RSA_sign.pod 1.8 KB
Newer Older
U
Ulf Möller 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24
=pod

=head1 NAME

RSA_sign, RSA_verify - RSA signatures

=head1 SYNOPSIS

 #include <openssl/rsa.h>

 int RSA_sign(int type, unsigned char *m, unsigned int m_len,
    unsigned char *sigret, unsigned int *siglen, RSA *rsa);

 int RSA_verify(int type, unsigned char *m, unsigned int m_len,
    unsigned char *sigbuf, unsigned int siglen, RSA *rsa);

=head1 DESCRIPTION

RSA_sign() signs the message digest B<m> of size B<m_len> using the
private key B<rsa> as specified in PKCS #1 v2.0. It stores the
signature in B<sigret> and the signature size in B<siglen>. B<sigret>
must point to B<RSA_size(rsa)> bytes of memory.

B<type> denotes the message digest algorithm that was used to generate
R
Richard Levitte 已提交
25 26
B<m>. It usually is one of B<NID_sha1>, B<NID_ripemd160> and B<NID_md5>;
see L<objects(3)|objects(3)> for details. If B<type> is B<NID_md5_sha1>,
U
Ulf Möller 已提交
27 28 29 30 31 32 33 34 35 36 37 38 39
an SSL signature (MD5 and SHA1 message digests with PKCS #1 padding
and no algorithm identifier) is created.

RSA_verify() verifies that the signature B<sigbuf> of size B<siglen>
matches a given message digest B<m> of size B<m_len>. B<type> denotes
the message digest algorithm that was used to generate the signature.
B<rsa> is the signer's public key.

=head1 RETURN VALUES

RSA_sign() returns 1 on success, 0 otherwise.  RSA_verify() returns 1
on successful verification, 0 otherwise.

40
The error codes can be obtained by L<ERR_get_error(3)|ERR_get_error(3)>.
U
Ulf Möller 已提交
41 42 43 44 45 46 47 48 49 50 51 52

=head1 BUGS

Certain signatures with an improper algorithm identifier are accepted
for compatibility with SSLeay 0.4.5 :-)

=head1 CONFORMING TO

SSL, PKCS #1 v2.0

=head1 SEE ALSO

53 54 55
L<err(3)|err(3)>, L<objects(3)|objects(3)>, L<rsa(3)|rsa(3)>,
L<RSA_private_encrypt(3)|RSA_private_encrypt(3)>,
L<RSA_public_decrypt(3)|RSA_public_decrypt(3)> 
U
Ulf Möller 已提交
56 57 58 59 60 61 62

=head1 HISTORY

RSA_sign() and RSA_verify() are available in all versions of SSLeay
and OpenSSL.

=cut