openssl/providers
Richard Levitte 6a2b8ff392 Decoding PKCS#8: separate decoding of encrypted and unencrypted PKCS#8
This has us switch from the 'structure' "pkcs8" to "PrivateKeyInfo",
which is sensible considering we already have "SubjectPublicKeyInfo".
We also add "EncryptedPrivateKeyInfo", and use it for a special decoder
that detects and decrypts an EncryptedPrivateKeyInfo structured DER
blob into a PrivateKeyInfo structured DER blob and passes that on to
the next decoder implementation.

The result of this change is that PKCS#8 decryption should only happen
once per decoding instead of once for every expected key type.
Furthermore, this new decoder implementation sets the data type to the
OID of the algorithmIdentifier field, thus reducing how many decoder
implementations are tentativaly run further down the call chain.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15498)
2021-06-09 17:00:10 +02:00
..
common Move libssl related defines used by fips provider to prov_ssl.h 2021-06-04 17:06:47 +02:00
fips Fix AIX FIPS DEP. 2021-06-08 15:18:00 +10:00
implementations Decoding PKCS#8: separate decoding of encrypted and unencrypted PKCS#8 2021-06-09 17:00:10 +02:00
baseprov.c
build.info Rework how providers/fipsmodule.cnf is produced 2021-05-26 15:11:01 +02:00
decoders.inc Decoding PKCS#8: separate decoding of encrypted and unencrypted PKCS#8 2021-06-09 17:00:10 +02:00
defltprov.c
encoders.inc Decoding PKCS#8: separate decoding of encrypted and unencrypted PKCS#8 2021-06-09 17:00:10 +02:00
fips-sources.checksums make update-fips-checksums 2021-06-05 10:38:37 +02:00
fips.checksum make update-fips-checksums 2021-06-05 10:38:37 +02:00
fips.module.sources make update-fips-checksums 2021-06-05 10:38:37 +02:00
legacyprov.c
nullprov.c
prov_running.c
stores.inc