1/*
2 * Copyright 1995-2025 The OpenSSL Project Authors. All Rights Reserved.
3 *
4 * Licensed under the Apache License 2.0 (the "License"). You may not use
5 * this file except in compliance with the License. You can obtain a copy
6 * in the file LICENSE in the source distribution or at
7 * https://www.openssl.org/source/license.html
8 */
9
10#ifndef OPENSSL_EVP_H
11#define OPENSSL_EVP_H
12#pragma once
13
14#include <openssl/macros.h>
15#ifndef OPENSSL_NO_DEPRECATED_3_0
16#define HEADER_ENVELOPE_H
17#endif
18
19#include <stdarg.h>
20
21#ifndef OPENSSL_NO_STDIO
22#include <stdio.h>
23#endif
24
25#include <openssl/opensslconf.h>
26#include <openssl/types.h>
27#include <openssl/core.h>
28#include <openssl/core_dispatch.h>
29#include <openssl/symhacks.h>
30#include <openssl/bio.h>
31#include <openssl/evperr.h>
32#include <openssl/params.h>
33
34#define EVP_MAX_MD_SIZE 64 /* longest known is SHA512 */
35#define EVP_MAX_KEY_LENGTH 64
36#define EVP_MAX_IV_LENGTH 16
37#define EVP_MAX_BLOCK_LENGTH 32
38#define EVP_MAX_AEAD_TAG_LENGTH 16
39
40/* Maximum pipes in cipher pipelining */
41#define EVP_MAX_PIPES 32
42
43#define PKCS5_SALT_LEN 8
44/* Default PKCS#5 iteration count */
45#define PKCS5_DEFAULT_ITER 2048
46
47#include <openssl/objects.h>
48
49#ifndef OPENSSL_NO_DEPRECATED_3_0
50#define EVP_PK_RSA 0x0001
51#define EVP_PK_DSA 0x0002
52#define EVP_PK_DH 0x0004
53#define EVP_PK_EC 0x0008
54#define EVP_PKT_SIGN 0x0010
55#define EVP_PKT_ENC 0x0020
56#define EVP_PKT_EXCH 0x0040
57#define EVP_PKS_RSA 0x0100
58#define EVP_PKS_DSA 0x0200
59#define EVP_PKS_EC 0x0400
60#endif
61
62#define EVP_PKEY_NONE NID_undef
63#define EVP_PKEY_RSA NID_rsaEncryption
64#define EVP_PKEY_RSA2 NID_rsa
65#define EVP_PKEY_RSA_PSS NID_rsassaPss
66#define EVP_PKEY_DSA NID_dsa
67#define EVP_PKEY_DSA1 NID_dsa_2
68#define EVP_PKEY_DSA2 NID_dsaWithSHA
69#define EVP_PKEY_DSA3 NID_dsaWithSHA1
70#define EVP_PKEY_DSA4 NID_dsaWithSHA1_2
71#define EVP_PKEY_DH NID_dhKeyAgreement
72#define EVP_PKEY_DHX NID_dhpublicnumber
73#define EVP_PKEY_EC NID_X9_62_id_ecPublicKey
74#define EVP_PKEY_SM2 NID_sm2
75#define EVP_PKEY_HMAC NID_hmac
76#define EVP_PKEY_CMAC NID_cmac
77#define EVP_PKEY_SCRYPT NID_id_scrypt
78#define EVP_PKEY_TLS1_PRF NID_tls1_prf
79#define EVP_PKEY_HKDF NID_hkdf
80#define EVP_PKEY_POLY1305 NID_poly1305
81#define EVP_PKEY_SIPHASH NID_siphash
82#define EVP_PKEY_X25519 NID_X25519
83#define EVP_PKEY_ED25519 NID_ED25519
84#define EVP_PKEY_X448 NID_X448
85#define EVP_PKEY_ED448 NID_ED448
86#define EVP_PKEY_ML_DSA_44 NID_ML_DSA_44
87#define EVP_PKEY_ML_DSA_65 NID_ML_DSA_65
88#define EVP_PKEY_ML_DSA_87 NID_ML_DSA_87
89#define EVP_PKEY_SLH_DSA_SHA2_128S NID_SLH_DSA_SHA2_128s
90#define EVP_PKEY_SLH_DSA_SHA2_128F NID_SLH_DSA_SHA2_128f
91#define EVP_PKEY_SLH_DSA_SHA2_192S NID_SLH_DSA_SHA2_192s
92#define EVP_PKEY_SLH_DSA_SHA2_192F NID_SLH_DSA_SHA2_192f
93#define EVP_PKEY_SLH_DSA_SHA2_256S NID_SLH_DSA_SHA2_256s
94#define EVP_PKEY_SLH_DSA_SHA2_256F NID_SLH_DSA_SHA2_256f
95#define EVP_PKEY_SLH_DSA_SHAKE_128S NID_SLH_DSA_SHAKE_128s
96#define EVP_PKEY_SLH_DSA_SHAKE_128F NID_SLH_DSA_SHAKE_128f
97#define EVP_PKEY_SLH_DSA_SHAKE_192S NID_SLH_DSA_SHAKE_192s
98#define EVP_PKEY_SLH_DSA_SHAKE_192F NID_SLH_DSA_SHAKE_192f
99#define EVP_PKEY_SLH_DSA_SHAKE_256S NID_SLH_DSA_SHAKE_256s
100#define EVP_PKEY_SLH_DSA_SHAKE_256F NID_SLH_DSA_SHAKE_256f
101
102/* Special indicator that the object is uniquely provider side */
103#define EVP_PKEY_KEYMGMT -1
104
105/* Easy to use macros for EVP_PKEY related selections */
106#define EVP_PKEY_KEY_PARAMETERS \
107 (OSSL_KEYMGMT_SELECT_ALL_PARAMETERS)
108#define EVP_PKEY_PRIVATE_KEY \
109 (EVP_PKEY_KEY_PARAMETERS | OSSL_KEYMGMT_SELECT_PRIVATE_KEY)
110#define EVP_PKEY_PUBLIC_KEY \
111 (EVP_PKEY_KEY_PARAMETERS | OSSL_KEYMGMT_SELECT_PUBLIC_KEY)
112#define EVP_PKEY_KEYPAIR \
113 (EVP_PKEY_PUBLIC_KEY | OSSL_KEYMGMT_SELECT_PRIVATE_KEY)
114
115#ifdef __cplusplus
116extern "C" {
117#endif
118
119int EVP_set_default_properties(OSSL_LIB_CTX *libctx, const char *propq);
120char *EVP_get1_default_properties(OSSL_LIB_CTX *libctx);
121int EVP_default_properties_is_fips_enabled(OSSL_LIB_CTX *libctx);
122int EVP_default_properties_enable_fips(OSSL_LIB_CTX *libctx, int enable);
123
124#define EVP_PKEY_MO_SIGN 0x0001
125#define EVP_PKEY_MO_VERIFY 0x0002
126#define EVP_PKEY_MO_ENCRYPT 0x0004
127#define EVP_PKEY_MO_DECRYPT 0x0008
128
129#ifndef EVP_MD
130#ifndef OPENSSL_NO_DEPRECATED_3_0
131OSSL_DEPRECATEDIN_3_0 EVP_MD *EVP_MD_meth_new(int md_type, int pkey_type);
132OSSL_DEPRECATEDIN_3_0 EVP_MD *EVP_MD_meth_dup(const EVP_MD *md);
133OSSL_DEPRECATEDIN_3_0 void EVP_MD_meth_free(EVP_MD *md);
134OSSL_DEPRECATEDIN_3_0
135int EVP_MD_meth_set_input_blocksize(EVP_MD *md, int blocksize);
136OSSL_DEPRECATEDIN_3_0
137int EVP_MD_meth_set_result_size(EVP_MD *md, int resultsize);
138OSSL_DEPRECATEDIN_3_0
139int EVP_MD_meth_set_app_datasize(EVP_MD *md, int datasize);
140OSSL_DEPRECATEDIN_3_0
141int EVP_MD_meth_set_flags(EVP_MD *md, unsigned long flags);
142OSSL_DEPRECATEDIN_3_0
143int EVP_MD_meth_set_init(EVP_MD *md, int (*init)(EVP_MD_CTX *ctx));
144OSSL_DEPRECATEDIN_3_0
145int EVP_MD_meth_set_update(EVP_MD *md, int (*update)(EVP_MD_CTX *ctx, const void *data, size_t count));
146OSSL_DEPRECATEDIN_3_0
147int EVP_MD_meth_set_final(EVP_MD *md, int (*final)(EVP_MD_CTX *ctx, unsigned char *md));
148OSSL_DEPRECATEDIN_3_0
149int EVP_MD_meth_set_copy(EVP_MD *md, int (*copy)(EVP_MD_CTX *to, const EVP_MD_CTX *from));
150OSSL_DEPRECATEDIN_3_0
151int EVP_MD_meth_set_cleanup(EVP_MD *md, int (*cleanup)(EVP_MD_CTX *ctx));
152OSSL_DEPRECATEDIN_3_0
153int EVP_MD_meth_set_ctrl(EVP_MD *md, int (*ctrl)(EVP_MD_CTX *ctx, int cmd, int p1, void *p2));
154OSSL_DEPRECATEDIN_3_0 int EVP_MD_meth_get_input_blocksize(const EVP_MD *md);
155OSSL_DEPRECATEDIN_3_0 int EVP_MD_meth_get_result_size(const EVP_MD *md);
156OSSL_DEPRECATEDIN_3_0 int EVP_MD_meth_get_app_datasize(const EVP_MD *md);
157OSSL_DEPRECATEDIN_3_0 unsigned long EVP_MD_meth_get_flags(const EVP_MD *md);
158OSSL_DEPRECATEDIN_3_0
159int (*EVP_MD_meth_get_init(const EVP_MD *md))(EVP_MD_CTX *ctx);
160OSSL_DEPRECATEDIN_3_0
161int (*EVP_MD_meth_get_update(const EVP_MD *md))(EVP_MD_CTX *ctx,
162 const void *data, size_t count);
163OSSL_DEPRECATEDIN_3_0
164int (*EVP_MD_meth_get_final(const EVP_MD *md))(EVP_MD_CTX *ctx,
165 unsigned char *md);
166OSSL_DEPRECATEDIN_3_0
167int (*EVP_MD_meth_get_copy(const EVP_MD *md))(EVP_MD_CTX *to,
168 const EVP_MD_CTX *from);
169OSSL_DEPRECATEDIN_3_0
170int (*EVP_MD_meth_get_cleanup(const EVP_MD *md))(EVP_MD_CTX *ctx);
171OSSL_DEPRECATEDIN_3_0
172int (*EVP_MD_meth_get_ctrl(const EVP_MD *md))(EVP_MD_CTX *ctx, int cmd,
173 int p1, void *p2);
174#endif
175/* digest can only handle a single block */
176#define EVP_MD_FLAG_ONESHOT 0x0001
177
178/* digest is extensible-output function, XOF */
179#define EVP_MD_FLAG_XOF 0x0002
180
181/* DigestAlgorithmIdentifier flags... */
182
183#define EVP_MD_FLAG_DIGALGID_MASK 0x0018
184
185/* NULL or absent parameter accepted. Use NULL */
186
187#define EVP_MD_FLAG_DIGALGID_NULL 0x0000
188
189/* NULL or absent parameter accepted. Use NULL for PKCS#1 otherwise absent */
190
191#define EVP_MD_FLAG_DIGALGID_ABSENT 0x0008
192
193/* Custom handling via ctrl */
194
195#define EVP_MD_FLAG_DIGALGID_CUSTOM 0x0018
196
197/* Note if suitable for use in FIPS mode */
198#define EVP_MD_FLAG_FIPS 0x0400
199
200/* Digest ctrls */
201
202#define EVP_MD_CTRL_DIGALGID 0x1
203#define EVP_MD_CTRL_MICALG 0x2
204#define EVP_MD_CTRL_XOF_LEN 0x3
205#define EVP_MD_CTRL_TLSTREE 0x4
206
207/* Minimum Algorithm specific ctrl value */
208
209#define EVP_MD_CTRL_ALG_CTRL 0x1000
210
211#endif /* !EVP_MD */
212
213/* values for EVP_MD_CTX flags */
214
215#define EVP_MD_CTX_FLAG_ONESHOT 0x0001 /* digest update will be \
216 * called once only */
217#define EVP_MD_CTX_FLAG_CLEANED 0x0002 /* context has already been \
218 * cleaned */
219#define EVP_MD_CTX_FLAG_REUSE 0x0004 /* Don't free up ctx->md_data \
220 * in EVP_MD_CTX_reset */
221/*
222 * FIPS and pad options are ignored in 1.0.0, definitions are here so we
223 * don't accidentally reuse the values for other purposes.
224 */
225
226/* This flag has no effect from openssl-3.0 onwards */
227#define EVP_MD_CTX_FLAG_NON_FIPS_ALLOW 0x0008
228
229/*
230 * The following PAD options are also currently ignored in 1.0.0, digest
231 * parameters are handled through EVP_DigestSign*() and EVP_DigestVerify*()
232 * instead.
233 */
234#define EVP_MD_CTX_FLAG_PAD_MASK 0xF0 /* RSA mode to use */
235#define EVP_MD_CTX_FLAG_PAD_PKCS1 0x00 /* PKCS#1 v1.5 mode */
236#define EVP_MD_CTX_FLAG_PAD_X931 0x10 /* X9.31 mode */
237#define EVP_MD_CTX_FLAG_PAD_PSS 0x20 /* PSS mode */
238
239#define EVP_MD_CTX_FLAG_NO_INIT 0x0100 /* Don't initialize md_data */
240/*
241 * Some functions such as EVP_DigestSign only finalise copies of internal
242 * contexts so additional data can be included after the finalisation call.
243 * This is inefficient if this functionality is not required: it is disabled
244 * if the following flag is set.
245 */
246#define EVP_MD_CTX_FLAG_FINALISE 0x0200
247/* NOTE: 0x0400 and 0x0800 are reserved for internal usage */
248
249#ifndef OPENSSL_NO_DEPRECATED_3_0
250OSSL_DEPRECATEDIN_3_0
251EVP_CIPHER *EVP_CIPHER_meth_new(int cipher_type, int block_size, int key_len);
252OSSL_DEPRECATEDIN_3_0
253EVP_CIPHER *EVP_CIPHER_meth_dup(const EVP_CIPHER *cipher);
254OSSL_DEPRECATEDIN_3_0
255void EVP_CIPHER_meth_free(EVP_CIPHER *cipher);
256OSSL_DEPRECATEDIN_3_0
257int EVP_CIPHER_meth_set_iv_length(EVP_CIPHER *cipher, int iv_len);
258OSSL_DEPRECATEDIN_3_0
259int EVP_CIPHER_meth_set_flags(EVP_CIPHER *cipher, unsigned long flags);
260OSSL_DEPRECATEDIN_3_0
261int EVP_CIPHER_meth_set_impl_ctx_size(EVP_CIPHER *cipher, int ctx_size);
262OSSL_DEPRECATEDIN_3_0
263int EVP_CIPHER_meth_set_init(EVP_CIPHER *cipher,
264 int (*init)(EVP_CIPHER_CTX *ctx,
265 const unsigned char *key,
266 const unsigned char *iv,
267 int enc));
268OSSL_DEPRECATEDIN_3_0
269int EVP_CIPHER_meth_set_do_cipher(EVP_CIPHER *cipher,
270 int (*do_cipher)(EVP_CIPHER_CTX *ctx,
271 unsigned char *out,
272 const unsigned char *in,
273 size_t inl));
274OSSL_DEPRECATEDIN_3_0
275int EVP_CIPHER_meth_set_cleanup(EVP_CIPHER *cipher,
276 int (*cleanup)(EVP_CIPHER_CTX *));
277OSSL_DEPRECATEDIN_3_0
278int EVP_CIPHER_meth_set_set_asn1_params(EVP_CIPHER *cipher,
279 int (*set_asn1_parameters)(EVP_CIPHER_CTX *,
280 ASN1_TYPE *));
281OSSL_DEPRECATEDIN_3_0
282int EVP_CIPHER_meth_set_get_asn1_params(EVP_CIPHER *cipher,
283 int (*get_asn1_parameters)(EVP_CIPHER_CTX *,
284 ASN1_TYPE *));
285OSSL_DEPRECATEDIN_3_0
286int EVP_CIPHER_meth_set_ctrl(EVP_CIPHER *cipher,
287 int (*ctrl)(EVP_CIPHER_CTX *, int type,
288 int arg, void *ptr));
289OSSL_DEPRECATEDIN_3_0 int (*EVP_CIPHER_meth_get_init(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *ctx,
290 const unsigned char *key,
291 const unsigned char *iv,
292 int enc);
293OSSL_DEPRECATEDIN_3_0 int (*EVP_CIPHER_meth_get_do_cipher(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *ctx,
294 unsigned char *out,
295 const unsigned char *in,
296 size_t inl);
297OSSL_DEPRECATEDIN_3_0 int (*EVP_CIPHER_meth_get_cleanup(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *);
298OSSL_DEPRECATEDIN_3_0 int (*EVP_CIPHER_meth_get_set_asn1_params(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *,
299 ASN1_TYPE *);
300OSSL_DEPRECATEDIN_3_0 int (*EVP_CIPHER_meth_get_get_asn1_params(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *,
301 ASN1_TYPE *);
302OSSL_DEPRECATEDIN_3_0 int (*EVP_CIPHER_meth_get_ctrl(const EVP_CIPHER *cipher))(EVP_CIPHER_CTX *, int type,
303 int arg, void *ptr);
304#endif
305
306/* Values for cipher flags */
307
308/* Modes for ciphers */
309
310#define EVP_CIPH_STREAM_CIPHER 0x0
311#define EVP_CIPH_ECB_MODE 0x1
312#define EVP_CIPH_CBC_MODE 0x2
313#define EVP_CIPH_CFB_MODE 0x3
314#define EVP_CIPH_OFB_MODE 0x4
315#define EVP_CIPH_CTR_MODE 0x5
316#define EVP_CIPH_GCM_MODE 0x6
317#define EVP_CIPH_CCM_MODE 0x7
318#define EVP_CIPH_XTS_MODE 0x10001
319#define EVP_CIPH_WRAP_MODE 0x10002
320#define EVP_CIPH_OCB_MODE 0x10003
321#define EVP_CIPH_SIV_MODE 0x10004
322#define EVP_CIPH_GCM_SIV_MODE 0x10005
323#define EVP_CIPH_MODE 0xF0007
324/* Set if variable length cipher */
325#define EVP_CIPH_VARIABLE_LENGTH 0x8
326/* Set if the iv handling should be done by the cipher itself */
327#define EVP_CIPH_CUSTOM_IV 0x10
328/* Set if the cipher's init() function should be called if key is NULL */
329#define EVP_CIPH_ALWAYS_CALL_INIT 0x20
330/* Call ctrl() to init cipher parameters */
331#define EVP_CIPH_CTRL_INIT 0x40
332/* Don't use standard key length function */
333#define EVP_CIPH_CUSTOM_KEY_LENGTH 0x80
334/* Don't use standard block padding */
335#define EVP_CIPH_NO_PADDING 0x100
336/* cipher handles random key generation */
337#define EVP_CIPH_RAND_KEY 0x200
338/* cipher has its own additional copying logic */
339#define EVP_CIPH_CUSTOM_COPY 0x400
340/* Don't use standard iv length function */
341#define EVP_CIPH_CUSTOM_IV_LENGTH 0x800
342/* Legacy and no longer relevant: Allow use default ASN1 get/set iv */
343#define EVP_CIPH_FLAG_DEFAULT_ASN1 0
344/* Free: 0x1000 */
345/* Buffer length in bits not bytes: CFB1 mode only */
346#define EVP_CIPH_FLAG_LENGTH_BITS 0x2000
347/* Deprecated FIPS flag: was 0x4000 */
348#define EVP_CIPH_FLAG_FIPS 0
349/* Deprecated FIPS flag: was 0x8000 */
350#define EVP_CIPH_FLAG_NON_FIPS_ALLOW 0
351
352/*
353 * Cipher handles any and all padding logic as well as finalisation.
354 */
355#define EVP_CIPH_FLAG_CTS 0x4000
356#define EVP_CIPH_FLAG_CUSTOM_CIPHER 0x100000
357#define EVP_CIPH_FLAG_AEAD_CIPHER 0x200000
358#define EVP_CIPH_FLAG_TLS1_1_MULTIBLOCK 0x400000
359/* Cipher can handle pipeline operations */
360#define EVP_CIPH_FLAG_PIPELINE 0X800000
361/* For provider implementations that handle ASN1 get/set param themselves */
362#define EVP_CIPH_FLAG_CUSTOM_ASN1 0x1000000
363/* For ciphers generating unprotected CMS attributes */
364#define EVP_CIPH_FLAG_CIPHER_WITH_MAC 0x2000000
365/* For supplementary wrap cipher support */
366#define EVP_CIPH_FLAG_GET_WRAP_CIPHER 0x4000000
367#define EVP_CIPH_FLAG_INVERSE_CIPHER 0x8000000
368#define EVP_CIPH_FLAG_ENC_THEN_MAC 0x10000000
369
370/*
371 * Cipher context flag to indicate we can handle wrap mode: if allowed in
372 * older applications it could overflow buffers.
373 */
374
375#define EVP_CIPHER_CTX_FLAG_WRAP_ALLOW 0x1
376
377/* ctrl() values */
378
379#define EVP_CTRL_INIT 0x0
380#define EVP_CTRL_SET_KEY_LENGTH 0x1
381#define EVP_CTRL_GET_RC2_KEY_BITS 0x2
382#define EVP_CTRL_SET_RC2_KEY_BITS 0x3
383#define EVP_CTRL_GET_RC5_ROUNDS 0x4
384#define EVP_CTRL_SET_RC5_ROUNDS 0x5
385#define EVP_CTRL_RAND_KEY 0x6
386#define EVP_CTRL_PBE_PRF_NID 0x7
387#define EVP_CTRL_COPY 0x8
388#define EVP_CTRL_AEAD_SET_IVLEN 0x9
389#define EVP_CTRL_AEAD_GET_TAG 0x10
390#define EVP_CTRL_AEAD_SET_TAG 0x11
391#define EVP_CTRL_AEAD_SET_IV_FIXED 0x12
392#define EVP_CTRL_GCM_SET_IVLEN EVP_CTRL_AEAD_SET_IVLEN
393#define EVP_CTRL_GCM_GET_TAG EVP_CTRL_AEAD_GET_TAG
394#define EVP_CTRL_GCM_SET_TAG EVP_CTRL_AEAD_SET_TAG
395#define EVP_CTRL_GCM_SET_IV_FIXED EVP_CTRL_AEAD_SET_IV_FIXED
396#define EVP_CTRL_GCM_IV_GEN 0x13
397#define EVP_CTRL_CCM_SET_IVLEN EVP_CTRL_AEAD_SET_IVLEN
398#define EVP_CTRL_CCM_GET_TAG EVP_CTRL_AEAD_GET_TAG
399#define EVP_CTRL_CCM_SET_TAG EVP_CTRL_AEAD_SET_TAG
400#define EVP_CTRL_CCM_SET_IV_FIXED EVP_CTRL_AEAD_SET_IV_FIXED
401#define EVP_CTRL_CCM_SET_L 0x14
402#define EVP_CTRL_CCM_SET_MSGLEN 0x15
403/*
404 * AEAD cipher deduces payload length and returns number of bytes required to
405 * store MAC and eventual padding. Subsequent call to EVP_Cipher even
406 * appends/verifies MAC.
407 */
408#define EVP_CTRL_AEAD_TLS1_AAD 0x16
409/* Used by composite AEAD ciphers, no-op in GCM, CCM... */
410#define EVP_CTRL_AEAD_SET_MAC_KEY 0x17
411/* Set the GCM invocation field, decrypt only */
412#define EVP_CTRL_GCM_SET_IV_INV 0x18
413
414#define EVP_CTRL_TLS1_1_MULTIBLOCK_AAD 0x19
415#define EVP_CTRL_TLS1_1_MULTIBLOCK_ENCRYPT 0x1a
416#define EVP_CTRL_TLS1_1_MULTIBLOCK_DECRYPT 0x1b
417#define EVP_CTRL_TLS1_1_MULTIBLOCK_MAX_BUFSIZE 0x1c
418
419#define EVP_CTRL_SSL3_MASTER_SECRET 0x1d
420
421/* EVP_CTRL_SET_SBOX takes the char * specifying S-boxes */
422#define EVP_CTRL_SET_SBOX 0x1e
423/*
424 * EVP_CTRL_SBOX_USED takes a 'size_t' and 'char *', pointing at a
425 * pre-allocated buffer with specified size
426 */
427#define EVP_CTRL_SBOX_USED 0x1f
428/* EVP_CTRL_KEY_MESH takes 'size_t' number of bytes to mesh the key after,
429 * 0 switches meshing off
430 */
431#define EVP_CTRL_KEY_MESH 0x20
432/* EVP_CTRL_BLOCK_PADDING_MODE takes the padding mode */
433#define EVP_CTRL_BLOCK_PADDING_MODE 0x21
434
435/* Set the output buffers to use for a pipelined operation */
436#define EVP_CTRL_SET_PIPELINE_OUTPUT_BUFS 0x22
437/* Set the input buffers to use for a pipelined operation */
438#define EVP_CTRL_SET_PIPELINE_INPUT_BUFS 0x23
439/* Set the input buffer lengths to use for a pipelined operation */
440#define EVP_CTRL_SET_PIPELINE_INPUT_LENS 0x24
441/* Get the IV length used by the cipher */
442#define EVP_CTRL_GET_IVLEN 0x25
443/* 0x26 is unused */
444/* Tell the cipher it's doing a speed test (SIV disallows multiple ops) */
445#define EVP_CTRL_SET_SPEED 0x27
446/* Get the unprotectedAttrs from cipher ctx */
447#define EVP_CTRL_PROCESS_UNPROTECTED 0x28
448/* Get the supplementary wrap cipher */
449#define EVP_CTRL_GET_WRAP_CIPHER 0x29
450/* TLSTREE key diversification */
451#define EVP_CTRL_TLSTREE 0x2A
452
453/* Padding modes */
454#define EVP_PADDING_PKCS7 1
455#define EVP_PADDING_ISO7816_4 2
456#define EVP_PADDING_ANSI923 3
457#define EVP_PADDING_ISO10126 4
458#define EVP_PADDING_ZERO 5
459
460/* RFC 5246 defines additional data to be 13 bytes in length */
461#define EVP_AEAD_TLS1_AAD_LEN 13
462
463typedef struct {
464 unsigned char *out;
465 const unsigned char *inp;
466 size_t len;
467 unsigned int interleave;
468} EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM;
469
470/* GCM TLS constants */
471/* Length of fixed part of IV derived from PRF */
472#define EVP_GCM_TLS_FIXED_IV_LEN 4
473/* Length of explicit part of IV part of TLS records */
474#define EVP_GCM_TLS_EXPLICIT_IV_LEN 8
475/* Length of tag for TLS */
476#define EVP_GCM_TLS_TAG_LEN 16
477
478/* CCM TLS constants */
479/* Length of fixed part of IV derived from PRF */
480#define EVP_CCM_TLS_FIXED_IV_LEN 4
481/* Length of explicit part of IV part of TLS records */
482#define EVP_CCM_TLS_EXPLICIT_IV_LEN 8
483/* Total length of CCM IV length for TLS */
484#define EVP_CCM_TLS_IV_LEN 12
485/* Length of tag for TLS */
486#define EVP_CCM_TLS_TAG_LEN 16
487/* Length of CCM8 tag for TLS */
488#define EVP_CCM8_TLS_TAG_LEN 8
489
490/* Length of tag for TLS */
491#define EVP_CHACHAPOLY_TLS_TAG_LEN 16
492
493typedef struct evp_cipher_info_st {
494 const EVP_CIPHER *cipher;
495 unsigned char iv[EVP_MAX_IV_LENGTH];
496} EVP_CIPHER_INFO;
497
498/* Password based encryption function */
499typedef int(EVP_PBE_KEYGEN)(EVP_CIPHER_CTX *ctx, const char *pass,
500 int passlen, ASN1_TYPE *param,
501 const EVP_CIPHER *cipher, const EVP_MD *md,
502 int en_de);
503
504typedef int(EVP_PBE_KEYGEN_EX)(EVP_CIPHER_CTX *ctx, const char *pass,
505 int passlen, ASN1_TYPE *param,
506 const EVP_CIPHER *cipher, const EVP_MD *md,
507 int en_de, OSSL_LIB_CTX *libctx, const char *propq);
508
509#ifndef OPENSSL_NO_DEPRECATED_3_0
510#define EVP_PKEY_assign_RSA(pkey, rsa) EVP_PKEY_assign((pkey), EVP_PKEY_RSA, \
511 (rsa))
512#endif
513
514#ifndef OPENSSL_NO_DEPRECATED_3_6
515#ifndef OPENSSL_NO_DSA
516#define EVP_PKEY_assign_DSA(pkey, dsa) EVP_PKEY_assign((pkey), EVP_PKEY_DSA, \
517 (dsa))
518#endif
519#endif
520
521#if !defined(OPENSSL_NO_DH) && !defined(OPENSSL_NO_DEPRECATED_3_0)
522#define EVP_PKEY_assign_DH(pkey, dh) EVP_PKEY_assign((pkey), EVP_PKEY_DH, (dh))
523#endif
524
525#ifndef OPENSSL_NO_DEPRECATED_3_0
526#ifndef OPENSSL_NO_EC
527#define EVP_PKEY_assign_EC_KEY(pkey, eckey) EVP_PKEY_assign((pkey), \
528 EVP_PKEY_EC, \
529 (eckey))
530#endif
531#endif
532#ifndef OPENSSL_NO_DEPRECATED_3_6
533#ifndef OPENSSL_NO_SIPHASH
534#define EVP_PKEY_assign_SIPHASH(pkey, shkey) EVP_PKEY_assign((pkey), \
535 EVP_PKEY_SIPHASH, \
536 (shkey))
537#endif
538
539#ifndef OPENSSL_NO_POLY1305
540#define EVP_PKEY_assign_POLY1305(pkey, polykey) EVP_PKEY_assign((pkey), \
541 EVP_PKEY_POLY1305, \
542 (polykey))
543#endif
544#endif
545
546/* Add some extra combinations */
547#define EVP_get_digestbynid(a) EVP_get_digestbyname(OBJ_nid2sn(a))
548#define EVP_get_digestbyobj(a) EVP_get_digestbynid(OBJ_obj2nid(a))
549#define EVP_get_cipherbynid(a) EVP_get_cipherbyname(OBJ_nid2sn(a))
550#define EVP_get_cipherbyobj(a) EVP_get_cipherbynid(OBJ_obj2nid(a))
551
552int EVP_MD_get_type(const EVP_MD *md);
553#define EVP_MD_type EVP_MD_get_type
554#define EVP_MD_nid EVP_MD_get_type
555const char *EVP_MD_get0_name(const EVP_MD *md);
556#define EVP_MD_name EVP_MD_get0_name
557const char *EVP_MD_get0_description(const EVP_MD *md);
558int EVP_MD_is_a(const EVP_MD *md, const char *name);
559int EVP_MD_names_do_all(const EVP_MD *md,
560 void (*fn)(const char *name, void *data),
561 void *data);
562const OSSL_PROVIDER *EVP_MD_get0_provider(const EVP_MD *md);
563int EVP_MD_get_pkey_type(const EVP_MD *md);
564#define EVP_MD_pkey_type EVP_MD_get_pkey_type
565int EVP_MD_get_size(const EVP_MD *md);
566#define EVP_MD_size EVP_MD_get_size
567int EVP_MD_get_block_size(const EVP_MD *md);
568#define EVP_MD_block_size EVP_MD_get_block_size
569unsigned long EVP_MD_get_flags(const EVP_MD *md);
570#define EVP_MD_flags EVP_MD_get_flags
571int EVP_MD_xof(const EVP_MD *md);
572
573const EVP_MD *EVP_MD_CTX_get0_md(const EVP_MD_CTX *ctx);
574EVP_MD *EVP_MD_CTX_get1_md(EVP_MD_CTX *ctx);
575#ifndef OPENSSL_NO_DEPRECATED_3_0
576OSSL_DEPRECATEDIN_3_0
577const EVP_MD *EVP_MD_CTX_md(const EVP_MD_CTX *ctx);
578OSSL_DEPRECATEDIN_3_0
579int (*EVP_MD_CTX_update_fn(EVP_MD_CTX *ctx))(EVP_MD_CTX *ctx,
580 const void *data, size_t count);
581OSSL_DEPRECATEDIN_3_0
582void EVP_MD_CTX_set_update_fn(EVP_MD_CTX *ctx,
583 int (*update)(EVP_MD_CTX *ctx,
584 const void *data, size_t count));
585#endif
586int EVP_MD_CTX_get_size_ex(const EVP_MD_CTX *ctx);
587
588#define EVP_MD_CTX_get0_name(e) EVP_MD_get0_name(EVP_MD_CTX_get0_md(e))
589#define EVP_MD_CTX_get_size(e) EVP_MD_CTX_get_size_ex(e)
590#define EVP_MD_CTX_size EVP_MD_CTX_get_size_ex
591#define EVP_MD_CTX_get_block_size(e) EVP_MD_get_block_size(EVP_MD_CTX_get0_md(e))
592#define EVP_MD_CTX_block_size EVP_MD_CTX_get_block_size
593#define EVP_MD_CTX_get_type(e) EVP_MD_get_type(EVP_MD_CTX_get0_md(e))
594#define EVP_MD_CTX_type EVP_MD_CTX_get_type
595EVP_PKEY_CTX *EVP_MD_CTX_get_pkey_ctx(const EVP_MD_CTX *ctx);
596#define EVP_MD_CTX_pkey_ctx EVP_MD_CTX_get_pkey_ctx
597void EVP_MD_CTX_set_pkey_ctx(EVP_MD_CTX *ctx, EVP_PKEY_CTX *pctx);
598void *EVP_MD_CTX_get0_md_data(const EVP_MD_CTX *ctx);
599#define EVP_MD_CTX_md_data EVP_MD_CTX_get0_md_data
600
601int EVP_CIPHER_get_nid(const EVP_CIPHER *cipher);
602#define EVP_CIPHER_nid EVP_CIPHER_get_nid
603const char *EVP_CIPHER_get0_name(const EVP_CIPHER *cipher);
604#define EVP_CIPHER_name EVP_CIPHER_get0_name
605const char *EVP_CIPHER_get0_description(const EVP_CIPHER *cipher);
606int EVP_CIPHER_is_a(const EVP_CIPHER *cipher, const char *name);
607int EVP_CIPHER_names_do_all(const EVP_CIPHER *cipher,
608 void (*fn)(const char *name, void *data),
609 void *data);
610const OSSL_PROVIDER *EVP_CIPHER_get0_provider(const EVP_CIPHER *cipher);
611int EVP_CIPHER_get_block_size(const EVP_CIPHER *cipher);
612#define EVP_CIPHER_block_size EVP_CIPHER_get_block_size
613#ifndef OPENSSL_NO_DEPRECATED_3_0
614OSSL_DEPRECATEDIN_3_0
615int EVP_CIPHER_impl_ctx_size(const EVP_CIPHER *cipher);
616#endif
617int EVP_CIPHER_get_key_length(const EVP_CIPHER *cipher);
618#define EVP_CIPHER_key_length EVP_CIPHER_get_key_length
619int EVP_CIPHER_get_iv_length(const EVP_CIPHER *cipher);
620#define EVP_CIPHER_iv_length EVP_CIPHER_get_iv_length
621unsigned long EVP_CIPHER_get_flags(const EVP_CIPHER *cipher);
622#define EVP_CIPHER_flags EVP_CIPHER_get_flags
623int EVP_CIPHER_get_mode(const EVP_CIPHER *cipher);
624#define EVP_CIPHER_mode EVP_CIPHER_get_mode
625int EVP_CIPHER_get_type(const EVP_CIPHER *cipher);
626#define EVP_CIPHER_type EVP_CIPHER_get_type
627EVP_CIPHER *EVP_CIPHER_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
628 const char *properties);
629int EVP_CIPHER_can_pipeline(const EVP_CIPHER *cipher, int enc);
630int EVP_CIPHER_up_ref(EVP_CIPHER *cipher);
631void EVP_CIPHER_free(EVP_CIPHER *cipher);
632
633const EVP_CIPHER *EVP_CIPHER_CTX_get0_cipher(const EVP_CIPHER_CTX *ctx);
634EVP_CIPHER *EVP_CIPHER_CTX_get1_cipher(EVP_CIPHER_CTX *ctx);
635int EVP_CIPHER_CTX_is_encrypting(const EVP_CIPHER_CTX *ctx);
636#define EVP_CIPHER_CTX_encrypting EVP_CIPHER_CTX_is_encrypting
637int EVP_CIPHER_CTX_get_nid(const EVP_CIPHER_CTX *ctx);
638#define EVP_CIPHER_CTX_nid EVP_CIPHER_CTX_get_nid
639int EVP_CIPHER_CTX_get_block_size(const EVP_CIPHER_CTX *ctx);
640#define EVP_CIPHER_CTX_block_size EVP_CIPHER_CTX_get_block_size
641int EVP_CIPHER_CTX_get_key_length(const EVP_CIPHER_CTX *ctx);
642#define EVP_CIPHER_CTX_key_length EVP_CIPHER_CTX_get_key_length
643int EVP_CIPHER_CTX_get_iv_length(const EVP_CIPHER_CTX *ctx);
644#define EVP_CIPHER_CTX_iv_length EVP_CIPHER_CTX_get_iv_length
645int EVP_CIPHER_CTX_get_tag_length(const EVP_CIPHER_CTX *ctx);
646#define EVP_CIPHER_CTX_tag_length EVP_CIPHER_CTX_get_tag_length
647#ifndef OPENSSL_NO_DEPRECATED_3_0
648const EVP_CIPHER *EVP_CIPHER_CTX_cipher(const EVP_CIPHER_CTX *ctx);
649OSSL_DEPRECATEDIN_3_0 const unsigned char *EVP_CIPHER_CTX_iv(const EVP_CIPHER_CTX *ctx);
650OSSL_DEPRECATEDIN_3_0 const unsigned char *EVP_CIPHER_CTX_original_iv(const EVP_CIPHER_CTX *ctx);
651OSSL_DEPRECATEDIN_3_0 unsigned char *EVP_CIPHER_CTX_iv_noconst(EVP_CIPHER_CTX *ctx);
652#endif
653int EVP_CIPHER_CTX_get_updated_iv(EVP_CIPHER_CTX *ctx, void *buf, size_t len);
654int EVP_CIPHER_CTX_get_original_iv(EVP_CIPHER_CTX *ctx, void *buf, size_t len);
655#ifndef OPENSSL_NO_DEPRECATED_3_0
656OSSL_DEPRECATEDIN_3_0
657unsigned char *EVP_CIPHER_CTX_buf_noconst(EVP_CIPHER_CTX *ctx);
658#endif
659int EVP_CIPHER_CTX_get_num(const EVP_CIPHER_CTX *ctx);
660#define EVP_CIPHER_CTX_num EVP_CIPHER_CTX_get_num
661int EVP_CIPHER_CTX_set_num(EVP_CIPHER_CTX *ctx, int num);
662EVP_CIPHER_CTX *EVP_CIPHER_CTX_dup(const EVP_CIPHER_CTX *in);
663int EVP_CIPHER_CTX_copy(EVP_CIPHER_CTX *out, const EVP_CIPHER_CTX *in);
664void *EVP_CIPHER_CTX_get_app_data(const EVP_CIPHER_CTX *ctx);
665void EVP_CIPHER_CTX_set_app_data(EVP_CIPHER_CTX *ctx, void *data);
666void *EVP_CIPHER_CTX_get_cipher_data(const EVP_CIPHER_CTX *ctx);
667void *EVP_CIPHER_CTX_set_cipher_data(EVP_CIPHER_CTX *ctx, void *cipher_data);
668#define EVP_CIPHER_CTX_get0_name(c) EVP_CIPHER_get0_name(EVP_CIPHER_CTX_get0_cipher(c))
669#define EVP_CIPHER_CTX_get_type(c) EVP_CIPHER_get_type(EVP_CIPHER_CTX_get0_cipher(c))
670#define EVP_CIPHER_CTX_type EVP_CIPHER_CTX_get_type
671#ifndef OPENSSL_NO_DEPRECATED_1_1_0
672#define EVP_CIPHER_CTX_flags(c) EVP_CIPHER_get_flags(EVP_CIPHER_CTX_get0_cipher(c))
673#endif
674#define EVP_CIPHER_CTX_get_mode(c) EVP_CIPHER_get_mode(EVP_CIPHER_CTX_get0_cipher(c))
675#define EVP_CIPHER_CTX_mode EVP_CIPHER_CTX_get_mode
676
677#define EVP_ENCODE_LENGTH(l) ((((l) + 2) / 3 * 4) + ((l) / 48 + 1) * 2 + 80)
678#define EVP_DECODE_LENGTH(l) (((l) + 3) / 4 * 3 + 80)
679
680#define EVP_SignInit_ex(a, b, c) EVP_DigestInit_ex(a, b, c)
681#define EVP_SignInit(a, b) EVP_DigestInit(a, b)
682#define EVP_SignUpdate(a, b, c) EVP_DigestUpdate(a, b, c)
683#define EVP_VerifyInit_ex(a, b, c) EVP_DigestInit_ex(a, b, c)
684#define EVP_VerifyInit(a, b) EVP_DigestInit(a, b)
685#define EVP_VerifyUpdate(a, b, c) EVP_DigestUpdate(a, b, c)
686#define EVP_OpenUpdate(a, b, c, d, e) EVP_DecryptUpdate(a, b, c, d, e)
687#define EVP_SealUpdate(a, b, c, d, e) EVP_EncryptUpdate(a, b, c, d, e)
688
689#ifdef CONST_STRICT
690void BIO_set_md(BIO *, const EVP_MD *md);
691#else
692#define BIO_set_md(b, md) BIO_ctrl(b, BIO_C_SET_MD, 0, (void *)(md))
693#endif
694#define BIO_get_md(b, mdp) BIO_ctrl(b, BIO_C_GET_MD, 0, (mdp))
695#define BIO_get_md_ctx(b, mdcp) BIO_ctrl(b, BIO_C_GET_MD_CTX, 0, (mdcp))
696#define BIO_set_md_ctx(b, mdcp) BIO_ctrl(b, BIO_C_SET_MD_CTX, 0, (mdcp))
697#define BIO_get_cipher_status(b) BIO_ctrl(b, BIO_C_GET_CIPHER_STATUS, 0, NULL)
698#define BIO_get_cipher_ctx(b, c_pp) BIO_ctrl(b, BIO_C_GET_CIPHER_CTX, 0, (c_pp))
699
700__owur int EVP_Cipher(EVP_CIPHER_CTX *c,
701 unsigned char *out,
702 const unsigned char *in, unsigned int inl);
703
704#define EVP_add_cipher_alias(n, alias) \
705 OBJ_NAME_add((alias), OBJ_NAME_TYPE_CIPHER_METH | OBJ_NAME_ALIAS, (n))
706#define EVP_add_digest_alias(n, alias) \
707 OBJ_NAME_add((alias), OBJ_NAME_TYPE_MD_METH | OBJ_NAME_ALIAS, (n))
708#define EVP_delete_cipher_alias(alias) \
709 OBJ_NAME_remove(alias, OBJ_NAME_TYPE_CIPHER_METH | OBJ_NAME_ALIAS);
710#define EVP_delete_digest_alias(alias) \
711 OBJ_NAME_remove(alias, OBJ_NAME_TYPE_MD_METH | OBJ_NAME_ALIAS);
712
713int EVP_MD_get_params(const EVP_MD *digest, OSSL_PARAM params[]);
714int EVP_MD_CTX_set_params(EVP_MD_CTX *ctx, const OSSL_PARAM params[]);
715int EVP_MD_CTX_get_params(EVP_MD_CTX *ctx, OSSL_PARAM params[]);
716const OSSL_PARAM *EVP_MD_gettable_params(const EVP_MD *digest);
717const OSSL_PARAM *EVP_MD_settable_ctx_params(const EVP_MD *md);
718const OSSL_PARAM *EVP_MD_gettable_ctx_params(const EVP_MD *md);
719const OSSL_PARAM *EVP_MD_CTX_settable_params(EVP_MD_CTX *ctx);
720const OSSL_PARAM *EVP_MD_CTX_gettable_params(EVP_MD_CTX *ctx);
721int EVP_MD_CTX_ctrl(EVP_MD_CTX *ctx, int cmd, int p1, void *p2);
722EVP_MD_CTX *EVP_MD_CTX_new(void);
723int EVP_MD_CTX_reset(EVP_MD_CTX *ctx);
724void EVP_MD_CTX_free(EVP_MD_CTX *ctx);
725#define EVP_MD_CTX_create() EVP_MD_CTX_new()
726#define EVP_MD_CTX_init(ctx) EVP_MD_CTX_reset((ctx))
727#define EVP_MD_CTX_destroy(ctx) EVP_MD_CTX_free((ctx))
728__owur EVP_MD_CTX *EVP_MD_CTX_dup(const EVP_MD_CTX *in);
729__owur int EVP_MD_CTX_copy_ex(EVP_MD_CTX *out, const EVP_MD_CTX *in);
730void EVP_MD_CTX_set_flags(EVP_MD_CTX *ctx, int flags);
731void EVP_MD_CTX_clear_flags(EVP_MD_CTX *ctx, int flags);
732int EVP_MD_CTX_test_flags(const EVP_MD_CTX *ctx, int flags);
733__owur int EVP_DigestInit_ex2(EVP_MD_CTX *ctx, const EVP_MD *type,
734 const OSSL_PARAM params[]);
735__owur int EVP_DigestInit_ex(EVP_MD_CTX *ctx, const EVP_MD *type,
736 ENGINE *impl);
737__owur int EVP_DigestUpdate(EVP_MD_CTX *ctx, const void *d,
738 size_t cnt);
739__owur int EVP_DigestFinal_ex(EVP_MD_CTX *ctx, unsigned char *md,
740 unsigned int *s);
741__owur int EVP_Digest(const void *data, size_t count,
742 unsigned char *md, unsigned int *size,
743 const EVP_MD *type, ENGINE *impl);
744__owur int EVP_Q_digest(OSSL_LIB_CTX *libctx, const char *name,
745 const char *propq, const void *data, size_t datalen,
746 unsigned char *md, size_t *mdlen);
747
748__owur int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
749__owur int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
750__owur int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md,
751 unsigned int *s);
752__owur int EVP_DigestFinalXOF(EVP_MD_CTX *ctx, unsigned char *out,
753 size_t outlen);
754__owur int EVP_DigestSqueeze(EVP_MD_CTX *ctx, unsigned char *out,
755 size_t outlen);
756
757__owur EVP_MD *EVP_MD_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
758 const char *properties);
759
760int EVP_MD_up_ref(EVP_MD *md);
761void EVP_MD_free(EVP_MD *md);
762
763int EVP_read_pw_string(char *buf, int length, const char *prompt, int verify);
764int EVP_read_pw_string_min(char *buf, int minlen, int maxlen,
765 const char *prompt, int verify);
766void EVP_set_pw_prompt(const char *prompt);
767char *EVP_get_pw_prompt(void);
768
769__owur int EVP_BytesToKey(const EVP_CIPHER *type, const EVP_MD *md,
770 const unsigned char *salt,
771 const unsigned char *data, int datal, int count,
772 unsigned char *key, unsigned char *iv);
773
774void EVP_CIPHER_CTX_set_flags(EVP_CIPHER_CTX *ctx, int flags);
775void EVP_CIPHER_CTX_clear_flags(EVP_CIPHER_CTX *ctx, int flags);
776int EVP_CIPHER_CTX_test_flags(const EVP_CIPHER_CTX *ctx, int flags);
777
778__owur int EVP_EncryptInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
779 const unsigned char *key, const unsigned char *iv);
780__owur int EVP_EncryptInit_ex(EVP_CIPHER_CTX *ctx,
781 const EVP_CIPHER *cipher, ENGINE *impl,
782 const unsigned char *key,
783 const unsigned char *iv);
784__owur int EVP_EncryptInit_ex2(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
785 const unsigned char *key,
786 const unsigned char *iv,
787 const OSSL_PARAM params[]);
788__owur int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out,
789 int *outl, const unsigned char *in, int inl);
790__owur int EVP_EncryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out,
791 int *outl);
792__owur int EVP_EncryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *out,
793 int *outl);
794
795__owur int EVP_DecryptInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
796 const unsigned char *key, const unsigned char *iv);
797__owur int EVP_DecryptInit_ex(EVP_CIPHER_CTX *ctx,
798 const EVP_CIPHER *cipher, ENGINE *impl,
799 const unsigned char *key,
800 const unsigned char *iv);
801__owur int EVP_DecryptInit_ex2(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
802 const unsigned char *key,
803 const unsigned char *iv,
804 const OSSL_PARAM params[]);
805__owur int EVP_DecryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out,
806 int *outl, const unsigned char *in, int inl);
807__owur int EVP_DecryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *outm,
808 int *outl);
809__owur int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *outm,
810 int *outl);
811
812__owur int EVP_CipherInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
813 const unsigned char *key, const unsigned char *iv,
814 int enc);
815__owur int EVP_CipherInit_ex(EVP_CIPHER_CTX *ctx,
816 const EVP_CIPHER *cipher, ENGINE *impl,
817 const unsigned char *key,
818 const unsigned char *iv, int enc);
819__owur int EVP_CipherInit_SKEY(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
820 EVP_SKEY *skey, const unsigned char *iv, size_t iv_len,
821 int enc, const OSSL_PARAM params[]);
822__owur int EVP_CipherInit_ex2(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
823 const unsigned char *key, const unsigned char *iv,
824 int enc, const OSSL_PARAM params[]);
825__owur int EVP_CipherUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out,
826 int *outl, const unsigned char *in, int inl);
827__owur int EVP_CipherFinal(EVP_CIPHER_CTX *ctx, unsigned char *outm,
828 int *outl);
829__owur int EVP_CipherPipelineEncryptInit(EVP_CIPHER_CTX *ctx,
830 const EVP_CIPHER *cipher,
831 const unsigned char *key, size_t keylen,
832 size_t numpipes,
833 const unsigned char **iv, size_t ivlen);
834__owur int EVP_CipherPipelineDecryptInit(EVP_CIPHER_CTX *ctx,
835 const EVP_CIPHER *cipher,
836 const unsigned char *key, size_t keylen,
837 size_t numpipes,
838 const unsigned char **iv, size_t ivlen);
839__owur int EVP_CipherPipelineUpdate(EVP_CIPHER_CTX *ctx,
840 unsigned char **out, size_t *outl,
841 const size_t *outsize,
842 const unsigned char **in, const size_t *inl);
843__owur int EVP_CipherPipelineFinal(EVP_CIPHER_CTX *ctx,
844 unsigned char **outm, size_t *outl,
845 const size_t *outsize);
846__owur int EVP_CipherFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *outm,
847 int *outl);
848
849__owur int EVP_SignFinal(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *s,
850 EVP_PKEY *pkey);
851__owur int EVP_SignFinal_ex(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *s,
852 EVP_PKEY *pkey, OSSL_LIB_CTX *libctx,
853 const char *propq);
854
855__owur int EVP_DigestSign(EVP_MD_CTX *ctx, unsigned char *sigret,
856 size_t *siglen, const unsigned char *tbs,
857 size_t tbslen);
858
859__owur int EVP_VerifyFinal(EVP_MD_CTX *ctx, const unsigned char *sigbuf,
860 unsigned int siglen, EVP_PKEY *pkey);
861__owur int EVP_VerifyFinal_ex(EVP_MD_CTX *ctx, const unsigned char *sigbuf,
862 unsigned int siglen, EVP_PKEY *pkey,
863 OSSL_LIB_CTX *libctx, const char *propq);
864
865__owur int EVP_DigestVerify(EVP_MD_CTX *ctx, const unsigned char *sigret,
866 size_t siglen, const unsigned char *tbs,
867 size_t tbslen);
868
869__owur int EVP_DigestSignInit_ex(EVP_MD_CTX *ctx, EVP_PKEY_CTX **pctx,
870 const char *mdname, OSSL_LIB_CTX *libctx,
871 const char *props, EVP_PKEY *pkey,
872 const OSSL_PARAM params[]);
873__owur int EVP_DigestSignInit(EVP_MD_CTX *ctx, EVP_PKEY_CTX **pctx,
874 const EVP_MD *type, ENGINE *e,
875 EVP_PKEY *pkey);
876__owur int EVP_DigestSignUpdate(EVP_MD_CTX *ctx, const void *data, size_t dsize);
877__owur int EVP_DigestSignFinal(EVP_MD_CTX *ctx, unsigned char *sigret,
878 size_t *siglen);
879
880__owur int EVP_DigestVerifyInit_ex(EVP_MD_CTX *ctx, EVP_PKEY_CTX **pctx,
881 const char *mdname, OSSL_LIB_CTX *libctx,
882 const char *props, EVP_PKEY *pkey,
883 const OSSL_PARAM params[]);
884__owur int EVP_DigestVerifyInit(EVP_MD_CTX *ctx, EVP_PKEY_CTX **pctx,
885 const EVP_MD *type, ENGINE *e,
886 EVP_PKEY *pkey);
887int EVP_DigestVerifyUpdate(EVP_MD_CTX *ctx, const void *data, size_t dsize);
888__owur int EVP_DigestVerifyFinal(EVP_MD_CTX *ctx, const unsigned char *sig,
889 size_t siglen);
890
891__owur int EVP_OpenInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
892 const unsigned char *ek, int ekl,
893 const unsigned char *iv, EVP_PKEY *priv);
894__owur int EVP_OpenFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
895
896__owur int EVP_SealInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
897 unsigned char **ek, int *ekl, unsigned char *iv,
898 EVP_PKEY **pubk, int npubk);
899__owur int EVP_SealFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
900
901EVP_ENCODE_CTX *EVP_ENCODE_CTX_new(void);
902void EVP_ENCODE_CTX_free(EVP_ENCODE_CTX *ctx);
903int EVP_ENCODE_CTX_copy(EVP_ENCODE_CTX *dctx, const EVP_ENCODE_CTX *sctx);
904int EVP_ENCODE_CTX_num(EVP_ENCODE_CTX *ctx);
905void EVP_EncodeInit(EVP_ENCODE_CTX *ctx);
906int EVP_EncodeUpdate(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl,
907 const unsigned char *in, int inl);
908void EVP_EncodeFinal(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl);
909int EVP_EncodeBlock(unsigned char *t, const unsigned char *f, int n);
910
911void EVP_DecodeInit(EVP_ENCODE_CTX *ctx);
912int EVP_DecodeUpdate(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl,
913 const unsigned char *in, int inl);
914int EVP_DecodeFinal(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl);
915int EVP_DecodeBlock(unsigned char *t, const unsigned char *f, int n);
916
917#ifndef OPENSSL_NO_DEPRECATED_1_1_0
918#define EVP_CIPHER_CTX_init(c) EVP_CIPHER_CTX_reset(c)
919#define EVP_CIPHER_CTX_cleanup(c) EVP_CIPHER_CTX_reset(c)
920#endif
921EVP_CIPHER_CTX *EVP_CIPHER_CTX_new(void);
922int EVP_CIPHER_CTX_reset(EVP_CIPHER_CTX *c);
923void EVP_CIPHER_CTX_free(EVP_CIPHER_CTX *c);
924int EVP_CIPHER_CTX_set_key_length(EVP_CIPHER_CTX *x, int keylen);
925int EVP_CIPHER_CTX_set_padding(EVP_CIPHER_CTX *c, int pad);
926int EVP_CIPHER_CTX_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void *ptr);
927int EVP_CIPHER_CTX_rand_key(EVP_CIPHER_CTX *ctx, unsigned char *key);
928int EVP_CIPHER_get_params(EVP_CIPHER *cipher, OSSL_PARAM params[]);
929int EVP_CIPHER_CTX_set_params(EVP_CIPHER_CTX *ctx, const OSSL_PARAM params[]);
930int EVP_CIPHER_CTX_get_params(EVP_CIPHER_CTX *ctx, OSSL_PARAM params[]);
931const OSSL_PARAM *EVP_CIPHER_gettable_params(const EVP_CIPHER *cipher);
932const OSSL_PARAM *EVP_CIPHER_settable_ctx_params(const EVP_CIPHER *cipher);
933const OSSL_PARAM *EVP_CIPHER_gettable_ctx_params(const EVP_CIPHER *cipher);
934const OSSL_PARAM *EVP_CIPHER_CTX_settable_params(EVP_CIPHER_CTX *ctx);
935const OSSL_PARAM *EVP_CIPHER_CTX_gettable_params(EVP_CIPHER_CTX *ctx);
936
937int EVP_CIPHER_CTX_set_algor_params(EVP_CIPHER_CTX *ctx, const X509_ALGOR *alg);
938int EVP_CIPHER_CTX_get_algor_params(EVP_CIPHER_CTX *ctx, X509_ALGOR *alg);
939int EVP_CIPHER_CTX_get_algor(EVP_CIPHER_CTX *ctx, X509_ALGOR **alg);
940
941const BIO_METHOD *BIO_f_md(void);
942const BIO_METHOD *BIO_f_base64(void);
943const BIO_METHOD *BIO_f_cipher(void);
944const BIO_METHOD *BIO_f_reliable(void);
945__owur int BIO_set_cipher(BIO *b, const EVP_CIPHER *c, const unsigned char *k,
946 const unsigned char *i, int enc);
947
948const EVP_MD *EVP_md_null(void);
949#ifndef OPENSSL_NO_MD2
950const EVP_MD *EVP_md2(void);
951#endif
952#ifndef OPENSSL_NO_MD4
953const EVP_MD *EVP_md4(void);
954#endif
955#ifndef OPENSSL_NO_MD5
956const EVP_MD *EVP_md5(void);
957const EVP_MD *EVP_md5_sha1(void);
958#endif
959#ifndef OPENSSL_NO_BLAKE2
960const EVP_MD *EVP_blake2b512(void);
961const EVP_MD *EVP_blake2s256(void);
962#endif
963const EVP_MD *EVP_sha1(void);
964const EVP_MD *EVP_sha224(void);
965const EVP_MD *EVP_sha256(void);
966const EVP_MD *EVP_sha384(void);
967const EVP_MD *EVP_sha512(void);
968const EVP_MD *EVP_sha512_224(void);
969const EVP_MD *EVP_sha512_256(void);
970const EVP_MD *EVP_sha3_224(void);
971const EVP_MD *EVP_sha3_256(void);
972const EVP_MD *EVP_sha3_384(void);
973const EVP_MD *EVP_sha3_512(void);
974const EVP_MD *EVP_shake128(void);
975const EVP_MD *EVP_shake256(void);
976
977#ifndef OPENSSL_NO_MDC2
978const EVP_MD *EVP_mdc2(void);
979#endif
980#ifndef OPENSSL_NO_RMD160
981const EVP_MD *EVP_ripemd160(void);
982#endif
983#ifndef OPENSSL_NO_WHIRLPOOL
984const EVP_MD *EVP_whirlpool(void);
985#endif
986#ifndef OPENSSL_NO_SM3
987const EVP_MD *EVP_sm3(void);
988#endif
989const EVP_CIPHER *EVP_enc_null(void); /* does nothing :-) */
990#ifndef OPENSSL_NO_DES
991const EVP_CIPHER *EVP_des_ecb(void);
992const EVP_CIPHER *EVP_des_ede(void);
993const EVP_CIPHER *EVP_des_ede3(void);
994const EVP_CIPHER *EVP_des_ede_ecb(void);
995const EVP_CIPHER *EVP_des_ede3_ecb(void);
996const EVP_CIPHER *EVP_des_cfb64(void);
997#define EVP_des_cfb EVP_des_cfb64
998const EVP_CIPHER *EVP_des_cfb1(void);
999const EVP_CIPHER *EVP_des_cfb8(void);
1000const EVP_CIPHER *EVP_des_ede_cfb64(void);
1001#define EVP_des_ede_cfb EVP_des_ede_cfb64
1002const EVP_CIPHER *EVP_des_ede3_cfb64(void);
1003#define EVP_des_ede3_cfb EVP_des_ede3_cfb64
1004const EVP_CIPHER *EVP_des_ede3_cfb1(void);
1005const EVP_CIPHER *EVP_des_ede3_cfb8(void);
1006const EVP_CIPHER *EVP_des_ofb(void);
1007const EVP_CIPHER *EVP_des_ede_ofb(void);
1008const EVP_CIPHER *EVP_des_ede3_ofb(void);
1009const EVP_CIPHER *EVP_des_cbc(void);
1010const EVP_CIPHER *EVP_des_ede_cbc(void);
1011const EVP_CIPHER *EVP_des_ede3_cbc(void);
1012const EVP_CIPHER *EVP_desx_cbc(void);
1013const EVP_CIPHER *EVP_des_ede3_wrap(void);
1014/*
1015 * This should now be supported through the dev_crypto ENGINE. But also, why
1016 * are rc4 and md5 declarations made here inside a "NO_DES" precompiler
1017 * branch?
1018 */
1019#endif
1020#ifndef OPENSSL_NO_RC4
1021const EVP_CIPHER *EVP_rc4(void);
1022const EVP_CIPHER *EVP_rc4_40(void);
1023#ifndef OPENSSL_NO_MD5
1024const EVP_CIPHER *EVP_rc4_hmac_md5(void);
1025#endif
1026#endif
1027#ifndef OPENSSL_NO_IDEA
1028const EVP_CIPHER *EVP_idea_ecb(void);
1029const EVP_CIPHER *EVP_idea_cfb64(void);
1030#define EVP_idea_cfb EVP_idea_cfb64
1031const EVP_CIPHER *EVP_idea_ofb(void);
1032const EVP_CIPHER *EVP_idea_cbc(void);
1033#endif
1034#ifndef OPENSSL_NO_RC2
1035const EVP_CIPHER *EVP_rc2_ecb(void);
1036const EVP_CIPHER *EVP_rc2_cbc(void);
1037const EVP_CIPHER *EVP_rc2_40_cbc(void);
1038const EVP_CIPHER *EVP_rc2_64_cbc(void);
1039const EVP_CIPHER *EVP_rc2_cfb64(void);
1040#define EVP_rc2_cfb EVP_rc2_cfb64
1041const EVP_CIPHER *EVP_rc2_ofb(void);
1042#endif
1043#ifndef OPENSSL_NO_BF
1044const EVP_CIPHER *EVP_bf_ecb(void);
1045const EVP_CIPHER *EVP_bf_cbc(void);
1046const EVP_CIPHER *EVP_bf_cfb64(void);
1047#define EVP_bf_cfb EVP_bf_cfb64
1048const EVP_CIPHER *EVP_bf_ofb(void);
1049#endif
1050#ifndef OPENSSL_NO_CAST
1051const EVP_CIPHER *EVP_cast5_ecb(void);
1052const EVP_CIPHER *EVP_cast5_cbc(void);
1053const EVP_CIPHER *EVP_cast5_cfb64(void);
1054#define EVP_cast5_cfb EVP_cast5_cfb64
1055const EVP_CIPHER *EVP_cast5_ofb(void);
1056#endif
1057#ifndef OPENSSL_NO_RC5
1058const EVP_CIPHER *EVP_rc5_32_12_16_cbc(void);
1059const EVP_CIPHER *EVP_rc5_32_12_16_ecb(void);
1060const EVP_CIPHER *EVP_rc5_32_12_16_cfb64(void);
1061#define EVP_rc5_32_12_16_cfb EVP_rc5_32_12_16_cfb64
1062const EVP_CIPHER *EVP_rc5_32_12_16_ofb(void);
1063#endif
1064const EVP_CIPHER *EVP_aes_128_ecb(void);
1065const EVP_CIPHER *EVP_aes_128_cbc(void);
1066const EVP_CIPHER *EVP_aes_128_cfb1(void);
1067const EVP_CIPHER *EVP_aes_128_cfb8(void);
1068const EVP_CIPHER *EVP_aes_128_cfb128(void);
1069#define EVP_aes_128_cfb EVP_aes_128_cfb128
1070const EVP_CIPHER *EVP_aes_128_ofb(void);
1071const EVP_CIPHER *EVP_aes_128_ctr(void);
1072const EVP_CIPHER *EVP_aes_128_ccm(void);
1073const EVP_CIPHER *EVP_aes_128_gcm(void);
1074const EVP_CIPHER *EVP_aes_128_xts(void);
1075const EVP_CIPHER *EVP_aes_128_wrap(void);
1076const EVP_CIPHER *EVP_aes_128_wrap_pad(void);
1077#ifndef OPENSSL_NO_OCB
1078const EVP_CIPHER *EVP_aes_128_ocb(void);
1079#endif
1080const EVP_CIPHER *EVP_aes_192_ecb(void);
1081const EVP_CIPHER *EVP_aes_192_cbc(void);
1082const EVP_CIPHER *EVP_aes_192_cfb1(void);
1083const EVP_CIPHER *EVP_aes_192_cfb8(void);
1084const EVP_CIPHER *EVP_aes_192_cfb128(void);
1085#define EVP_aes_192_cfb EVP_aes_192_cfb128
1086const EVP_CIPHER *EVP_aes_192_ofb(void);
1087const EVP_CIPHER *EVP_aes_192_ctr(void);
1088const EVP_CIPHER *EVP_aes_192_ccm(void);
1089const EVP_CIPHER *EVP_aes_192_gcm(void);
1090const EVP_CIPHER *EVP_aes_192_wrap(void);
1091const EVP_CIPHER *EVP_aes_192_wrap_pad(void);
1092#ifndef OPENSSL_NO_OCB
1093const EVP_CIPHER *EVP_aes_192_ocb(void);
1094#endif
1095const EVP_CIPHER *EVP_aes_256_ecb(void);
1096const EVP_CIPHER *EVP_aes_256_cbc(void);
1097const EVP_CIPHER *EVP_aes_256_cfb1(void);
1098const EVP_CIPHER *EVP_aes_256_cfb8(void);
1099const EVP_CIPHER *EVP_aes_256_cfb128(void);
1100#define EVP_aes_256_cfb EVP_aes_256_cfb128
1101const EVP_CIPHER *EVP_aes_256_ofb(void);
1102const EVP_CIPHER *EVP_aes_256_ctr(void);
1103const EVP_CIPHER *EVP_aes_256_ccm(void);
1104const EVP_CIPHER *EVP_aes_256_gcm(void);
1105const EVP_CIPHER *EVP_aes_256_xts(void);
1106const EVP_CIPHER *EVP_aes_256_wrap(void);
1107const EVP_CIPHER *EVP_aes_256_wrap_pad(void);
1108#ifndef OPENSSL_NO_OCB
1109const EVP_CIPHER *EVP_aes_256_ocb(void);
1110#endif
1111const EVP_CIPHER *EVP_aes_128_cbc_hmac_sha1(void);
1112const EVP_CIPHER *EVP_aes_256_cbc_hmac_sha1(void);
1113const EVP_CIPHER *EVP_aes_128_cbc_hmac_sha256(void);
1114const EVP_CIPHER *EVP_aes_256_cbc_hmac_sha256(void);
1115#ifndef OPENSSL_NO_ARIA
1116const EVP_CIPHER *EVP_aria_128_ecb(void);
1117const EVP_CIPHER *EVP_aria_128_cbc(void);
1118const EVP_CIPHER *EVP_aria_128_cfb1(void);
1119const EVP_CIPHER *EVP_aria_128_cfb8(void);
1120const EVP_CIPHER *EVP_aria_128_cfb128(void);
1121#define EVP_aria_128_cfb EVP_aria_128_cfb128
1122const EVP_CIPHER *EVP_aria_128_ctr(void);
1123const EVP_CIPHER *EVP_aria_128_ofb(void);
1124const EVP_CIPHER *EVP_aria_128_gcm(void);
1125const EVP_CIPHER *EVP_aria_128_ccm(void);
1126const EVP_CIPHER *EVP_aria_192_ecb(void);
1127const EVP_CIPHER *EVP_aria_192_cbc(void);
1128const EVP_CIPHER *EVP_aria_192_cfb1(void);
1129const EVP_CIPHER *EVP_aria_192_cfb8(void);
1130const EVP_CIPHER *EVP_aria_192_cfb128(void);
1131#define EVP_aria_192_cfb EVP_aria_192_cfb128
1132const EVP_CIPHER *EVP_aria_192_ctr(void);
1133const EVP_CIPHER *EVP_aria_192_ofb(void);
1134const EVP_CIPHER *EVP_aria_192_gcm(void);
1135const EVP_CIPHER *EVP_aria_192_ccm(void);
1136const EVP_CIPHER *EVP_aria_256_ecb(void);
1137const EVP_CIPHER *EVP_aria_256_cbc(void);
1138const EVP_CIPHER *EVP_aria_256_cfb1(void);
1139const EVP_CIPHER *EVP_aria_256_cfb8(void);
1140const EVP_CIPHER *EVP_aria_256_cfb128(void);
1141#define EVP_aria_256_cfb EVP_aria_256_cfb128
1142const EVP_CIPHER *EVP_aria_256_ctr(void);
1143const EVP_CIPHER *EVP_aria_256_ofb(void);
1144const EVP_CIPHER *EVP_aria_256_gcm(void);
1145const EVP_CIPHER *EVP_aria_256_ccm(void);
1146#endif
1147#ifndef OPENSSL_NO_CAMELLIA
1148const EVP_CIPHER *EVP_camellia_128_ecb(void);
1149const EVP_CIPHER *EVP_camellia_128_cbc(void);
1150const EVP_CIPHER *EVP_camellia_128_cfb1(void);
1151const EVP_CIPHER *EVP_camellia_128_cfb8(void);
1152const EVP_CIPHER *EVP_camellia_128_cfb128(void);
1153#define EVP_camellia_128_cfb EVP_camellia_128_cfb128
1154const EVP_CIPHER *EVP_camellia_128_ofb(void);
1155const EVP_CIPHER *EVP_camellia_128_ctr(void);
1156const EVP_CIPHER *EVP_camellia_192_ecb(void);
1157const EVP_CIPHER *EVP_camellia_192_cbc(void);
1158const EVP_CIPHER *EVP_camellia_192_cfb1(void);
1159const EVP_CIPHER *EVP_camellia_192_cfb8(void);
1160const EVP_CIPHER *EVP_camellia_192_cfb128(void);
1161#define EVP_camellia_192_cfb EVP_camellia_192_cfb128
1162const EVP_CIPHER *EVP_camellia_192_ofb(void);
1163const EVP_CIPHER *EVP_camellia_192_ctr(void);
1164const EVP_CIPHER *EVP_camellia_256_ecb(void);
1165const EVP_CIPHER *EVP_camellia_256_cbc(void);
1166const EVP_CIPHER *EVP_camellia_256_cfb1(void);
1167const EVP_CIPHER *EVP_camellia_256_cfb8(void);
1168const EVP_CIPHER *EVP_camellia_256_cfb128(void);
1169#define EVP_camellia_256_cfb EVP_camellia_256_cfb128
1170const EVP_CIPHER *EVP_camellia_256_ofb(void);
1171const EVP_CIPHER *EVP_camellia_256_ctr(void);
1172#endif
1173#ifndef OPENSSL_NO_CHACHA
1174const EVP_CIPHER *EVP_chacha20(void);
1175#ifndef OPENSSL_NO_POLY1305
1176const EVP_CIPHER *EVP_chacha20_poly1305(void);
1177#endif
1178#endif
1179
1180#ifndef OPENSSL_NO_SEED
1181const EVP_CIPHER *EVP_seed_ecb(void);
1182const EVP_CIPHER *EVP_seed_cbc(void);
1183const EVP_CIPHER *EVP_seed_cfb128(void);
1184#define EVP_seed_cfb EVP_seed_cfb128
1185const EVP_CIPHER *EVP_seed_ofb(void);
1186#endif
1187
1188#ifndef OPENSSL_NO_SM4
1189const EVP_CIPHER *EVP_sm4_ecb(void);
1190const EVP_CIPHER *EVP_sm4_cbc(void);
1191const EVP_CIPHER *EVP_sm4_cfb128(void);
1192#define EVP_sm4_cfb EVP_sm4_cfb128
1193const EVP_CIPHER *EVP_sm4_ofb(void);
1194const EVP_CIPHER *EVP_sm4_ctr(void);
1195#endif
1196
1197#ifndef OPENSSL_NO_DEPRECATED_1_1_0
1198#define OPENSSL_add_all_algorithms_conf() \
1199 OPENSSL_init_crypto(OPENSSL_INIT_ADD_ALL_CIPHERS \
1200 | OPENSSL_INIT_ADD_ALL_DIGESTS \
1201 | OPENSSL_INIT_LOAD_CONFIG, \
1202 NULL)
1203#define OPENSSL_add_all_algorithms_noconf() \
1204 OPENSSL_init_crypto(OPENSSL_INIT_ADD_ALL_CIPHERS \
1205 | OPENSSL_INIT_ADD_ALL_DIGESTS, \
1206 NULL)
1207
1208#ifdef OPENSSL_LOAD_CONF
1209#define OpenSSL_add_all_algorithms() OPENSSL_add_all_algorithms_conf()
1210#else
1211#define OpenSSL_add_all_algorithms() OPENSSL_add_all_algorithms_noconf()
1212#endif
1213
1214#define OpenSSL_add_all_ciphers() \
1215 OPENSSL_init_crypto(OPENSSL_INIT_ADD_ALL_CIPHERS, NULL)
1216#define OpenSSL_add_all_digests() \
1217 OPENSSL_init_crypto(OPENSSL_INIT_ADD_ALL_DIGESTS, NULL)
1218
1219#define EVP_cleanup() \
1220 while (0) \
1221 continue
1222#endif
1223
1224int EVP_add_cipher(const EVP_CIPHER *cipher);
1225int EVP_add_digest(const EVP_MD *digest);
1226
1227const EVP_CIPHER *EVP_get_cipherbyname(const char *name);
1228const EVP_MD *EVP_get_digestbyname(const char *name);
1229
1230void EVP_CIPHER_do_all(void (*fn)(const EVP_CIPHER *ciph,
1231 const char *from, const char *to, void *x),
1232 void *arg);
1233void EVP_CIPHER_do_all_sorted(void (*fn)(const EVP_CIPHER *ciph, const char *from,
1234 const char *to, void *x),
1235 void *arg);
1236void EVP_CIPHER_do_all_provided(OSSL_LIB_CTX *libctx,
1237 void (*fn)(EVP_CIPHER *cipher, void *arg),
1238 void *arg);
1239
1240void EVP_MD_do_all(void (*fn)(const EVP_MD *ciph,
1241 const char *from, const char *to, void *x),
1242 void *arg);
1243void EVP_MD_do_all_sorted(void (*fn)(const EVP_MD *ciph, const char *from,
1244 const char *to, void *x),
1245 void *arg);
1246void EVP_MD_do_all_provided(OSSL_LIB_CTX *libctx,
1247 void (*fn)(EVP_MD *md, void *arg),
1248 void *arg);
1249
1250/* MAC stuff */
1251
1252EVP_MAC *EVP_MAC_fetch(OSSL_LIB_CTX *libctx, const char *algorithm,
1253 const char *properties);
1254int EVP_MAC_up_ref(EVP_MAC *mac);
1255void EVP_MAC_free(EVP_MAC *mac);
1256const char *EVP_MAC_get0_name(const EVP_MAC *mac);
1257const char *EVP_MAC_get0_description(const EVP_MAC *mac);
1258int EVP_MAC_is_a(const EVP_MAC *mac, const char *name);
1259const OSSL_PROVIDER *EVP_MAC_get0_provider(const EVP_MAC *mac);
1260int EVP_MAC_get_params(EVP_MAC *mac, OSSL_PARAM params[]);
1261
1262EVP_MAC_CTX *EVP_MAC_CTX_new(EVP_MAC *mac);
1263void EVP_MAC_CTX_free(EVP_MAC_CTX *ctx);
1264EVP_MAC_CTX *EVP_MAC_CTX_dup(const EVP_MAC_CTX *src);
1265EVP_MAC *EVP_MAC_CTX_get0_mac(EVP_MAC_CTX *ctx);
1266int EVP_MAC_CTX_get_params(EVP_MAC_CTX *ctx, OSSL_PARAM params[]);
1267int EVP_MAC_CTX_set_params(EVP_MAC_CTX *ctx, const OSSL_PARAM params[]);
1268
1269size_t EVP_MAC_CTX_get_mac_size(EVP_MAC_CTX *ctx);
1270size_t EVP_MAC_CTX_get_block_size(EVP_MAC_CTX *ctx);
1271unsigned char *EVP_Q_mac(OSSL_LIB_CTX *libctx, const char *name, const char *propq,
1272 const char *subalg, const OSSL_PARAM *params,
1273 const void *key, size_t keylen,
1274 const unsigned char *data, size_t datalen,
1275 unsigned char *out, size_t outsize, size_t *outlen);
1276int EVP_MAC_init(EVP_MAC_CTX *ctx, const unsigned char *key, size_t keylen,
1277 const OSSL_PARAM params[]);
1278int EVP_MAC_init_SKEY(EVP_MAC_CTX *ctx, EVP_SKEY *skey, const OSSL_PARAM params[]);
1279int EVP_MAC_update(EVP_MAC_CTX *ctx, const unsigned char *data, size_t datalen);
1280int EVP_MAC_final(EVP_MAC_CTX *ctx,
1281 unsigned char *out, size_t *outl, size_t outsize);
1282int EVP_MAC_finalXOF(EVP_MAC_CTX *ctx, unsigned char *out, size_t outsize);
1283const OSSL_PARAM *EVP_MAC_gettable_params(const EVP_MAC *mac);
1284const OSSL_PARAM *EVP_MAC_gettable_ctx_params(const EVP_MAC *mac);
1285const OSSL_PARAM *EVP_MAC_settable_ctx_params(const EVP_MAC *mac);
1286const OSSL_PARAM *EVP_MAC_CTX_gettable_params(EVP_MAC_CTX *ctx);
1287const OSSL_PARAM *EVP_MAC_CTX_settable_params(EVP_MAC_CTX *ctx);
1288
1289void EVP_MAC_do_all_provided(OSSL_LIB_CTX *libctx,
1290 void (*fn)(EVP_MAC *mac, void *arg),
1291 void *arg);
1292int EVP_MAC_names_do_all(const EVP_MAC *mac,
1293 void (*fn)(const char *name, void *data),
1294 void *data);
1295
1296/* RAND stuff */
1297EVP_RAND *EVP_RAND_fetch(OSSL_LIB_CTX *libctx, const char *algorithm,
1298 const char *properties);
1299int EVP_RAND_up_ref(EVP_RAND *rand);
1300void EVP_RAND_free(EVP_RAND *rand);
1301const char *EVP_RAND_get0_name(const EVP_RAND *rand);
1302const char *EVP_RAND_get0_description(const EVP_RAND *md);
1303int EVP_RAND_is_a(const EVP_RAND *rand, const char *name);
1304const OSSL_PROVIDER *EVP_RAND_get0_provider(const EVP_RAND *rand);
1305int EVP_RAND_get_params(EVP_RAND *rand, OSSL_PARAM params[]);
1306
1307EVP_RAND_CTX *EVP_RAND_CTX_new(EVP_RAND *rand, EVP_RAND_CTX *parent);
1308int EVP_RAND_CTX_up_ref(EVP_RAND_CTX *ctx);
1309void EVP_RAND_CTX_free(EVP_RAND_CTX *ctx);
1310EVP_RAND *EVP_RAND_CTX_get0_rand(EVP_RAND_CTX *ctx);
1311int EVP_RAND_CTX_get_params(EVP_RAND_CTX *ctx, OSSL_PARAM params[]);
1312int EVP_RAND_CTX_set_params(EVP_RAND_CTX *ctx, const OSSL_PARAM params[]);
1313const OSSL_PARAM *EVP_RAND_gettable_params(const EVP_RAND *rand);
1314const OSSL_PARAM *EVP_RAND_gettable_ctx_params(const EVP_RAND *rand);
1315const OSSL_PARAM *EVP_RAND_settable_ctx_params(const EVP_RAND *rand);
1316const OSSL_PARAM *EVP_RAND_CTX_gettable_params(EVP_RAND_CTX *ctx);
1317const OSSL_PARAM *EVP_RAND_CTX_settable_params(EVP_RAND_CTX *ctx);
1318
1319void EVP_RAND_do_all_provided(OSSL_LIB_CTX *libctx,
1320 void (*fn)(EVP_RAND *rand, void *arg),
1321 void *arg);
1322int EVP_RAND_names_do_all(const EVP_RAND *rand,
1323 void (*fn)(const char *name, void *data),
1324 void *data);
1325
1326__owur int EVP_RAND_instantiate(EVP_RAND_CTX *ctx, unsigned int strength,
1327 int prediction_resistance,
1328 const unsigned char *pstr, size_t pstr_len,
1329 const OSSL_PARAM params[]);
1330int EVP_RAND_uninstantiate(EVP_RAND_CTX *ctx);
1331__owur int EVP_RAND_generate(EVP_RAND_CTX *ctx, unsigned char *out,
1332 size_t outlen, unsigned int strength,
1333 int prediction_resistance,
1334 const unsigned char *addin, size_t addin_len);
1335int EVP_RAND_reseed(EVP_RAND_CTX *ctx, int prediction_resistance,
1336 const unsigned char *ent, size_t ent_len,
1337 const unsigned char *addin, size_t addin_len);
1338__owur int EVP_RAND_nonce(EVP_RAND_CTX *ctx, unsigned char *out, size_t outlen);
1339__owur int EVP_RAND_enable_locking(EVP_RAND_CTX *ctx);
1340
1341int EVP_RAND_verify_zeroization(EVP_RAND_CTX *ctx);
1342unsigned int EVP_RAND_get_strength(EVP_RAND_CTX *ctx);
1343int EVP_RAND_get_state(EVP_RAND_CTX *ctx);
1344
1345#define EVP_RAND_STATE_UNINITIALISED 0
1346#define EVP_RAND_STATE_READY 1
1347#define EVP_RAND_STATE_ERROR 2
1348
1349/* PKEY stuff */
1350#ifndef OPENSSL_NO_DEPRECATED_3_0
1351OSSL_DEPRECATEDIN_3_0 int EVP_PKEY_decrypt_old(unsigned char *dec_key,
1352 const unsigned char *enc_key,
1353 int enc_key_len,
1354 EVP_PKEY *private_key);
1355OSSL_DEPRECATEDIN_3_0 int EVP_PKEY_encrypt_old(unsigned char *enc_key,
1356 const unsigned char *key,
1357 int key_len, EVP_PKEY *pub_key);
1358#endif
1359int EVP_PKEY_is_a(const EVP_PKEY *pkey, const char *name);
1360int EVP_PKEY_type_names_do_all(const EVP_PKEY *pkey,
1361 void (*fn)(const char *name, void *data),
1362 void *data);
1363int EVP_PKEY_type(int type);
1364int EVP_PKEY_get_id(const EVP_PKEY *pkey);
1365#define EVP_PKEY_id EVP_PKEY_get_id
1366int EVP_PKEY_get_base_id(const EVP_PKEY *pkey);
1367#define EVP_PKEY_base_id EVP_PKEY_get_base_id
1368int EVP_PKEY_get_bits(const EVP_PKEY *pkey);
1369#define EVP_PKEY_bits EVP_PKEY_get_bits
1370int EVP_PKEY_get_security_bits(const EVP_PKEY *pkey);
1371#define EVP_PKEY_security_bits EVP_PKEY_get_security_bits
1372int EVP_PKEY_get_security_category(const EVP_PKEY *pkey);
1373int EVP_PKEY_get_size(const EVP_PKEY *pkey);
1374#define EVP_PKEY_size EVP_PKEY_get_size
1375int EVP_PKEY_can_sign(const EVP_PKEY *pkey);
1376int EVP_PKEY_set_type(EVP_PKEY *pkey, int type);
1377int EVP_PKEY_set_type_str(EVP_PKEY *pkey, const char *str, int len);
1378int EVP_PKEY_set_type_by_keymgmt(EVP_PKEY *pkey, EVP_KEYMGMT *keymgmt);
1379#ifndef OPENSSL_NO_DEPRECATED_3_0
1380#ifndef OPENSSL_NO_ENGINE
1381OSSL_DEPRECATEDIN_3_0
1382int EVP_PKEY_set1_engine(EVP_PKEY *pkey, ENGINE *e);
1383OSSL_DEPRECATEDIN_3_0
1384ENGINE *EVP_PKEY_get0_engine(const EVP_PKEY *pkey);
1385#endif
1386OSSL_DEPRECATEDIN_3_0
1387int EVP_PKEY_assign(EVP_PKEY *pkey, int type, void *key);
1388OSSL_DEPRECATEDIN_3_0
1389void *EVP_PKEY_get0(const EVP_PKEY *pkey);
1390OSSL_DEPRECATEDIN_3_0
1391const unsigned char *EVP_PKEY_get0_hmac(const EVP_PKEY *pkey, size_t *len);
1392#ifndef OPENSSL_NO_POLY1305
1393OSSL_DEPRECATEDIN_3_0
1394const unsigned char *EVP_PKEY_get0_poly1305(const EVP_PKEY *pkey, size_t *len);
1395#endif
1396#ifndef OPENSSL_NO_SIPHASH
1397OSSL_DEPRECATEDIN_3_0
1398const unsigned char *EVP_PKEY_get0_siphash(const EVP_PKEY *pkey, size_t *len);
1399#endif
1400
1401struct rsa_st;
1402OSSL_DEPRECATEDIN_3_0
1403int EVP_PKEY_set1_RSA(EVP_PKEY *pkey, struct rsa_st *key);
1404OSSL_DEPRECATEDIN_3_0
1405const struct rsa_st *EVP_PKEY_get0_RSA(const EVP_PKEY *pkey);
1406OSSL_DEPRECATEDIN_3_0
1407struct rsa_st *EVP_PKEY_get1_RSA(EVP_PKEY *pkey);
1408
1409#ifndef OPENSSL_NO_DSA
1410struct dsa_st;
1411OSSL_DEPRECATEDIN_3_0
1412int EVP_PKEY_set1_DSA(EVP_PKEY *pkey, struct dsa_st *key);
1413OSSL_DEPRECATEDIN_3_0
1414const struct dsa_st *EVP_PKEY_get0_DSA(const EVP_PKEY *pkey);
1415OSSL_DEPRECATEDIN_3_0
1416struct dsa_st *EVP_PKEY_get1_DSA(EVP_PKEY *pkey);
1417#endif
1418
1419#ifndef OPENSSL_NO_DH
1420struct dh_st;
1421OSSL_DEPRECATEDIN_3_0 int EVP_PKEY_set1_DH(EVP_PKEY *pkey, struct dh_st *key);
1422OSSL_DEPRECATEDIN_3_0 const struct dh_st *EVP_PKEY_get0_DH(const EVP_PKEY *pkey);
1423OSSL_DEPRECATEDIN_3_0 struct dh_st *EVP_PKEY_get1_DH(EVP_PKEY *pkey);
1424#endif
1425
1426#ifndef OPENSSL_NO_EC
1427struct ec_key_st;
1428OSSL_DEPRECATEDIN_3_0
1429int EVP_PKEY_set1_EC_KEY(EVP_PKEY *pkey, struct ec_key_st *key);
1430OSSL_DEPRECATEDIN_3_0
1431const struct ec_key_st *EVP_PKEY_get0_EC_KEY(const EVP_PKEY *pkey);
1432OSSL_DEPRECATEDIN_3_0
1433struct ec_key_st *EVP_PKEY_get1_EC_KEY(EVP_PKEY *pkey);
1434#endif
1435#endif /* OPENSSL_NO_DEPRECATED_3_0 */
1436
1437EVP_PKEY *EVP_PKEY_new(void);
1438int EVP_PKEY_up_ref(EVP_PKEY *pkey);
1439EVP_PKEY *EVP_PKEY_dup(EVP_PKEY *pkey);
1440void EVP_PKEY_free(EVP_PKEY *pkey);
1441const char *EVP_PKEY_get0_description(const EVP_PKEY *pkey);
1442const OSSL_PROVIDER *EVP_PKEY_get0_provider(const EVP_PKEY *key);
1443
1444EVP_PKEY *d2i_PublicKey(int type, EVP_PKEY **a, const unsigned char **pp,
1445 long length);
1446int i2d_PublicKey(const EVP_PKEY *a, unsigned char **pp);
1447
1448EVP_PKEY *d2i_PrivateKey_ex(int type, EVP_PKEY **a, const unsigned char **pp,
1449 long length, OSSL_LIB_CTX *libctx,
1450 const char *propq);
1451EVP_PKEY *d2i_PrivateKey(int type, EVP_PKEY **a, const unsigned char **pp,
1452 long length);
1453EVP_PKEY *d2i_AutoPrivateKey_ex(EVP_PKEY **a, const unsigned char **pp,
1454 long length, OSSL_LIB_CTX *libctx,
1455 const char *propq);
1456EVP_PKEY *d2i_AutoPrivateKey(EVP_PKEY **a, const unsigned char **pp,
1457 long length);
1458int i2d_PrivateKey(const EVP_PKEY *a, unsigned char **pp);
1459int i2d_PKCS8PrivateKey(const EVP_PKEY *a, unsigned char **pp);
1460
1461int i2d_KeyParams(const EVP_PKEY *a, unsigned char **pp);
1462EVP_PKEY *d2i_KeyParams(int type, EVP_PKEY **a, const unsigned char **pp,
1463 long length);
1464int i2d_KeyParams_bio(BIO *bp, const EVP_PKEY *pkey);
1465EVP_PKEY *d2i_KeyParams_bio(int type, EVP_PKEY **a, BIO *in);
1466
1467int EVP_PKEY_copy_parameters(EVP_PKEY *to, const EVP_PKEY *from);
1468int EVP_PKEY_missing_parameters(const EVP_PKEY *pkey);
1469int EVP_PKEY_save_parameters(EVP_PKEY *pkey, int mode);
1470int EVP_PKEY_parameters_eq(const EVP_PKEY *a, const EVP_PKEY *b);
1471int EVP_PKEY_eq(const EVP_PKEY *a, const EVP_PKEY *b);
1472
1473#ifndef OPENSSL_NO_DEPRECATED_3_0
1474OSSL_DEPRECATEDIN_3_0
1475int EVP_PKEY_cmp_parameters(const EVP_PKEY *a, const EVP_PKEY *b);
1476OSSL_DEPRECATEDIN_3_0
1477int EVP_PKEY_cmp(const EVP_PKEY *a, const EVP_PKEY *b);
1478#endif
1479
1480int EVP_PKEY_print_public(BIO *out, const EVP_PKEY *pkey,
1481 int indent, ASN1_PCTX *pctx);
1482int EVP_PKEY_print_private(BIO *out, const EVP_PKEY *pkey,
1483 int indent, ASN1_PCTX *pctx);
1484int EVP_PKEY_print_params(BIO *out, const EVP_PKEY *pkey,
1485 int indent, ASN1_PCTX *pctx);
1486#ifndef OPENSSL_NO_STDIO
1487int EVP_PKEY_print_public_fp(FILE *fp, const EVP_PKEY *pkey,
1488 int indent, ASN1_PCTX *pctx);
1489int EVP_PKEY_print_private_fp(FILE *fp, const EVP_PKEY *pkey,
1490 int indent, ASN1_PCTX *pctx);
1491int EVP_PKEY_print_params_fp(FILE *fp, const EVP_PKEY *pkey,
1492 int indent, ASN1_PCTX *pctx);
1493#endif
1494
1495int EVP_PKEY_get_default_digest_nid(EVP_PKEY *pkey, int *pnid);
1496int EVP_PKEY_get_default_digest_name(EVP_PKEY *pkey,
1497 char *mdname, size_t mdname_sz);
1498int EVP_PKEY_digestsign_supports_digest(EVP_PKEY *pkey, OSSL_LIB_CTX *libctx,
1499 const char *name, const char *propq);
1500
1501#ifndef OPENSSL_NO_DEPRECATED_3_0
1502/*
1503 * For backwards compatibility. Use EVP_PKEY_set1_encoded_public_key in
1504 * preference
1505 */
1506#define EVP_PKEY_set1_tls_encodedpoint(pkey, pt, ptlen) \
1507 EVP_PKEY_set1_encoded_public_key((pkey), (pt), (ptlen))
1508#endif
1509
1510int EVP_PKEY_set1_encoded_public_key(EVP_PKEY *pkey,
1511 const unsigned char *pub, size_t publen);
1512
1513#ifndef OPENSSL_NO_DEPRECATED_3_0
1514/*
1515 * For backwards compatibility. Use EVP_PKEY_get1_encoded_public_key in
1516 * preference
1517 */
1518#define EVP_PKEY_get1_tls_encodedpoint(pkey, ppt) \
1519 EVP_PKEY_get1_encoded_public_key((pkey), (ppt))
1520#endif
1521
1522size_t EVP_PKEY_get1_encoded_public_key(EVP_PKEY *pkey, unsigned char **ppub);
1523
1524/* calls methods */
1525int EVP_CIPHER_param_to_asn1(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
1526int EVP_CIPHER_asn1_to_param(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
1527
1528/* These are used by EVP_CIPHER methods */
1529int EVP_CIPHER_set_asn1_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
1530int EVP_CIPHER_get_asn1_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
1531
1532/* PKCS5 password based encryption */
1533int PKCS5_PBE_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
1534 ASN1_TYPE *param, const EVP_CIPHER *cipher,
1535 const EVP_MD *md, int en_de);
1536int PKCS5_PBE_keyivgen_ex(EVP_CIPHER_CTX *cctx, const char *pass, int passlen,
1537 ASN1_TYPE *param, const EVP_CIPHER *cipher,
1538 const EVP_MD *md, int en_de, OSSL_LIB_CTX *libctx,
1539 const char *propq);
1540int PKCS5_PBKDF2_HMAC_SHA1(const char *pass, int passlen,
1541 const unsigned char *salt, int saltlen, int iter,
1542 int keylen, unsigned char *out);
1543int PKCS5_PBKDF2_HMAC(const char *pass, int passlen,
1544 const unsigned char *salt, int saltlen, int iter,
1545 const EVP_MD *digest, int keylen, unsigned char *out);
1546int PKCS5_v2_PBE_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
1547 ASN1_TYPE *param, const EVP_CIPHER *cipher,
1548 const EVP_MD *md, int en_de);
1549int PKCS5_v2_PBE_keyivgen_ex(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
1550 ASN1_TYPE *param, const EVP_CIPHER *cipher,
1551 const EVP_MD *md, int en_de,
1552 OSSL_LIB_CTX *libctx, const char *propq);
1553
1554#ifndef OPENSSL_NO_SCRYPT
1555int EVP_PBE_scrypt(const char *pass, size_t passlen,
1556 const unsigned char *salt, size_t saltlen,
1557 uint64_t N, uint64_t r, uint64_t p, uint64_t maxmem,
1558 unsigned char *key, size_t keylen);
1559int EVP_PBE_scrypt_ex(const char *pass, size_t passlen,
1560 const unsigned char *salt, size_t saltlen,
1561 uint64_t N, uint64_t r, uint64_t p, uint64_t maxmem,
1562 unsigned char *key, size_t keylen,
1563 OSSL_LIB_CTX *ctx, const char *propq);
1564
1565int PKCS5_v2_scrypt_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass,
1566 int passlen, ASN1_TYPE *param,
1567 const EVP_CIPHER *c, const EVP_MD *md, int en_de);
1568int PKCS5_v2_scrypt_keyivgen_ex(EVP_CIPHER_CTX *ctx, const char *pass,
1569 int passlen, ASN1_TYPE *param,
1570 const EVP_CIPHER *c, const EVP_MD *md, int en_de,
1571 OSSL_LIB_CTX *libctx, const char *propq);
1572#endif
1573
1574void PKCS5_PBE_add(void);
1575
1576int EVP_PBE_CipherInit(ASN1_OBJECT *pbe_obj, const char *pass, int passlen,
1577 ASN1_TYPE *param, EVP_CIPHER_CTX *ctx, int en_de);
1578
1579int EVP_PBE_CipherInit_ex(ASN1_OBJECT *pbe_obj, const char *pass, int passlen,
1580 ASN1_TYPE *param, EVP_CIPHER_CTX *ctx, int en_de,
1581 OSSL_LIB_CTX *libctx, const char *propq);
1582
1583/* PBE type */
1584
1585/* Can appear as the outermost AlgorithmIdentifier */
1586#define EVP_PBE_TYPE_OUTER 0x0
1587/* Is an PRF type OID */
1588#define EVP_PBE_TYPE_PRF 0x1
1589/* Is a PKCS#5 v2.0 KDF */
1590#define EVP_PBE_TYPE_KDF 0x2
1591
1592int EVP_PBE_alg_add_type(int pbe_type, int pbe_nid, int cipher_nid,
1593 int md_nid, EVP_PBE_KEYGEN *keygen);
1594int EVP_PBE_alg_add(int nid, const EVP_CIPHER *cipher, const EVP_MD *md,
1595 EVP_PBE_KEYGEN *keygen);
1596int EVP_PBE_find(int type, int pbe_nid, int *pcnid, int *pmnid,
1597 EVP_PBE_KEYGEN **pkeygen);
1598int EVP_PBE_find_ex(int type, int pbe_nid, int *pcnid, int *pmnid,
1599 EVP_PBE_KEYGEN **pkeygen, EVP_PBE_KEYGEN_EX **pkeygen_ex);
1600void EVP_PBE_cleanup(void);
1601int EVP_PBE_get(int *ptype, int *ppbe_nid, size_t num);
1602
1603#define ASN1_PKEY_ALIAS 0x1
1604#define ASN1_PKEY_DYNAMIC 0x2
1605#define ASN1_PKEY_SIGPARAM_NULL 0x4
1606
1607#define ASN1_PKEY_CTRL_PKCS7_SIGN 0x1
1608#define ASN1_PKEY_CTRL_PKCS7_ENCRYPT 0x2
1609#define ASN1_PKEY_CTRL_DEFAULT_MD_NID 0x3
1610#define ASN1_PKEY_CTRL_CMS_SIGN 0x5
1611#define ASN1_PKEY_CTRL_CMS_ENVELOPE 0x7
1612#define ASN1_PKEY_CTRL_CMS_RI_TYPE 0x8
1613
1614#define ASN1_PKEY_CTRL_SET1_TLS_ENCPT 0x9
1615#define ASN1_PKEY_CTRL_GET1_TLS_ENCPT 0xa
1616#define ASN1_PKEY_CTRL_CMS_IS_RI_TYPE_SUPPORTED 0xb
1617
1618#ifndef OPENSSL_NO_DEPRECATED_3_6
1619OSSL_DEPRECATEDIN_3_6 int EVP_PKEY_asn1_get_count(void);
1620OSSL_DEPRECATEDIN_3_6 const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_get0(int idx);
1621OSSL_DEPRECATEDIN_3_6
1622const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_find(ENGINE **pe, int type);
1623OSSL_DEPRECATEDIN_3_6
1624const EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_find_str(ENGINE **pe,
1625 const char *str, int len);
1626OSSL_DEPRECATEDIN_3_6 int EVP_PKEY_asn1_add0(const EVP_PKEY_ASN1_METHOD *ameth);
1627OSSL_DEPRECATEDIN_3_6 int EVP_PKEY_asn1_add_alias(int to, int from);
1628OSSL_DEPRECATEDIN_3_6
1629int EVP_PKEY_asn1_get0_info(int *ppkey_id, int *pkey_base_id,
1630 int *ppkey_flags, const char **pinfo,
1631 const char **ppem_str,
1632 const EVP_PKEY_ASN1_METHOD *ameth);
1633
1634OSSL_DEPRECATEDIN_3_6 const EVP_PKEY_ASN1_METHOD *EVP_PKEY_get0_asn1(const EVP_PKEY *pkey);
1635OSSL_DEPRECATEDIN_3_6 EVP_PKEY_ASN1_METHOD *EVP_PKEY_asn1_new(int id, int flags,
1636 const char *pem_str,
1637 const char *info);
1638OSSL_DEPRECATEDIN_3_6 void EVP_PKEY_asn1_copy(EVP_PKEY_ASN1_METHOD *dst,
1639 const EVP_PKEY_ASN1_METHOD *src);
1640OSSL_DEPRECATEDIN_3_6 void EVP_PKEY_asn1_free(EVP_PKEY_ASN1_METHOD *ameth);
1641OSSL_DEPRECATEDIN_3_6
1642void EVP_PKEY_asn1_set_public(EVP_PKEY_ASN1_METHOD *ameth,
1643 int (*pub_decode)(EVP_PKEY *pk,
1644 const X509_PUBKEY *pub),
1645 int (*pub_encode)(X509_PUBKEY *pub,
1646 const EVP_PKEY *pk),
1647 int (*pub_cmp)(const EVP_PKEY *a,
1648 const EVP_PKEY *b),
1649 int (*pub_print)(BIO *out,
1650 const EVP_PKEY *pkey,
1651 int indent, ASN1_PCTX *pctx),
1652 int (*pkey_size)(const EVP_PKEY *pk),
1653 int (*pkey_bits)(const EVP_PKEY *pk));
1654OSSL_DEPRECATEDIN_3_6
1655void EVP_PKEY_asn1_set_private(EVP_PKEY_ASN1_METHOD *ameth,
1656 int (*priv_decode)(EVP_PKEY *pk,
1657 const PKCS8_PRIV_KEY_INFO
1658 *p8inf),
1659 int (*priv_encode)(PKCS8_PRIV_KEY_INFO *p8,
1660 const EVP_PKEY *pk),
1661 int (*priv_print)(BIO *out,
1662 const EVP_PKEY *pkey,
1663 int indent,
1664 ASN1_PCTX *pctx));
1665OSSL_DEPRECATEDIN_3_6
1666void EVP_PKEY_asn1_set_param(EVP_PKEY_ASN1_METHOD *ameth,
1667 int (*param_decode)(EVP_PKEY *pkey,
1668 const unsigned char **pder,
1669 int derlen),
1670 int (*param_encode)(const EVP_PKEY *pkey,
1671 unsigned char **pder),
1672 int (*param_missing)(const EVP_PKEY *pk),
1673 int (*param_copy)(EVP_PKEY *to,
1674 const EVP_PKEY *from),
1675 int (*param_cmp)(const EVP_PKEY *a,
1676 const EVP_PKEY *b),
1677 int (*param_print)(BIO *out,
1678 const EVP_PKEY *pkey,
1679 int indent,
1680 ASN1_PCTX *pctx));
1681
1682OSSL_DEPRECATEDIN_3_6
1683void EVP_PKEY_asn1_set_free(EVP_PKEY_ASN1_METHOD *ameth,
1684 void (*pkey_free)(EVP_PKEY *pkey));
1685OSSL_DEPRECATEDIN_3_6
1686void EVP_PKEY_asn1_set_ctrl(EVP_PKEY_ASN1_METHOD *ameth,
1687 int (*pkey_ctrl)(EVP_PKEY *pkey, int op,
1688 long arg1, void *arg2));
1689OSSL_DEPRECATEDIN_3_6
1690void EVP_PKEY_asn1_set_item(EVP_PKEY_ASN1_METHOD *ameth,
1691 int (*item_verify)(EVP_MD_CTX *ctx,
1692 const ASN1_ITEM *it,
1693 const void *data,
1694 const X509_ALGOR *a,
1695 const ASN1_BIT_STRING *sig,
1696 EVP_PKEY *pkey),
1697 int (*item_sign)(EVP_MD_CTX *ctx,
1698 const ASN1_ITEM *it,
1699 const void *data,
1700 X509_ALGOR *alg1,
1701 X509_ALGOR *alg2,
1702 ASN1_BIT_STRING *sig));
1703
1704OSSL_DEPRECATEDIN_3_6
1705void EVP_PKEY_asn1_set_siginf(EVP_PKEY_ASN1_METHOD *ameth,
1706 int (*siginf_set)(X509_SIG_INFO *siginf,
1707 const X509_ALGOR *alg,
1708 const ASN1_STRING *sig));
1709
1710OSSL_DEPRECATEDIN_3_6
1711void EVP_PKEY_asn1_set_check(EVP_PKEY_ASN1_METHOD *ameth,
1712 int (*pkey_check)(const EVP_PKEY *pk));
1713
1714OSSL_DEPRECATEDIN_3_6
1715void EVP_PKEY_asn1_set_public_check(EVP_PKEY_ASN1_METHOD *ameth,
1716 int (*pkey_pub_check)(const EVP_PKEY *pk));
1717
1718OSSL_DEPRECATEDIN_3_6
1719void EVP_PKEY_asn1_set_param_check(EVP_PKEY_ASN1_METHOD *ameth,
1720 int (*pkey_param_check)(const EVP_PKEY *pk));
1721
1722OSSL_DEPRECATEDIN_3_6
1723void EVP_PKEY_asn1_set_set_priv_key(EVP_PKEY_ASN1_METHOD *ameth,
1724 int (*set_priv_key)(EVP_PKEY *pk,
1725 const unsigned char
1726 *priv,
1727 size_t len));
1728OSSL_DEPRECATEDIN_3_6
1729void EVP_PKEY_asn1_set_set_pub_key(EVP_PKEY_ASN1_METHOD *ameth,
1730 int (*set_pub_key)(EVP_PKEY *pk,
1731 const unsigned char *pub,
1732 size_t len));
1733OSSL_DEPRECATEDIN_3_6
1734void EVP_PKEY_asn1_set_get_priv_key(EVP_PKEY_ASN1_METHOD *ameth,
1735 int (*get_priv_key)(const EVP_PKEY *pk,
1736 unsigned char *priv,
1737 size_t *len));
1738OSSL_DEPRECATEDIN_3_6
1739void EVP_PKEY_asn1_set_get_pub_key(EVP_PKEY_ASN1_METHOD *ameth,
1740 int (*get_pub_key)(const EVP_PKEY *pk,
1741 unsigned char *pub,
1742 size_t *len));
1743
1744OSSL_DEPRECATEDIN_3_6
1745void EVP_PKEY_asn1_set_security_bits(EVP_PKEY_ASN1_METHOD *ameth,
1746 int (*pkey_security_bits)(const EVP_PKEY
1747 *pk));
1748#endif /* OPENSSL_NO_DEPRECATED_3_6 */
1749
1750int EVP_PKEY_CTX_get_signature_md(EVP_PKEY_CTX *ctx, const EVP_MD **md);
1751int EVP_PKEY_CTX_set_signature_md(EVP_PKEY_CTX *ctx, const EVP_MD *md);
1752
1753int EVP_PKEY_CTX_set1_id(EVP_PKEY_CTX *ctx, const void *id, int len);
1754int EVP_PKEY_CTX_get1_id(EVP_PKEY_CTX *ctx, void *id);
1755int EVP_PKEY_CTX_get1_id_len(EVP_PKEY_CTX *ctx, size_t *id_len);
1756
1757int EVP_PKEY_CTX_set_kem_op(EVP_PKEY_CTX *ctx, const char *op);
1758
1759const char *EVP_PKEY_get0_type_name(const EVP_PKEY *key);
1760
1761#define EVP_PKEY_OP_UNDEFINED 0
1762#define EVP_PKEY_OP_PARAMGEN (1 << 1)
1763#define EVP_PKEY_OP_KEYGEN (1 << 2)
1764#define EVP_PKEY_OP_FROMDATA (1 << 3)
1765#define EVP_PKEY_OP_SIGN (1 << 4)
1766#define EVP_PKEY_OP_VERIFY (1 << 5)
1767#define EVP_PKEY_OP_VERIFYRECOVER (1 << 6)
1768#define EVP_PKEY_OP_SIGNCTX (1 << 7)
1769#define EVP_PKEY_OP_VERIFYCTX (1 << 8)
1770#define EVP_PKEY_OP_ENCRYPT (1 << 9)
1771#define EVP_PKEY_OP_DECRYPT (1 << 10)
1772#define EVP_PKEY_OP_DERIVE (1 << 11)
1773#define EVP_PKEY_OP_ENCAPSULATE (1 << 12)
1774#define EVP_PKEY_OP_DECAPSULATE (1 << 13)
1775#define EVP_PKEY_OP_SIGNMSG (1 << 14)
1776#define EVP_PKEY_OP_VERIFYMSG (1 << 15)
1777/* Update the following when adding new EVP_PKEY_OPs */
1778#define EVP_PKEY_OP_ALL ((1 << 16) - 1)
1779
1780#define EVP_PKEY_OP_TYPE_SIG \
1781 (EVP_PKEY_OP_SIGN | EVP_PKEY_OP_SIGNMSG \
1782 | EVP_PKEY_OP_VERIFY | EVP_PKEY_OP_VERIFYMSG \
1783 | EVP_PKEY_OP_VERIFYRECOVER \
1784 | EVP_PKEY_OP_SIGNCTX | EVP_PKEY_OP_VERIFYCTX)
1785
1786#define EVP_PKEY_OP_TYPE_CRYPT \
1787 (EVP_PKEY_OP_ENCRYPT | EVP_PKEY_OP_DECRYPT)
1788
1789#define EVP_PKEY_OP_TYPE_DERIVE \
1790 (EVP_PKEY_OP_DERIVE)
1791
1792#define EVP_PKEY_OP_TYPE_DATA \
1793 (EVP_PKEY_OP_FROMDATA)
1794
1795#define EVP_PKEY_OP_TYPE_KEM \
1796 (EVP_PKEY_OP_ENCAPSULATE | EVP_PKEY_OP_DECAPSULATE)
1797
1798#define EVP_PKEY_OP_TYPE_GEN \
1799 (EVP_PKEY_OP_PARAMGEN | EVP_PKEY_OP_KEYGEN)
1800
1801#define EVP_PKEY_OP_TYPE_NOGEN \
1802 (EVP_PKEY_OP_ALL & ~EVP_PKEY_OP_TYPE_GEN)
1803
1804int EVP_PKEY_CTX_set_mac_key(EVP_PKEY_CTX *ctx, const unsigned char *key,
1805 int keylen);
1806
1807#define EVP_PKEY_CTRL_MD 1
1808#define EVP_PKEY_CTRL_PEER_KEY 2
1809#define EVP_PKEY_CTRL_SET_MAC_KEY 6
1810#define EVP_PKEY_CTRL_DIGESTINIT 7
1811/* Used by GOST key encryption in TLS */
1812#define EVP_PKEY_CTRL_SET_IV 8
1813#ifndef OPENSSL_NO_DEPRECATED_3_0
1814#define EVP_PKEY_CTRL_PKCS7_ENCRYPT 3
1815#define EVP_PKEY_CTRL_PKCS7_DECRYPT 4
1816#define EVP_PKEY_CTRL_PKCS7_SIGN 5
1817#define EVP_PKEY_CTRL_CMS_ENCRYPT 9
1818#define EVP_PKEY_CTRL_CMS_DECRYPT 10
1819#define EVP_PKEY_CTRL_CMS_SIGN 11
1820#endif
1821#define EVP_PKEY_CTRL_CIPHER 12
1822#define EVP_PKEY_CTRL_GET_MD 13
1823#define EVP_PKEY_CTRL_SET_DIGEST_SIZE 14
1824#define EVP_PKEY_CTRL_SET1_ID 15
1825#define EVP_PKEY_CTRL_GET1_ID 16
1826#define EVP_PKEY_CTRL_GET1_ID_LEN 17
1827
1828#define EVP_PKEY_ALG_CTRL 0x1000
1829
1830#define EVP_PKEY_FLAG_AUTOARGLEN 2
1831/*
1832 * Method handles all operations: don't assume any digest related defaults.
1833 */
1834#define EVP_PKEY_FLAG_SIGCTX_CUSTOM 4
1835#ifndef OPENSSL_NO_DEPRECATED_3_0
1836OSSL_DEPRECATEDIN_3_0 const EVP_PKEY_METHOD *EVP_PKEY_meth_find(int type);
1837OSSL_DEPRECATEDIN_3_0 EVP_PKEY_METHOD *EVP_PKEY_meth_new(int id, int flags);
1838OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get0_info(int *ppkey_id, int *pflags,
1839 const EVP_PKEY_METHOD *meth);
1840OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_copy(EVP_PKEY_METHOD *dst,
1841 const EVP_PKEY_METHOD *src);
1842OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_free(EVP_PKEY_METHOD *pmeth);
1843OSSL_DEPRECATEDIN_3_0 int EVP_PKEY_meth_add0(const EVP_PKEY_METHOD *pmeth);
1844OSSL_DEPRECATEDIN_3_0 int EVP_PKEY_meth_remove(const EVP_PKEY_METHOD *pmeth);
1845OSSL_DEPRECATEDIN_3_0 size_t EVP_PKEY_meth_get_count(void);
1846OSSL_DEPRECATEDIN_3_0 const EVP_PKEY_METHOD *EVP_PKEY_meth_get0(size_t idx);
1847#endif
1848
1849EVP_KEYMGMT *EVP_KEYMGMT_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
1850 const char *properties);
1851int EVP_KEYMGMT_up_ref(EVP_KEYMGMT *keymgmt);
1852void EVP_KEYMGMT_free(EVP_KEYMGMT *keymgmt);
1853const OSSL_PROVIDER *EVP_KEYMGMT_get0_provider(const EVP_KEYMGMT *keymgmt);
1854const char *EVP_KEYMGMT_get0_name(const EVP_KEYMGMT *keymgmt);
1855const char *EVP_KEYMGMT_get0_description(const EVP_KEYMGMT *keymgmt);
1856int EVP_KEYMGMT_is_a(const EVP_KEYMGMT *keymgmt, const char *name);
1857void EVP_KEYMGMT_do_all_provided(OSSL_LIB_CTX *libctx,
1858 void (*fn)(EVP_KEYMGMT *keymgmt, void *arg),
1859 void *arg);
1860int EVP_KEYMGMT_names_do_all(const EVP_KEYMGMT *keymgmt,
1861 void (*fn)(const char *name, void *data),
1862 void *data);
1863const OSSL_PARAM *EVP_KEYMGMT_gettable_params(const EVP_KEYMGMT *keymgmt);
1864const OSSL_PARAM *EVP_KEYMGMT_settable_params(const EVP_KEYMGMT *keymgmt);
1865const OSSL_PARAM *EVP_KEYMGMT_gen_settable_params(const EVP_KEYMGMT *keymgmt);
1866const OSSL_PARAM *EVP_KEYMGMT_gen_gettable_params(const EVP_KEYMGMT *keymgmt);
1867
1868EVP_SKEYMGMT *EVP_SKEYMGMT_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
1869 const char *properties);
1870int EVP_SKEYMGMT_up_ref(EVP_SKEYMGMT *keymgmt);
1871void EVP_SKEYMGMT_free(EVP_SKEYMGMT *keymgmt);
1872const OSSL_PROVIDER *EVP_SKEYMGMT_get0_provider(const EVP_SKEYMGMT *keymgmt);
1873const char *EVP_SKEYMGMT_get0_name(const EVP_SKEYMGMT *keymgmt);
1874const char *EVP_SKEYMGMT_get0_description(const EVP_SKEYMGMT *keymgmt);
1875int EVP_SKEYMGMT_is_a(const EVP_SKEYMGMT *keymgmt, const char *name);
1876void EVP_SKEYMGMT_do_all_provided(OSSL_LIB_CTX *libctx,
1877 void (*fn)(EVP_SKEYMGMT *keymgmt, void *arg),
1878 void *arg);
1879int EVP_SKEYMGMT_names_do_all(const EVP_SKEYMGMT *keymgmt,
1880 void (*fn)(const char *name, void *data),
1881 void *data);
1882const OSSL_PARAM *EVP_SKEYMGMT_get0_gen_settable_params(const EVP_SKEYMGMT *skeymgmt);
1883const OSSL_PARAM *EVP_SKEYMGMT_get0_imp_settable_params(const EVP_SKEYMGMT *skeymgmt);
1884
1885EVP_PKEY_CTX *EVP_PKEY_CTX_new(EVP_PKEY *pkey, ENGINE *e);
1886EVP_PKEY_CTX *EVP_PKEY_CTX_new_id(int id, ENGINE *e);
1887EVP_PKEY_CTX *EVP_PKEY_CTX_new_from_name(OSSL_LIB_CTX *libctx,
1888 const char *name,
1889 const char *propquery);
1890EVP_PKEY_CTX *EVP_PKEY_CTX_new_from_pkey(OSSL_LIB_CTX *libctx,
1891 EVP_PKEY *pkey, const char *propquery);
1892EVP_PKEY_CTX *EVP_PKEY_CTX_dup(const EVP_PKEY_CTX *ctx);
1893void EVP_PKEY_CTX_free(EVP_PKEY_CTX *ctx);
1894int EVP_PKEY_CTX_is_a(EVP_PKEY_CTX *ctx, const char *keytype);
1895
1896int EVP_PKEY_CTX_get_params(EVP_PKEY_CTX *ctx, OSSL_PARAM *params);
1897const OSSL_PARAM *EVP_PKEY_CTX_gettable_params(const EVP_PKEY_CTX *ctx);
1898int EVP_PKEY_CTX_set_params(EVP_PKEY_CTX *ctx, const OSSL_PARAM *params);
1899const OSSL_PARAM *EVP_PKEY_CTX_settable_params(const EVP_PKEY_CTX *ctx);
1900
1901int EVP_PKEY_CTX_set_algor_params(EVP_PKEY_CTX *ctx, const X509_ALGOR *alg);
1902int EVP_PKEY_CTX_get_algor_params(EVP_PKEY_CTX *ctx, X509_ALGOR *alg);
1903int EVP_PKEY_CTX_get_algor(EVP_PKEY_CTX *ctx, X509_ALGOR **alg);
1904
1905int EVP_PKEY_CTX_ctrl(EVP_PKEY_CTX *ctx, int keytype, int optype,
1906 int cmd, int p1, void *p2);
1907int EVP_PKEY_CTX_ctrl_str(EVP_PKEY_CTX *ctx, const char *type,
1908 const char *value);
1909int EVP_PKEY_CTX_ctrl_uint64(EVP_PKEY_CTX *ctx, int keytype, int optype,
1910 int cmd, uint64_t value);
1911
1912int EVP_PKEY_CTX_str2ctrl(EVP_PKEY_CTX *ctx, int cmd, const char *str);
1913int EVP_PKEY_CTX_hex2ctrl(EVP_PKEY_CTX *ctx, int cmd, const char *hex);
1914
1915int EVP_PKEY_CTX_md(EVP_PKEY_CTX *ctx, int optype, int cmd, const char *md);
1916
1917int EVP_PKEY_CTX_get_operation(EVP_PKEY_CTX *ctx);
1918void EVP_PKEY_CTX_set0_keygen_info(EVP_PKEY_CTX *ctx, int *dat, int datlen);
1919
1920EVP_PKEY *EVP_PKEY_new_mac_key(int type, ENGINE *e,
1921 const unsigned char *key, int keylen);
1922EVP_PKEY *EVP_PKEY_new_raw_private_key_ex(OSSL_LIB_CTX *libctx,
1923 const char *keytype,
1924 const char *propq,
1925 const unsigned char *priv, size_t len);
1926EVP_PKEY *EVP_PKEY_new_raw_private_key(int type, ENGINE *e,
1927 const unsigned char *priv,
1928 size_t len);
1929EVP_PKEY *EVP_PKEY_new_raw_public_key_ex(OSSL_LIB_CTX *libctx,
1930 const char *keytype, const char *propq,
1931 const unsigned char *pub, size_t len);
1932EVP_PKEY *EVP_PKEY_new_raw_public_key(int type, ENGINE *e,
1933 const unsigned char *pub,
1934 size_t len);
1935int EVP_PKEY_get_raw_private_key(const EVP_PKEY *pkey, unsigned char *priv,
1936 size_t *len);
1937int EVP_PKEY_get_raw_public_key(const EVP_PKEY *pkey, unsigned char *pub,
1938 size_t *len);
1939
1940#ifndef OPENSSL_NO_DEPRECATED_3_0
1941OSSL_DEPRECATEDIN_3_0
1942EVP_PKEY *EVP_PKEY_new_CMAC_key(ENGINE *e, const unsigned char *priv,
1943 size_t len, const EVP_CIPHER *cipher);
1944#endif
1945
1946void EVP_PKEY_CTX_set_data(EVP_PKEY_CTX *ctx, void *data);
1947void *EVP_PKEY_CTX_get_data(const EVP_PKEY_CTX *ctx);
1948EVP_PKEY *EVP_PKEY_CTX_get0_pkey(EVP_PKEY_CTX *ctx);
1949
1950EVP_PKEY *EVP_PKEY_CTX_get0_peerkey(EVP_PKEY_CTX *ctx);
1951
1952void EVP_PKEY_CTX_set_app_data(EVP_PKEY_CTX *ctx, void *data);
1953void *EVP_PKEY_CTX_get_app_data(EVP_PKEY_CTX *ctx);
1954
1955int EVP_PKEY_CTX_set_signature(EVP_PKEY_CTX *pctx,
1956 const unsigned char *sig, size_t siglen);
1957
1958void EVP_SIGNATURE_free(EVP_SIGNATURE *signature);
1959int EVP_SIGNATURE_up_ref(EVP_SIGNATURE *signature);
1960OSSL_PROVIDER *EVP_SIGNATURE_get0_provider(const EVP_SIGNATURE *signature);
1961EVP_SIGNATURE *EVP_SIGNATURE_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
1962 const char *properties);
1963int EVP_SIGNATURE_is_a(const EVP_SIGNATURE *signature, const char *name);
1964const char *EVP_SIGNATURE_get0_name(const EVP_SIGNATURE *signature);
1965const char *EVP_SIGNATURE_get0_description(const EVP_SIGNATURE *signature);
1966void EVP_SIGNATURE_do_all_provided(OSSL_LIB_CTX *libctx,
1967 void (*fn)(EVP_SIGNATURE *signature,
1968 void *data),
1969 void *data);
1970int EVP_SIGNATURE_names_do_all(const EVP_SIGNATURE *signature,
1971 void (*fn)(const char *name, void *data),
1972 void *data);
1973const OSSL_PARAM *EVP_SIGNATURE_gettable_ctx_params(const EVP_SIGNATURE *sig);
1974const OSSL_PARAM *EVP_SIGNATURE_settable_ctx_params(const EVP_SIGNATURE *sig);
1975
1976void EVP_ASYM_CIPHER_free(EVP_ASYM_CIPHER *cipher);
1977int EVP_ASYM_CIPHER_up_ref(EVP_ASYM_CIPHER *cipher);
1978OSSL_PROVIDER *EVP_ASYM_CIPHER_get0_provider(const EVP_ASYM_CIPHER *cipher);
1979EVP_ASYM_CIPHER *EVP_ASYM_CIPHER_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
1980 const char *properties);
1981int EVP_ASYM_CIPHER_is_a(const EVP_ASYM_CIPHER *cipher, const char *name);
1982const char *EVP_ASYM_CIPHER_get0_name(const EVP_ASYM_CIPHER *cipher);
1983const char *EVP_ASYM_CIPHER_get0_description(const EVP_ASYM_CIPHER *cipher);
1984void EVP_ASYM_CIPHER_do_all_provided(OSSL_LIB_CTX *libctx,
1985 void (*fn)(EVP_ASYM_CIPHER *cipher,
1986 void *arg),
1987 void *arg);
1988int EVP_ASYM_CIPHER_names_do_all(const EVP_ASYM_CIPHER *cipher,
1989 void (*fn)(const char *name, void *data),
1990 void *data);
1991const OSSL_PARAM *EVP_ASYM_CIPHER_gettable_ctx_params(const EVP_ASYM_CIPHER *ciph);
1992const OSSL_PARAM *EVP_ASYM_CIPHER_settable_ctx_params(const EVP_ASYM_CIPHER *ciph);
1993
1994void EVP_KEM_free(EVP_KEM *wrap);
1995int EVP_KEM_up_ref(EVP_KEM *wrap);
1996OSSL_PROVIDER *EVP_KEM_get0_provider(const EVP_KEM *wrap);
1997EVP_KEM *EVP_KEM_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
1998 const char *properties);
1999int EVP_KEM_is_a(const EVP_KEM *wrap, const char *name);
2000const char *EVP_KEM_get0_name(const EVP_KEM *wrap);
2001const char *EVP_KEM_get0_description(const EVP_KEM *wrap);
2002void EVP_KEM_do_all_provided(OSSL_LIB_CTX *libctx,
2003 void (*fn)(EVP_KEM *wrap, void *arg), void *arg);
2004int EVP_KEM_names_do_all(const EVP_KEM *wrap,
2005 void (*fn)(const char *name, void *data), void *data);
2006const OSSL_PARAM *EVP_KEM_gettable_ctx_params(const EVP_KEM *kem);
2007const OSSL_PARAM *EVP_KEM_settable_ctx_params(const EVP_KEM *kem);
2008
2009int EVP_PKEY_sign_init(EVP_PKEY_CTX *ctx);
2010int EVP_PKEY_sign_init_ex(EVP_PKEY_CTX *ctx, const OSSL_PARAM params[]);
2011int EVP_PKEY_sign_init_ex2(EVP_PKEY_CTX *ctx,
2012 EVP_SIGNATURE *algo, const OSSL_PARAM params[]);
2013int EVP_PKEY_sign(EVP_PKEY_CTX *ctx,
2014 unsigned char *sig, size_t *siglen,
2015 const unsigned char *tbs, size_t tbslen);
2016int EVP_PKEY_sign_message_init(EVP_PKEY_CTX *ctx,
2017 EVP_SIGNATURE *algo, const OSSL_PARAM params[]);
2018int EVP_PKEY_sign_message_update(EVP_PKEY_CTX *ctx,
2019 const unsigned char *in, size_t inlen);
2020int EVP_PKEY_sign_message_final(EVP_PKEY_CTX *ctx,
2021 unsigned char *sig, size_t *siglen);
2022int EVP_PKEY_verify_init(EVP_PKEY_CTX *ctx);
2023int EVP_PKEY_verify_init_ex(EVP_PKEY_CTX *ctx, const OSSL_PARAM params[]);
2024int EVP_PKEY_verify_init_ex2(EVP_PKEY_CTX *ctx,
2025 EVP_SIGNATURE *algo, const OSSL_PARAM params[]);
2026int EVP_PKEY_verify(EVP_PKEY_CTX *ctx,
2027 const unsigned char *sig, size_t siglen,
2028 const unsigned char *tbs, size_t tbslen);
2029int EVP_PKEY_verify_message_init(EVP_PKEY_CTX *ctx,
2030 EVP_SIGNATURE *algo, const OSSL_PARAM params[]);
2031int EVP_PKEY_verify_message_update(EVP_PKEY_CTX *ctx,
2032 const unsigned char *in, size_t inlen);
2033int EVP_PKEY_verify_message_final(EVP_PKEY_CTX *ctx);
2034int EVP_PKEY_verify_recover_init(EVP_PKEY_CTX *ctx);
2035int EVP_PKEY_verify_recover_init_ex(EVP_PKEY_CTX *ctx,
2036 const OSSL_PARAM params[]);
2037int EVP_PKEY_verify_recover_init_ex2(EVP_PKEY_CTX *ctx,
2038 EVP_SIGNATURE *algo,
2039 const OSSL_PARAM params[]);
2040int EVP_PKEY_verify_recover(EVP_PKEY_CTX *ctx,
2041 unsigned char *rout, size_t *routlen,
2042 const unsigned char *sig, size_t siglen);
2043int EVP_PKEY_encrypt_init(EVP_PKEY_CTX *ctx);
2044int EVP_PKEY_encrypt_init_ex(EVP_PKEY_CTX *ctx, const OSSL_PARAM params[]);
2045int EVP_PKEY_encrypt(EVP_PKEY_CTX *ctx,
2046 unsigned char *out, size_t *outlen,
2047 const unsigned char *in, size_t inlen);
2048int EVP_PKEY_decrypt_init(EVP_PKEY_CTX *ctx);
2049int EVP_PKEY_decrypt_init_ex(EVP_PKEY_CTX *ctx, const OSSL_PARAM params[]);
2050int EVP_PKEY_decrypt(EVP_PKEY_CTX *ctx,
2051 unsigned char *out, size_t *outlen,
2052 const unsigned char *in, size_t inlen);
2053
2054int EVP_PKEY_derive_init(EVP_PKEY_CTX *ctx);
2055int EVP_PKEY_derive_init_ex(EVP_PKEY_CTX *ctx, const OSSL_PARAM params[]);
2056int EVP_PKEY_derive_set_peer_ex(EVP_PKEY_CTX *ctx, EVP_PKEY *peer,
2057 int validate_peer);
2058int EVP_PKEY_derive_set_peer(EVP_PKEY_CTX *ctx, EVP_PKEY *peer);
2059int EVP_PKEY_derive(EVP_PKEY_CTX *ctx, unsigned char *key, size_t *keylen);
2060EVP_SKEY *EVP_PKEY_derive_SKEY(EVP_PKEY_CTX *ctx, EVP_SKEYMGMT *mgmt,
2061 const char *key_type, const char *propquery,
2062 size_t keylen, const OSSL_PARAM params[]);
2063
2064int EVP_PKEY_encapsulate_init(EVP_PKEY_CTX *ctx, const OSSL_PARAM params[]);
2065int EVP_PKEY_auth_encapsulate_init(EVP_PKEY_CTX *ctx, EVP_PKEY *authpriv,
2066 const OSSL_PARAM params[]);
2067int EVP_PKEY_encapsulate(EVP_PKEY_CTX *ctx,
2068 unsigned char *wrappedkey, size_t *wrappedkeylen,
2069 unsigned char *genkey, size_t *genkeylen);
2070int EVP_PKEY_decapsulate_init(EVP_PKEY_CTX *ctx, const OSSL_PARAM params[]);
2071int EVP_PKEY_auth_decapsulate_init(EVP_PKEY_CTX *ctx, EVP_PKEY *authpub,
2072 const OSSL_PARAM params[]);
2073int EVP_PKEY_decapsulate(EVP_PKEY_CTX *ctx,
2074 unsigned char *unwrapped, size_t *unwrappedlen,
2075 const unsigned char *wrapped, size_t wrappedlen);
2076typedef int EVP_PKEY_gen_cb(EVP_PKEY_CTX *ctx);
2077
2078int EVP_PKEY_fromdata_init(EVP_PKEY_CTX *ctx);
2079int EVP_PKEY_fromdata(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey, int selection,
2080 OSSL_PARAM param[]);
2081const OSSL_PARAM *EVP_PKEY_fromdata_settable(EVP_PKEY_CTX *ctx, int selection);
2082
2083int EVP_PKEY_todata(const EVP_PKEY *pkey, int selection, OSSL_PARAM **params);
2084int EVP_PKEY_export(const EVP_PKEY *pkey, int selection,
2085 OSSL_CALLBACK *export_cb, void *export_cbarg);
2086
2087const OSSL_PARAM *EVP_PKEY_gettable_params(const EVP_PKEY *pkey);
2088int EVP_PKEY_get_params(const EVP_PKEY *pkey, OSSL_PARAM params[]);
2089int EVP_PKEY_get_int_param(const EVP_PKEY *pkey, const char *key_name,
2090 int *out);
2091int EVP_PKEY_get_size_t_param(const EVP_PKEY *pkey, const char *key_name,
2092 size_t *out);
2093int EVP_PKEY_get_bn_param(const EVP_PKEY *pkey, const char *key_name,
2094 BIGNUM **bn);
2095int EVP_PKEY_get_utf8_string_param(const EVP_PKEY *pkey, const char *key_name,
2096 char *str, size_t max_buf_sz, size_t *out_sz);
2097int EVP_PKEY_get_octet_string_param(const EVP_PKEY *pkey, const char *key_name,
2098 unsigned char *buf, size_t max_buf_sz,
2099 size_t *out_sz);
2100
2101const OSSL_PARAM *EVP_PKEY_settable_params(const EVP_PKEY *pkey);
2102int EVP_PKEY_set_params(EVP_PKEY *pkey, OSSL_PARAM params[]);
2103int EVP_PKEY_set_int_param(EVP_PKEY *pkey, const char *key_name, int in);
2104int EVP_PKEY_set_size_t_param(EVP_PKEY *pkey, const char *key_name, size_t in);
2105int EVP_PKEY_set_bn_param(EVP_PKEY *pkey, const char *key_name,
2106 const BIGNUM *bn);
2107int EVP_PKEY_set_utf8_string_param(EVP_PKEY *pkey, const char *key_name,
2108 const char *str);
2109int EVP_PKEY_set_octet_string_param(EVP_PKEY *pkey, const char *key_name,
2110 const unsigned char *buf, size_t bsize);
2111
2112int EVP_PKEY_get_ec_point_conv_form(const EVP_PKEY *pkey);
2113int EVP_PKEY_get_field_type(const EVP_PKEY *pkey);
2114
2115EVP_PKEY *EVP_PKEY_Q_keygen(OSSL_LIB_CTX *libctx, const char *propq,
2116 const char *type, ...);
2117int EVP_PKEY_paramgen_init(EVP_PKEY_CTX *ctx);
2118int EVP_PKEY_paramgen(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey);
2119int EVP_PKEY_keygen_init(EVP_PKEY_CTX *ctx);
2120int EVP_PKEY_keygen(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey);
2121int EVP_PKEY_generate(EVP_PKEY_CTX *ctx, EVP_PKEY **ppkey);
2122int EVP_PKEY_check(EVP_PKEY_CTX *ctx);
2123int EVP_PKEY_public_check(EVP_PKEY_CTX *ctx);
2124int EVP_PKEY_public_check_quick(EVP_PKEY_CTX *ctx);
2125int EVP_PKEY_param_check(EVP_PKEY_CTX *ctx);
2126int EVP_PKEY_param_check_quick(EVP_PKEY_CTX *ctx);
2127int EVP_PKEY_private_check(EVP_PKEY_CTX *ctx);
2128int EVP_PKEY_pairwise_check(EVP_PKEY_CTX *ctx);
2129
2130#define EVP_PKEY_get_ex_new_index(l, p, newf, dupf, freef) \
2131 CRYPTO_get_ex_new_index(CRYPTO_EX_INDEX_EVP_PKEY, l, p, newf, dupf, freef)
2132int EVP_PKEY_set_ex_data(EVP_PKEY *key, int idx, void *arg);
2133void *EVP_PKEY_get_ex_data(const EVP_PKEY *key, int idx);
2134
2135void EVP_PKEY_CTX_set_cb(EVP_PKEY_CTX *ctx, EVP_PKEY_gen_cb *cb);
2136EVP_PKEY_gen_cb *EVP_PKEY_CTX_get_cb(EVP_PKEY_CTX *ctx);
2137
2138int EVP_PKEY_CTX_get_keygen_info(EVP_PKEY_CTX *ctx, int idx);
2139#ifndef OPENSSL_NO_DEPRECATED_3_0
2140OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_init(EVP_PKEY_METHOD *pmeth,
2141 int (*init)(EVP_PKEY_CTX *ctx));
2142OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_copy(EVP_PKEY_METHOD *pmeth, int (*copy)(EVP_PKEY_CTX *dst, const EVP_PKEY_CTX *src));
2143OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_cleanup(EVP_PKEY_METHOD *pmeth, void (*cleanup)(EVP_PKEY_CTX *ctx));
2144OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_paramgen(EVP_PKEY_METHOD *pmeth, int (*paramgen_init)(EVP_PKEY_CTX *ctx),
2145 int (*paramgen)(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey));
2146OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_keygen(EVP_PKEY_METHOD *pmeth, int (*keygen_init)(EVP_PKEY_CTX *ctx),
2147 int (*keygen)(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey));
2148OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_sign(EVP_PKEY_METHOD *pmeth, int (*sign_init)(EVP_PKEY_CTX *ctx),
2149 int (*sign)(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
2150 const unsigned char *tbs, size_t tbslen));
2151OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_verify(EVP_PKEY_METHOD *pmeth, int (*verify_init)(EVP_PKEY_CTX *ctx),
2152 int (*verify)(EVP_PKEY_CTX *ctx, const unsigned char *sig, size_t siglen,
2153 const unsigned char *tbs, size_t tbslen));
2154OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_verify_recover(EVP_PKEY_METHOD *pmeth, int (*verify_recover_init)(EVP_PKEY_CTX *ctx),
2155 int (*verify_recover)(EVP_PKEY_CTX *ctx, unsigned char *sig,
2156 size_t *siglen, const unsigned char *tbs,
2157 size_t tbslen));
2158OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_signctx(EVP_PKEY_METHOD *pmeth, int (*signctx_init)(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx),
2159 int (*signctx)(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
2160 EVP_MD_CTX *mctx));
2161OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_verifyctx(EVP_PKEY_METHOD *pmeth, int (*verifyctx_init)(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx),
2162 int (*verifyctx)(EVP_PKEY_CTX *ctx, const unsigned char *sig, int siglen,
2163 EVP_MD_CTX *mctx));
2164OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_encrypt(EVP_PKEY_METHOD *pmeth, int (*encrypt_init)(EVP_PKEY_CTX *ctx),
2165 int (*encryptfn)(EVP_PKEY_CTX *ctx, unsigned char *out, size_t *outlen,
2166 const unsigned char *in, size_t inlen));
2167OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_decrypt(EVP_PKEY_METHOD *pmeth, int (*decrypt_init)(EVP_PKEY_CTX *ctx),
2168 int (*decrypt)(EVP_PKEY_CTX *ctx, unsigned char *out, size_t *outlen,
2169 const unsigned char *in, size_t inlen));
2170OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_derive(EVP_PKEY_METHOD *pmeth, int (*derive_init)(EVP_PKEY_CTX *ctx),
2171 int (*derive)(EVP_PKEY_CTX *ctx, unsigned char *key, size_t *keylen));
2172OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_ctrl(EVP_PKEY_METHOD *pmeth, int (*ctrl)(EVP_PKEY_CTX *ctx, int type, int p1, void *p2),
2173 int (*ctrl_str)(EVP_PKEY_CTX *ctx, const char *type, const char *value));
2174OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_digestsign(EVP_PKEY_METHOD *pmeth,
2175 int (*digestsign)(EVP_MD_CTX *ctx, unsigned char *sig, size_t *siglen,
2176 const unsigned char *tbs, size_t tbslen));
2177OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_digestverify(EVP_PKEY_METHOD *pmeth,
2178 int (*digestverify)(EVP_MD_CTX *ctx, const unsigned char *sig,
2179 size_t siglen, const unsigned char *tbs,
2180 size_t tbslen));
2181OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_check(EVP_PKEY_METHOD *pmeth, int (*check)(EVP_PKEY *pkey));
2182OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_public_check(EVP_PKEY_METHOD *pmeth, int (*check)(EVP_PKEY *pkey));
2183OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_param_check(EVP_PKEY_METHOD *pmeth, int (*check)(EVP_PKEY *pkey));
2184OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_set_digest_custom(EVP_PKEY_METHOD *pmeth, int (*digest_custom)(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx));
2185OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_init(const EVP_PKEY_METHOD *pmeth, int (**pinit)(EVP_PKEY_CTX *ctx));
2186OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_copy(const EVP_PKEY_METHOD *pmeth, int (**pcopy)(EVP_PKEY_CTX *dst, const EVP_PKEY_CTX *src));
2187OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_cleanup(const EVP_PKEY_METHOD *pmeth, void (**pcleanup)(EVP_PKEY_CTX *ctx));
2188OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_paramgen(const EVP_PKEY_METHOD *pmeth, int (**pparamgen_init)(EVP_PKEY_CTX *ctx),
2189 int (**pparamgen)(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey));
2190OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_keygen(const EVP_PKEY_METHOD *pmeth, int (**pkeygen_init)(EVP_PKEY_CTX *ctx),
2191 int (**pkeygen)(EVP_PKEY_CTX *ctx, EVP_PKEY *pkey));
2192OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_sign(const EVP_PKEY_METHOD *pmeth, int (**psign_init)(EVP_PKEY_CTX *ctx),
2193 int (**psign)(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
2194 const unsigned char *tbs, size_t tbslen));
2195OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_verify(const EVP_PKEY_METHOD *pmeth, int (**pverify_init)(EVP_PKEY_CTX *ctx),
2196 int (**pverify)(EVP_PKEY_CTX *ctx, const unsigned char *sig,
2197 size_t siglen, const unsigned char *tbs, size_t tbslen));
2198OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_verify_recover(const EVP_PKEY_METHOD *pmeth,
2199 int (**pverify_recover_init)(EVP_PKEY_CTX *ctx),
2200 int (**pverify_recover)(EVP_PKEY_CTX *ctx, unsigned char *sig,
2201 size_t *siglen, const unsigned char *tbs,
2202 size_t tbslen));
2203OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_signctx(const EVP_PKEY_METHOD *pmeth,
2204 int (**psignctx_init)(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx),
2205 int (**psignctx)(EVP_PKEY_CTX *ctx, unsigned char *sig, size_t *siglen,
2206 EVP_MD_CTX *mctx));
2207OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_verifyctx(const EVP_PKEY_METHOD *pmeth,
2208 int (**pverifyctx_init)(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx),
2209 int (**pverifyctx)(EVP_PKEY_CTX *ctx, const unsigned char *sig,
2210 int siglen, EVP_MD_CTX *mctx));
2211OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_encrypt(const EVP_PKEY_METHOD *pmeth, int (**pencrypt_init)(EVP_PKEY_CTX *ctx),
2212 int (**pencryptfn)(EVP_PKEY_CTX *ctx, unsigned char *out, size_t *outlen,
2213 const unsigned char *in, size_t inlen));
2214OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_decrypt(const EVP_PKEY_METHOD *pmeth, int (**pdecrypt_init)(EVP_PKEY_CTX *ctx),
2215 int (**pdecrypt)(EVP_PKEY_CTX *ctx, unsigned char *out, size_t *outlen,
2216 const unsigned char *in, size_t inlen));
2217OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_derive(const EVP_PKEY_METHOD *pmeth, int (**pderive_init)(EVP_PKEY_CTX *ctx),
2218 int (**pderive)(EVP_PKEY_CTX *ctx, unsigned char *key, size_t *keylen));
2219OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_ctrl(const EVP_PKEY_METHOD *pmeth,
2220 int (**pctrl)(EVP_PKEY_CTX *ctx, int type, int p1, void *p2),
2221 int (**pctrl_str)(EVP_PKEY_CTX *ctx, const char *type,
2222 const char *value));
2223OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_digestsign(const EVP_PKEY_METHOD *pmeth,
2224 int (**digestsign)(EVP_MD_CTX *ctx, unsigned char *sig, size_t *siglen,
2225 const unsigned char *tbs, size_t tbslen));
2226OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_digestverify(const EVP_PKEY_METHOD *pmeth,
2227 int (**digestverify)(EVP_MD_CTX *ctx, const unsigned char *sig,
2228 size_t siglen, const unsigned char *tbs,
2229 size_t tbslen));
2230OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_check(const EVP_PKEY_METHOD *pmeth, int (**pcheck)(EVP_PKEY *pkey));
2231OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_public_check(const EVP_PKEY_METHOD *pmeth, int (**pcheck)(EVP_PKEY *pkey));
2232OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_param_check(const EVP_PKEY_METHOD *pmeth, int (**pcheck)(EVP_PKEY *pkey));
2233OSSL_DEPRECATEDIN_3_0 void EVP_PKEY_meth_get_digest_custom(const EVP_PKEY_METHOD *pmeth,
2234 int (**pdigest_custom)(EVP_PKEY_CTX *ctx, EVP_MD_CTX *mctx));
2235#endif
2236
2237void EVP_KEYEXCH_free(EVP_KEYEXCH *exchange);
2238int EVP_KEYEXCH_up_ref(EVP_KEYEXCH *exchange);
2239EVP_KEYEXCH *EVP_KEYEXCH_fetch(OSSL_LIB_CTX *ctx, const char *algorithm,
2240 const char *properties);
2241OSSL_PROVIDER *EVP_KEYEXCH_get0_provider(const EVP_KEYEXCH *exchange);
2242int EVP_KEYEXCH_is_a(const EVP_KEYEXCH *keyexch, const char *name);
2243const char *EVP_KEYEXCH_get0_name(const EVP_KEYEXCH *keyexch);
2244const char *EVP_KEYEXCH_get0_description(const EVP_KEYEXCH *keyexch);
2245void EVP_KEYEXCH_do_all_provided(OSSL_LIB_CTX *libctx,
2246 void (*fn)(EVP_KEYEXCH *keyexch, void *data),
2247 void *data);
2248int EVP_KEYEXCH_names_do_all(const EVP_KEYEXCH *keyexch,
2249 void (*fn)(const char *name, void *data),
2250 void *data);
2251const OSSL_PARAM *EVP_KEYEXCH_gettable_ctx_params(const EVP_KEYEXCH *keyexch);
2252const OSSL_PARAM *EVP_KEYEXCH_settable_ctx_params(const EVP_KEYEXCH *keyexch);
2253
2254void EVP_add_alg_module(void);
2255
2256int EVP_PKEY_CTX_set_group_name(EVP_PKEY_CTX *ctx, const char *name);
2257int EVP_PKEY_CTX_get_group_name(EVP_PKEY_CTX *ctx, char *name, size_t namelen);
2258int EVP_PKEY_get_group_name(const EVP_PKEY *pkey, char *name, size_t name_sz,
2259 size_t *gname_len);
2260
2261OSSL_LIB_CTX *EVP_PKEY_CTX_get0_libctx(EVP_PKEY_CTX *ctx);
2262const char *EVP_PKEY_CTX_get0_propq(const EVP_PKEY_CTX *ctx);
2263const OSSL_PROVIDER *EVP_PKEY_CTX_get0_provider(const EVP_PKEY_CTX *ctx);
2264
2265int EVP_SKEY_is_a(const EVP_SKEY *skey, const char *name);
2266EVP_SKEY *EVP_SKEY_import(OSSL_LIB_CTX *libctx, const char *skeymgmtname, const char *propquery,
2267 int selection, const OSSL_PARAM *params);
2268EVP_SKEY *EVP_SKEY_generate(OSSL_LIB_CTX *libctx, const char *skeymgmtname,
2269 const char *propquery, const OSSL_PARAM *params);
2270EVP_SKEY *EVP_SKEY_import_raw_key(OSSL_LIB_CTX *libctx, const char *skeymgmtname,
2271 unsigned char *key, size_t keylen,
2272 const char *propquery);
2273EVP_SKEY *EVP_SKEY_import_SKEYMGMT(OSSL_LIB_CTX *libctx, EVP_SKEYMGMT *skeymgmt,
2274 int selection, const OSSL_PARAM *params);
2275int EVP_SKEY_get0_raw_key(const EVP_SKEY *skey, const unsigned char **key,
2276 size_t *len);
2277const char *EVP_SKEY_get0_key_id(const EVP_SKEY *skey);
2278int EVP_SKEY_export(const EVP_SKEY *skey, int selection,
2279 OSSL_CALLBACK *export_cb, void *export_cbarg);
2280int EVP_SKEY_up_ref(EVP_SKEY *skey);
2281void EVP_SKEY_free(EVP_SKEY *skey);
2282const char *EVP_SKEY_get0_skeymgmt_name(const EVP_SKEY *skey);
2283const char *EVP_SKEY_get0_provider_name(const EVP_SKEY *skey);
2284EVP_SKEY *EVP_SKEY_to_provider(EVP_SKEY *skey, OSSL_LIB_CTX *libctx,
2285 OSSL_PROVIDER *prov, const char *propquery);
2286
2287#ifdef __cplusplus
2288}
2289#endif
2290#endif
2291