diff options
| author | Shane Lontis <shane.lontis@oracle.com> | 2020-09-19 10:08:46 +0200 |
|---|---|---|
| committer | Shane Lontis <shane.lontis@oracle.com> | 2020-09-19 10:08:46 +0200 |
| commit | 80f4fd18f72c0d3faae864da6979b83acc4f89a2 (patch) | |
| tree | 0882ccf31406c4f9948674913f51e3c46efff64d /providers/defltprov.c | |
| parent | Update the EdDSA docs with information about Algorithm Identifiers (diff) | |
| download | openssl-80f4fd18f72c0d3faae864da6979b83acc4f89a2.tar.xz openssl-80f4fd18f72c0d3faae864da6979b83acc4f89a2.zip | |
Add KEM (Key encapsulation mechanism) support to providers
SP800-56Br2 requires support for the RSA primitives for RSASVE generate and recover.
As these are simple KEM operations another operation type has been added that can support future extensions.
Added public functions EVP_PKEY_encapsulate_init(), EVP_PKEY_encapsulate(), EVP_PKEY_decapsulate_init() and EVP_PKEY_decapsulate()
Added EVP_KEM_* functions.
Added OSSL_FUNC_kem_* dispatch functions
Added EVP_PKEY_CTX_set_kem_op() so that different types of KEM can be added in the future. This value must currently be set to
"RSASVE" after EVP_PKEY_encapsulate_init() & EVP_PKEY_decapsulate_init() as there is no default value.
This allows the existing RSA key types, keymanagers, and encoders to be used with the encapsulation operations.
The design of the public API's resulted from contributions from @romen & @levitte.
Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/12750)
Diffstat (limited to 'providers/defltprov.c')
| -rw-r--r-- | providers/defltprov.c | 7 |
1 files changed, 7 insertions, 0 deletions
diff --git a/providers/defltprov.c b/providers/defltprov.c index d95964539b..dfb113903e 100644 --- a/providers/defltprov.c +++ b/providers/defltprov.c @@ -381,6 +381,11 @@ static const OSSL_ALGORITHM deflt_asym_cipher[] = { { NULL, NULL, NULL } }; +static const OSSL_ALGORITHM deflt_asym_kem[] = { + { "RSA", "provider=default", rsa_asym_kem_functions }, + { NULL, NULL, NULL } +}; + static const OSSL_ALGORITHM deflt_keymgmt[] = { #ifndef OPENSSL_NO_DH { "DH:dhKeyAgreement", "provider=default", dh_keymgmt_functions }, @@ -467,6 +472,8 @@ static const OSSL_ALGORITHM *deflt_query(void *provctx, int operation_id, return deflt_signature; case OSSL_OP_ASYM_CIPHER: return deflt_asym_cipher; + case OSSL_OP_KEM: + return deflt_asym_kem; case OSSL_OP_ENCODER: return deflt_encoder; case OSSL_OP_DECODER: |