEY_CTX *ctx"
 .Fc
+.Ft void
+.Fo EVP_PKEY_CTX_set_data
+.Fa "EVP_PKEY_CTX *ctx"
+.Fa "void *data"
+.Fc
+.Ft void *
+.Fo EVP_PKEY_CTX_get_data
+.Fa "EVP_PKEY_CTX *ctx"
+.Fc
 .Sh DESCRIPTION
 The
 .Fn EVP_PKEY_keygen_init
@@ -197,6 +208,14 @@ This can be used to set some application defined value which can be
 retrieved in the callback: for example a handle which is used to update
 a "progress dialog".
 .Pp
+The deprecated functions
+.Fn EVP_PKEY_CTX_set_data
+and
+.Fn EVP_PKEY_CTX_get_data
+set and retrieve a
+.Em different
+opaque pointer that is ignored by the library.
+.Pp
 After the call to
 .Fn EVP_PKEY_keygen_init
 or
@@ -258,6 +277,14 @@ is \-1, one of these parameters if
 .Fa idx
 is greater than or equal to zero but less than the number
 of available parameters, or 0 otherwise.
+.Pp
+.Fn EVP_PKEY_CTX_get_app_data
+and
+.Fn EVP_PKEY_CTX_get_data
+return the pointer that was last passed to the corresponding set function, or
+.Dv NULL
+if the corresponding set function was never called on
+.Fa ctx .
 .Sh EXAMPLES
 Generate a 2048-bit RSA key:
 .Bd -literal -offset indent
@@ -332,7 +359,6 @@ genpkey_cb(EVP_PKEY_CTX *ctx)
 .Xr EVP_PKEY_decrypt 3 ,
 .Xr EVP_PKEY_derive 3 ,
 .Xr EVP_PKEY_encrypt 3 ,
-.Xr EVP_PKEY_meth_set_keygen 3 ,
 .Xr EVP_PKEY_sign 3 ,
 .Xr EVP_PKEY_verify 3 ,
 .Xr EVP_PKEY_verify_recover 3 ,
diff --git a/src/lib/libcrypto/man/EVP_PKEY_meth_get0_info.3 b/src/lib/libcrypto/man/EVP_PKEY_meth_get0_info.3
deleted file mode 100644
index acfb035bbe..0000000000
--- a/src/lib/libcrypto/man/EVP_PKEY_meth_get0_info.3
+++ /dev/null
@@ -1,78 +0,0 @@
-.\"     $OpenBSD: EVP_PKEY_meth_get0_info.3,v 1.3 2019/06/06 01:06:58 schwarze Exp $
-.\"     OpenSSL EVP_PKEY_meth_get_count.pod 6a2da303 Aug 9 11:25:19 2017 -0400
-.\"     OpenSSL EVP_PKEY_meth_get_count.pod 48ed9c23 Jul 25 17:48:26 2017 +0100
-.\"
-.\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
-.\" Copyright (c) 2017 The OpenSSL Project.  All rights reserved.
-.\"
-.\" Redistribution and use in source and binary forms, with or without
-.\" modification, are permitted provided that the following conditions
-.\" are met:
-.\"
-.\" 1. Redistributions of source code must retain the above copyright
-.\"    notice, this list of conditions and the following disclaimer.
-.\"
-.\" 2. Redistributions in binary form must reproduce the above copyright
-.\"    notice, this list of conditions and the following disclaimer in
-.\"    the documentation and/or other materials provided with the
-.\"    distribution.
-.\"
-.\" 3. All advertising materials mentioning features or use of this
-.\"    software must display the following acknowledgment:
-.\"    "This product includes software developed by the OpenSSL Project
-.\"    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
-.\"
-.\" 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
-.\"    endorse or promote products derived from this software without
-.\"    prior written permission. For written permission, please contact
-.\"    openssl-core@openssl.org.
-.\"
-.\" 5. Products derived from this software may not be called "OpenSSL"
-.\"    nor may "OpenSSL" appear in their names without prior written
-.\"    permission of the OpenSSL Project.
-.\"
-.\" 6. Redistributions of any form whatsoever must retain the following
-.\"    acknowledgment:
-.\"    "This product includes software developed by the OpenSSL Project
-.\"    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
-.\"
-.\" THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
-.\" EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
-.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-.\" PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
-.\" ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
-.\" SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
-.\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
-.\" LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
-.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
-.\" STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
-.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
-.\" OF THE POSSIBILITY OF SUCH DAMAGE.
-.\"
-.Dd $Mdocdate: June 6 2019 $
-.Dt EVP_PKEY_METH_GET0_INFO 3
-.Os
-.Sh NAME
-.Nm EVP_PKEY_meth_get0_info
-.Nd enumerate public key methods
-.Sh SYNOPSIS
-.In openssl/evp.h
-.Ft void
-.Fo EVP_PKEY_meth_get0_info
-.Fa "int *ppkey_id"
-.Fa "int *pflags"
-.Fa "const EVP_PKEY_METHOD *meth"
-.Fc
-.Sh DESCRIPTION
-The function
-.Fn EVP_PKEY_meth_get0_info
-retrieves the public key ID (a NID) and any flags associated with the
-public key method
-.Pf * Fa meth .
-.Sh SEE ALSO
-.Xr EVP_PKEY_meth_new 3 ,
-.Xr EVP_PKEY_new 3
-.Sh HISTORY
-.Fn EVP_PKEY_meth_get0_info
-first appeared in OpenSSL 1.0.1 and has been available since
-.Ox 5.3 .
diff --git a/src/lib/libcrypto/man/EVP_PKEY_meth_new.3 b/src/lib/libcrypto/man/EVP_PKEY_meth_new.3
deleted file mode 100644
index 5ec0b12105..0000000000
--- a/src/lib/libcrypto/man/EVP_PKEY_meth_new.3
+++ /dev/null
@@ -1,647 +0,0 @@
-.\" $OpenBSD: EVP_PKEY_meth_new.3,v 1.6 2023/09/09 14:35:23 schwarze Exp $
-.\" selective merge up to: OpenSSL 35fd9953 May 28 14:49:38 2019 +0200
-.\"
-.\" This file is a derived work.
-.\" The changes are covered by the following Copyright and license:
-.\"
-.\" Copyright (c) 2023 Ingo Schwarze <schwarze@openbsd.org>
-.\"
-.\" Permission to use, copy, modify, and distribute this software for any
-.\" purpose with or without fee is hereby granted, provided that the above
-.\" copyright notice and this permission notice appear in all copies.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-.\" WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-.\" MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
-.\" ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-.\" WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-.\" ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
-.\" OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-.\"
-.\" The original file was written by Paul Yang <yang.yang@baishancloud.com>.
-.\" Copyright (c) 2017 The OpenSSL Project.  All rights reserved.
-.\"
-.\" Redistribution and use in source and binary forms, with or without
-.\" modification, are permitted provided that the following conditions
-.\" are met:
-.\"
-.\" 1. Redistributions of source code must retain the above copyright
-.\"    notice, this list of conditions and the following disclaimer.
-.\"
-.\" 2. Redistributions in binary form must reproduce the above copyright
-.\"    notice, this list of conditions and the following disclaimer in
-.\"    the documentation and/or other materials provided with the
-.\"    distribution.
-.\"
-.\" 3. All advertising materials mentioning features or use of this
-.\"    software must display the following acknowledgment:
-.\"    "This product includes software developed by the OpenSSL Project
-.\"    for use in the OpenSSL Toolkit. (http://www.openssl.org/)"
-.\"
-.\" 4. The names "OpenSSL Toolkit" and "OpenSSL Project" must not be used to
-.\"    endorse or promote products derived from this software without
-.\"    prior written permission. For written permission, please contact
-.\"    openssl-core@openssl.org.
-.\"
-.\" 5. Products derived from this software may not be called "OpenSSL"
-.\"    nor may "OpenSSL" appear in their names without prior written
-.\"    permission of the OpenSSL Project.
-.\"
-.\" 6. Redistributions of any form whatsoever must retain the following
-.\"    acknowledgment:
-.\"    "This product includes software developed by the OpenSSL Project
-.\"    for use in the OpenSSL Toolkit (http://www.openssl.org/)"
-.\"
-.\" THIS SOFTWARE IS PROVIDED BY THE OpenSSL PROJECT ``AS IS'' AND ANY
-.\" EXPRESSED OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
-.\" IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-.\" PURPOSE ARE DISCLAIMED.  IN NO EVENT SHALL THE OpenSSL PROJECT OR
-.\" ITS CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
-.\" SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
-.\" NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
-.\" LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
-.\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT,
-.\" STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
-.\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
-.\" OF THE POSSIBILITY OF SUCH DAMAGE.
-.\"
-.Dd $Mdocdate: September 9 2023 $
-.Dt EVP_PKEY_METH_NEW 3
-.Os
-.Sh NAME
-.Nm EVP_PKEY_meth_new ,
-.Nm EVP_PKEY_meth_free ,
-.Nm EVP_PKEY_meth_copy ,
-.Nm EVP_PKEY_meth_find ,
-.Nm EVP_PKEY_meth_add0 ,
-.Nm EVP_PKEY_meth_set_init ,
-.Nm EVP_PKEY_meth_set_copy ,
-.Nm EVP_PKEY_meth_set_cleanup ,
-.Nm EVP_PKEY_meth_set_paramgen ,
-.Nm EVP_PKEY_meth_set_keygen ,
-.Nm EVP_PKEY_meth_set_sign ,
-.Nm EVP_PKEY_meth_set_verify ,
-.Nm EVP_PKEY_meth_set_verify_recover ,
-.Nm EVP_PKEY_meth_set_signctx ,
-.Nm EVP_PKEY_meth_set_verifyctx ,
-.Nm EVP_PKEY_meth_set_encrypt ,
-.Nm EVP_PKEY_meth_set_decrypt ,
-.Nm EVP_PKEY_meth_set_derive ,
-.Nm EVP_PKEY_meth_set_ctrl ,
-.Nm EVP_PKEY_meth_set_check ,
-.Nm EVP_PKEY_meth_set_public_check ,
-.Nm EVP_PKEY_meth_set_param_check ,
-.Nm EVP_PKEY_CTX_get_data ,
-.Nm EVP_PKEY_CTX_set_data
-.Nd manipulate an EVP_PKEY_METHOD structure
-.Sh SYNOPSIS
-.In openssl/evp.h
-.Ft EVP_PKEY_METHOD *
-.Fo EVP_PKEY_meth_new
-.Fa "int id"
-.Fa "int flags"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_free
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_copy
-.Fa "EVP_PKEY_METHOD *dst"
-.Fa "const EVP_PKEY_METHOD *src"
-.Fc
-.Ft const EVP_PKEY_METHOD *
-.Fo EVP_PKEY_meth_find
-.Fa "int type"
-.Fc
-.Ft int
-.Fo EVP_PKEY_meth_add0
-.Fa "const EVP_PKEY_METHOD *pmeth"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_init
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*init)(EVP_PKEY_CTX *ctx)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_copy
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*copy)(EVP_PKEY_CTX *dst, EVP_PKEY_CTX *src)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_cleanup
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "void (*cleanup)(EVP_PKEY_CTX *ctx)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_paramgen
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*paramgen_init)(EVP_PKEY_CTX *ctx)"
-.Fa "int (*paramgen)(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_keygen
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*keygen_init)(EVP_PKEY_CTX *ctx)"
-.Fa "int (*keygen)(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_sign
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*sign_init)(EVP_PKEY_CTX *ctx)"
-.Fa "int (*sign)(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,\
- const unsigned char *tbs, size_t tbslen)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_verify
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*verify_init)(EVP_PKEY_CTX *ctx)"
-.Fa "int (*verify)(EVP_PKEY_CTX *ctx, const unsigned char *sig,\
- size_t siglen, const unsigned char *tbs, size_t tbslen)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_verify_recover
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*verify_recover_init)(EVP_PKEY_CTX *ctx)"
-.Fa "int (*verify_recover)(EVP_PKEY_CTX *ctx, unsigned char *sig,\
- size_t *siglen, const unsigned char *tbs, size_t tbslen)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_signctx
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*signctx_init)(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx)"
-.Fa "int (*signctx)(EVP_PKEY_CTX *ctx, unsigned char *sig,\
- size_t *siglen, EVP_MD_CTX *mctx)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_verifyctx
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*verifyctx_init)(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx)"
-.Fa "int (*verifyctx)(EVP_PKEY_CTX *ctx, const unsigned char *sig,\
- int siglen, EVP_MD_CTX *mctx)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_encrypt
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*encrypt_init)(EVP_PKEY_CTX *ctx)"
-.Fa "int (*encryptfn)(EVP_PKEY_CTX *ctx, unsigned char *out,\
- size_t *outlen, const unsigned char *in, size_t inlen)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_decrypt
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*decrypt_init)(EVP_PKEY_CTX *ctx)"
-.Fa "int (*decrypt)(EVP_PKEY_CTX *ctx, unsigned char *out,\
- size_t *outlen, const unsigned char *in, size_t inlen)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_derive
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*derive_init)(EVP_PKEY_CTX *ctx)"
-.Fa "int (*derive)(EVP_PKEY_CTX *ctx, unsigned char *key, size_t *keylen)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_ctrl
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*ctrl)(EVP_PKEY_CTX *ctx, int type, int p1, void *p2)"
-.Fa "int (*ctrl_str)(EVP_PKEY_CTX *ctx, const char *type, const char *value)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_check
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*check)(EVP_PKEY *pkey)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_public_check
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*public_check)(EVP_PKEY *pkey)"
-.Fc
-.Ft void
-.Fo EVP_PKEY_meth_set_param_check
-.Fa "EVP_PKEY_METHOD *pmeth"
-.Fa "int (*param_check)(EVP_PKEY *pkey)"
-.Fc
-.Ft void *
-.Fo EVP_PKEY_CTX_get_data
-.Fa "EVP_PKEY_CTX *ctx"
-.Fc
-.Ft void
-.Fo EVP_PKEY_CTX_set_data
-.Fa "EVP_PKEY_CTX *ctx"
-.Fa "void *data"
-.Fc
-.Sh DESCRIPTION
-The
-.Vt EVP_PKEY_METHOD
-structure holds a set of methods
-for a specific public key cryptographic algorithm.
-Those methods perform tasks such as generating keys, signing, verifying,
-encrypting, decrypting, and so on.
-.Pp
-There are two places where the
-.Vt EVP_PKEY_METHOD
-objects are stored: one is a built-in static array representing the
-standard methods for different algorithms, and the other one is a stack
-of user-defined application-specific methods, which can be manipulated
-with
-.Fn EVP_PKEY_meth_add0 .
-.Pp
-The
-.Vt EVP_PKEY_METHOD
-objects are usually referenced by
-.Vt EVP_PKEY_CTX
-objects.
-.Ss Methods
-The methods implement the particular public key algorithm represented by the
-.Vt EVP_PKEY_CTX
-object.
-.Bd -unfilled
-.Ft int Fn (*init) "EVP_PKEY_CTX *ctx"
-.Ft int Fn (*copy) "EVP_PKEY_CTX *dst" "EVP_PKEY_CTX *src"
-.Ft void Fn (*cleanup) "EVP_PKEY_CTX *ctx"
-.Ed
-.Pp
-The
-.Fn init
-method is called by
-.Xr EVP_PKEY_CTX_new 3
-and
-.Xr EVP_PKEY_CTX_new_id 3
-to initialize the algorithm-specific data when a new
-.Vt EVP_PKEY_CTX
-is created.
-The
-.Fn cleanup
-method is called by
-.Xr EVP_PKEY_CTX_free 3
-when an
-.Vt EVP_PKEY_CTX
-is freed.
-The
-.Fn copy
-method is called by
-.Xr EVP_PKEY_CTX_dup 3
-when an
-.Vt EVP_PKEY_CTX
-is duplicated.
-.Bd -unfilled
-.Ft int Fn (*paramgen_init) "EVP_PKEY_CTX *ctx"
-.Ft int Fn (*paramgen) "EVP_PKEY_CTX *ctx" "EVP_PKEY *pkey"
-.Ed
-.Pp
-The
-.Fn paramgen_init
-and
-.Fn paramgen
-methods deal with key parameter generation.
-They are called by
-.Xr EVP_PKEY_paramgen_init 3
-and
-.Xr EVP_PKEY_paramgen 3
-to handle the parameter generation process.
-.Bd -unfilled
-.Ft int Fn (*keygen_init) "EVP_PKEY_CTX *ctx"
-.Ft int Fn (*keygen) "EVP_PKEY_CTX *ctx" "EVP_PKEY *pkey"
-.Ed
-.Pp
-The
-.Fn keygen_init
-and
-.Fn keygen
-methods are used to generate a key for the specified algorithm.
-They are called by
-.Xr EVP_PKEY_keygen_init 3
-and
-.Xr EVP_PKEY_keygen 3 .
-.Bd -unfilled
-.Ft int Fn (*sign_init) "EVP_PKEY_CTX *ctx"
-.Ft int Fo (*sign)
-.Fa "EVP_PKEY_CTX *ctx"
-.Fa "unsigned char *sig"
-.Fa "size_t *siglen"
-.Fa "const unsigned char *tbs"
-.Fa "size_t tbslen"
-.Fc
-.Ed
-.Pp
-The
-.Fn sign_init
-and
-.Fn sign
-methods are used to generate the signature of a piece of data using a
-private key.
-They are called by
-.Xr EVP_PKEY_sign_init 3
-and
-.Xr EVP_PKEY_sign 3 .
-.Bd -unfilled
-.Ft int Fn (*verify_init) "EVP_PKEY_CTX *ctx"
-.Ft int Fo (*verify)
-.Fa "EVP_PKEY_CTX *ctx"
-.Fa "const unsigned char *sig"
-.Fa "size_t siglen"
-.Fa "const unsigned char *tbs"
-.Fa "size_t tbslen"
-.Fc
-.Ed
-.Pp
-The
-.Fn verify_init
-and
-.Fn verify
-methods are used to verify whether a signature is valid.
-They are called by
-.Xr EVP_PKEY_verify_init 3
-and
-.Xr EVP_PKEY_verify 3 .
-.Bd -unfilled
-.Ft int Fn (*verify_recover_init) "EVP_PKEY_CTX *ctx"
-.Ft int Fo (*verify_recover)
-.Fa "EVP_PKEY_CTX *ctx"
-.Fa "unsigned char *rout"
-.Fa "size_t *routlen"
-.Fa "const unsigned char *sig"
-.Fa "size_t siglen"
-.Fc
-.Ed
-.Pp
-The
-.Fn verify_recover_init
-and
-.Fn verify_recover
-methods are used to verify a signature and then recover the digest from
-the signature (for instance, a signature that was generated by the RSA
-signing algorithm).
-They are called by
-.Xr EVP_PKEY_verify_recover_init 3
-and
-.Xr EVP_PKEY_verify_recover 3 .
-.Bd -unfilled
-.Ft int Fn (*signctx_init) "EVP_PKEY_CTX *ctx" "EVP_MD_CTX *mctx"
-.Ft int Fo (*signctx)
-.Fa "EVP_PKEY_CTX *ctx"
-.Fa "unsigned char *sig"
-.Fa "size_t *siglen"
-.Fa "EVP_MD_CTX *mctx"
-.Fc
-.Ed
-.Pp
-The
-.Fn signctx_init
-and
-.Fn signctx
-methods are used to sign a digest represented by an
-.Vt EVP_MD_CTX
-object.
-They are called by the
-.Xr EVP_DigestSignInit 3
-functions.
-.Bd -unfilled
-.Ft int Fn (*verifyctx_init) "EVP_PKEY_CTX *ctx" "EVP_MD_CTX *mctx"
-.Ft int Fo (*verifyctx)
-.Fa "EVP_PKEY_CTX *ctx"
-.Fa "const unsigned char *sig"
-.Fa "int siglen"
-.Fa "EVP_MD_CTX *mctx"
-.Fc
-.Ed
-.Pp
-The
-.Fn verifyctx_init
-and
-.Fn verifyctx
-methods are used to verify a signature against the data in an
-.Vt EVP_MD_CTX
-object.
-They are called by the
-.Xr EVP_DigestVerifyInit 3
-functions.
-.Bd -unfilled
-.Ft int Fn (*encrypt_init) "EVP_PKEY_CTX *ctx"
-.Ft int Fo (*encrypt)
-.Fa "EVP_PKEY_CTX *ctx"
-.Fa "unsigned char *out"
-.Fa "size_t *outlen"
-.Fa "const unsigned char *in"
-.Fa "size_t inlen"
-.Fc
-.Ed
-.Pp
-The
-.Fn encrypt_init
-and
-.Fn encrypt
-methods are used to encrypt a piece of data.
-They are called by
-.Xr EVP_PKEY_encrypt_init 3
-and
-.Xr EVP_PKEY_encrypt 3 .
-.Bd -unfilled
-.Ft int Fn (*decrypt_init) "EVP_PKEY_CTX *ctx"
-.Ft int Fo (*decrypt)
-.Fa "EVP_PKEY_CTX *ctx"
-.Fa "unsigned char *out"
-.Fa "size_t *outlen"
-.Fa "const unsigned char *in"
-.Fa "size_t inlen"
-.Fc
-.Ed
-.Pp
-The
-.Fn decrypt_init
-and
-.Fn decrypt
-methods are used to decrypt a piece of data.
-They are called by
-.Xr EVP_PKEY_decrypt_init 3
-and
-.Xr EVP_PKEY_decrypt 3 .
-.Bd -unfilled
-.Ft int Fn (*derive_init) "EVP_PKEY_CTX *ctx"
-.Ft int Fo (*derive)
-.Fa "EVP_PKEY_CTX *ctx"
-.Fa "unsigned char *key"
-.Fa "size_t *keylen"
-.Fc
-.Ed
-.Pp
-The
-.Fn derive_init
-and
-.Fn derive
-methods are used to derive the shared secret from a public key algorithm
-(for instance, the DH algorithm).
-They are called by
-.Xr EVP_PKEY_derive_init 3
-and
-.Xr EVP_PKEY_derive 3 .
-.Bd -unfilled
-.Ft int Fo (*ctrl)
-.Fa "EVP_PKEY_CTX *ctx"
-.Fa "int type"
-.Fa "int p1"
-.Fa "void *p2"
-.Fc
-.Ft int Fo (*ctrl_str)
-.Fa "EVP_PKEY_CTX *ctx"
-.Fa "const char *type"
-.Fa "const char *value"
-.Fc
-.Ed
-.Pp
-The
-.Fn ctrl
-and
-.Fn ctrl_str
-methods are used to adjust algorithm-specific settings.
-See
-.Xr EVP_PKEY_CTX_ctrl 3
-for details.
-.Bd -unfilled
-.Ft int Fn (*check) "EVP_PKEY *pkey"
-.Ft int Fn (*public_check) "EVP_PKEY *pkey"
-.Ft int Fn (*param_check) "EVP_PKEY *pkey"
-.Ed
-These methods are used to validate a key pair, the public component,
-and the parameters for the given
-.Fa pkey ,
-respectively.
-They are called by
-.Xr EVP_PKEY_check 3 ,
-.Xr EVP_PKEY_public_check 3 ,
-and
-.Xr EVP_PKEY_param_check 3 ,
-respectively.
-.Ss Functions
-.Fn EVP_PKEY_meth_new
-creates a new
-.Vt EVP_PKEY_METHOD
-object with the given
-.Fa id
-and
-.Fa flags .
-The following flags are supported:
-.Bl -tag -width Ds
-.It Dv EVP_PKEY_FLAG_AUTOARGLEN
-Automatically calculate the maximum size of the output buffer
-in corresponding EVP methods by the EVP framework.
-Thus the implementations of these methods don't need to care about
-handling the case of returning output buffer size by themselves.
-For details on the output buffer size, refer to
-.Xr EVP_PKEY_sign 3 .
-.It Dv EVP_PKEY_FLAG_SIGCTX_CUSTOM
-Indicate that the
-.Fn signctx
-method of an
-.Vt EVP_PKEY_METHOD
-is always called by the EVP framework while doing a digest signing
-operation by calling
-.Xr EVP_DigestSignFinal 3 .
-.El
-.Pp
-.Fn EVP_PKEY_meth_free
-frees
-.Fa pmeth .
-.Pp
-.Fn EVP_PKEY_meth_copy
-copies
-.Fa src
-to
-.Fa dst .
-.Pp
-.Fn EVP_PKEY_meth_find
-finds an
-.Vt EVP_PKEY_METHOD
-object with the given
-.Fa id .
-This function first searches through the user-defined method objects and
-then through the built-in objects.
-.Pp
-.Fn EVP_PKEY_meth_add0
-adds
-.Fa pmeth
-to the stack of user defined methods.
-.Pp
-The
-.Fn EVP_PKEY_meth_set_*
-functions set the corresponding fields of
-.Fa pmeth
-to the arguments passed.
-.Pp
-.Fn EVP_PKEY_CTX_get_data
-retrieves algorithm- and implementation-specific private key data from
-.Fa ctx .
-Public key algorithm implementations typically allocate and initialize
-this data automatically in their
-.Fn init
-function.
-.Pp
-.Fn EVP_PKEY_CTX_set_data
-transfers ownership of the given
-.Fa data
-to
-.Fa ctx ,
-replacing the existing algorithm- and implementation-specific
-private key data.
-It is the responsibility of the caller to free the existing data
-before calling this function.
-.Sh RETURN VALUES
-.Fn EVP_PKEY_meth_new
-returns a pointer to a new
-.Vt EVP_PKEY_METHOD
-object or
-.Dv NULL
-on error.
-.Pp
-.Fn EVP_PKEY_meth_find
-returns a pointer to the found
-.Vt EVP_PKEY_METHOD
-object or
-.Dv NULL
-if no matching object is found.
-.Pp
-.Fn EVP_PKEY_meth_add0
-returns 1 if the method is added successfully or 0 if an error occurred.
-.Pp
-.Fn EVP_PKEY_CTX_get_data
-returns an internal pointer owned by
-.Fa ctx .
-.Sh SEE ALSO
-.Xr EVP_DigestInit 3 ,
-.Xr EVP_PKEY_meth_get0_info 3 ,
-.Xr EVP_PKEY_new 3
-.Sh HISTORY
-.Fn EVP_PKEY_meth_new ,
-.Fn EVP_PKEY_meth_free ,
-.Fn EVP_PKEY_meth_find ,
-.Fn EVP_PKEY_meth_add0 ,
-.Fn EVP_PKEY_meth_set_init ,
-.Fn EVP_PKEY_meth_set_copy ,
-.Fn EVP_PKEY_meth_set_cleanup ,
-.Fn EVP_PKEY_meth_set_paramgen ,
-.Fn EVP_PKEY_meth_set_keygen ,
-.Fn EVP_PKEY_meth_set_sign ,
-.Fn EVP_PKEY_meth_set_verify ,
-.Fn EVP_PKEY_meth_set_verify_recover ,
-.Fn EVP_PKEY_meth_set_signctx ,
-.Fn EVP_PKEY_meth_set_verifyctx ,
-.Fn EVP_PKEY_meth_set_encrypt ,
-.Fn EVP_PKEY_meth_set_decrypt ,
-.Fn EVP_PKEY_meth_set_derive ,
-.Fn EVP_PKEY_meth_set_ctrl ,
-.Fn EVP_PKEY_CTX_get_data ,
-and
-.Fn EVP_PKEY_CTX_set_data
-first appeared in OpenSSL 1.0.0 and have been available since
-.Ox 4.9 .
-.Pp
-.Fn EVP_PKEY_meth_copy
-first appeared in OpenSSL 1.0.1 and has been available since
-.Ox 5.3 .
-.Pp
-.Fn EVP_PKEY_meth_set_check ,
-.Fn EVP_PKEY_meth_set_public_check ,
-and
-.Fn EVP_PKEY_meth_set_param_check
-first appeared in OpenSSL 1.1.1 and have been available since
-.Ox 7.1 .
diff --git a/src/lib/libcrypto/man/EVP_PKEY_new.3 b/src/lib/libcrypto/man/EVP_PKEY_new.3
index d21f177ca8..f4dce0eb29 100644
--- a/src/lib/libcrypto/man/EVP_PKEY_new.3
+++ b/src/lib/libcrypto/man/EVP_PKEY_new.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: EVP_PKEY_new.3,v 1.24 2024/12/06 13:10:43 schwarze Exp $
+.\" $OpenBSD: EVP_PKEY_new.3,v 1.25 2024/12/06 14:27:49 schwarze Exp $
 .\" full merge up to: OpenSSL 4dcfdfce May 27 11:50:05 2020 +0100
 .\"
 .\" This file is a derived work.
@@ -314,7 +314,6 @@ with
 .Xr EVP_PKEY_cmp 3 ,
 .Xr EVP_PKEY_CTX_new 3 ,
 .Xr EVP_PKEY_get_default_digest_nid 3 ,
-.Xr EVP_PKEY_meth_new 3 ,
 .Xr EVP_PKEY_new_CMAC_key 3 ,
 .Xr EVP_PKEY_print_private 3 ,
 .Xr EVP_PKEY_set1_RSA 3 ,
diff --git a/src/lib/libcrypto/man/EVP_PKEY_sign.3 b/src/lib/libcrypto/man/EVP_PKEY_sign.3
index fbd8e66376..d73b0abb7b 100644
--- a/src/lib/libcrypto/man/EVP_PKEY_sign.3
+++ b/src/lib/libcrypto/man/EVP_PKEY_sign.3
@@ -1,4 +1,4 @@
-.\"     $OpenBSD: EVP_PKEY_sign.3,v 1.8 2022/03/31 17:27:17 naddy Exp $
+.\"     $OpenBSD: EVP_PKEY_sign.3,v 1.9 2024/12/06 14:27:49 schwarze Exp $
 .\"     OpenSSL 99d63d46 Oct 26 13:56:48 2016 -0400
 .\"
 .\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
@@ -49,7 +49,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: March 31 2022 $
+.Dd $Mdocdate: December 6 2024 $
 .Dt EVP_PKEY_SIGN 3
 .Os
 .Sh NAME
@@ -180,7 +180,6 @@ if (EVP_PKEY_sign(ctx, sig, &siglen, md, mdlen) <= 0)
 .Xr EVP_PKEY_decrypt 3 ,
 .Xr EVP_PKEY_derive 3 ,
 .Xr EVP_PKEY_encrypt 3 ,
-.Xr EVP_PKEY_meth_set_sign 3 ,
 .Xr EVP_PKEY_verify 3 ,
 .Xr EVP_PKEY_verify_recover 3
 .Sh HISTORY
diff --git a/src/lib/libcrypto/man/EVP_PKEY_verify.3 b/src/lib/libcrypto/man/EVP_PKEY_verify.3
index c4d983320a..d096a3a7be 100644
--- a/src/lib/libcrypto/man/EVP_PKEY_verify.3
+++ b/src/lib/libcrypto/man/EVP_PKEY_verify.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: EVP_PKEY_verify.3,v 1.7 2018/03/23 04:34:23 schwarze Exp $
+.\" $OpenBSD: EVP_PKEY_verify.3,v 1.8 2024/12/06 14:27:49 schwarze Exp $
 .\" full merge up to: OpenSSL 48e5119a Jan 19 10:49:22 2018 +0100
 .\"
 .\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
@@ -49,7 +49,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: March 23 2018 $
+.Dd $Mdocdate: December 6 2024 $
 .Dt EVP_PKEY_VERIFY 3
 .Os
 .Sh NAME
@@ -157,7 +157,6 @@ ret = EVP_PKEY_verify(ctx, sig, siglen, md, mdlen);
 .Xr EVP_PKEY_decrypt 3 ,
 .Xr EVP_PKEY_derive 3 ,
 .Xr EVP_PKEY_encrypt 3 ,
-.Xr EVP_PKEY_meth_set_verify 3 ,
 .Xr EVP_PKEY_sign 3 ,
 .Xr EVP_PKEY_verify_recover 3
 .Sh HISTORY
diff --git a/src/lib/libcrypto/man/EVP_PKEY_verify_recover.3 b/src/lib/libcrypto/man/EVP_PKEY_verify_recover.3
index 3a55faccd2..30c034cdb5 100644
--- a/src/lib/libcrypto/man/EVP_PKEY_verify_recover.3
+++ b/src/lib/libcrypto/man/EVP_PKEY_verify_recover.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: EVP_PKEY_verify_recover.3,v 1.9 2018/03/23 04:34:23 schwarze Exp $
+.\" $OpenBSD: EVP_PKEY_verify_recover.3,v 1.10 2024/12/06 14:27:49 schwarze Exp $
 .\" full merge up to: OpenSSL 48e5119a Jan 19 10:49:22 2018 +0100
 .\"
 .\" This file was written by Dr. Stephen Henson <steve@openssl.org>.
@@ -49,7 +49,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: March 23 2018 $
+.Dd $Mdocdate: December 6 2024 $
 .Dt EVP_PKEY_VERIFY_RECOVER 3
 .Os
 .Sh NAME
@@ -178,7 +178,6 @@ if (EVP_PKEY_verify_recover(ctx, rout, &routlen, sig, siglen) <= 0)
 .Xr EVP_PKEY_decrypt 3 ,
 .Xr EVP_PKEY_derive 3 ,
 .Xr EVP_PKEY_encrypt 3 ,
-.Xr EVP_PKEY_meth_set_verify_recover 3 ,
 .Xr EVP_PKEY_sign 3 ,
 .Xr EVP_PKEY_verify 3
 .Sh HISTORY
diff --git a/src/lib/libcrypto/man/Makefile b/src/lib/libcrypto/man/Makefile
index 22cf0ad171..11213cb518 100644
--- a/src/lib/libcrypto/man/Makefile
+++ b/src/lib/libcrypto/man/Makefile
@@ -1,4 +1,4 @@
-# $OpenBSD: Makefile,v 1.298 2024/12/06 13:10:43 schwarze Exp $
+# $OpenBSD: Makefile,v 1.299 2024/12/06 14:27:49 schwarze Exp $
 
 .include <bsd.own.mk>
 
@@ -184,8 +184,6 @@ MAN=	\
         EVP_PKEY_encrypt.3 \
         EVP_PKEY_get_default_digest_nid.3 \
         EVP_PKEY_keygen.3 \
-        EVP_PKEY_meth_get0_info.3 \
-        EVP_PKEY_meth_new.3 \
         EVP_PKEY_new.3 \
         EVP_PKEY_new_CMAC_key.3 \
         EVP_PKEY_print_private.3 \
diff --git a/src/lib/libcrypto/man/RSA_pkey_ctx_ctrl.3 b/src/lib/libcrypto/man/RSA_pkey_ctx_ctrl.3
index cf16977e74..3d4e79cc47 100644
--- a/src/lib/libcrypto/man/RSA_pkey_ctx_ctrl.3
+++ b/src/lib/libcrypto/man/RSA_pkey_ctx_ctrl.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: RSA_pkey_ctx_ctrl.3,v 1.7 2023/05/05 12:22:21 tb Exp $
+.\" $OpenBSD: RSA_pkey_ctx_ctrl.3,v 1.8 2024/12/06 14:27:49 schwarze Exp $
 .\" full merge up to:
 .\" OpenSSL man3/EVP_PKEY_CTX_ctrl.pod 99d63d46 Oct 26 13:56:48 2016 -0400
 .\" OpenSSL man3/EVP_PKEY_CTX_set_rsa_pss_keygen_md.pod
@@ -55,7 +55,7 @@
 .\" ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED
 .\" OF THE POSSIBILITY OF SUCH DAMAGE.
 .\"
-.Dd $Mdocdate: May 5 2023 $
+.Dd $Mdocdate: December 6 2024 $
 .Dt RSA_PKEY_CTX_CTRL 3
 .Os
 .Sh NAME
@@ -365,7 +365,6 @@ supported by the public key algorithm.
 .Xr EVP_PKEY_encrypt 3 ,
 .Xr EVP_PKEY_get_default_digest_nid 3 ,
 .Xr EVP_PKEY_keygen 3 ,
-.Xr EVP_PKEY_meth_set_ctrl 3 ,
 .Xr EVP_PKEY_sign 3 ,
 .Xr EVP_PKEY_verify 3 ,
 .Xr EVP_PKEY_verify_recover 3
diff --git a/src/lib/libcrypto/man/evp.3 b/src/lib/libcrypto/man/evp.3
index 4f05cc2b2a..2c54c0f981 100644
--- a/src/lib/libcrypto/man/evp.3
+++ b/src/lib/libcrypto/man/evp.3
@@ -1,4 +1,4 @@
-.\" $OpenBSD: evp.3,v 1.35 2024/12/06 13:10:43 schwarze Exp $
+.\" $OpenBSD: evp.3,v 1.36 2024/12/06 14:27:49 schwarze Exp $
 .\" full merge up to: OpenSSL man7/evp 24a535ea Sep 22 13:14:20 2020 +0100
 .\"
 .\" This file was written by Ulf Moeller <ulf@openssl.org>,
@@ -214,8 +214,6 @@ family of functions provides base64 encoding and decoding.
 .Xr EVP_PKEY_encrypt 3 ,
 .Xr EVP_PKEY_get_default_digest_nid 3 ,
 .Xr EVP_PKEY_keygen 3 ,
-.Xr EVP_PKEY_meth_get0_info 3 ,
-.Xr EVP_PKEY_meth_new 3 ,
 .Xr EVP_PKEY_new 3 ,
 .Xr EVP_PKEY_print_private 3 ,
 .Xr EVP_PKEY_set1_RSA 3 ,