mirror of
https://github.com/openssl/openssl.git
synced 2024-12-21 06:09:35 +08:00
2ee4a50ab9
The function EVP_PKEY_CTX_new_from_pkey() infers the name of the algorithm to fetch from the EVP_PKEY that has been supplied as an argument. But there was no way to specify properties to be used during that fetch. Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/10926)
103 lines
3.5 KiB
Plaintext
103 lines
3.5 KiB
Plaintext
=pod
|
|
|
|
=head1 NAME
|
|
|
|
EVP_PKEY_CTX_new, EVP_PKEY_CTX_new_id, EVP_PKEY_CTX_new_from_name,
|
|
EVP_PKEY_CTX_new_from_pkey, EVP_PKEY_CTX_dup, EVP_PKEY_CTX_free
|
|
- public key algorithm context functions
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
#include <openssl/evp.h>
|
|
|
|
EVP_PKEY_CTX *EVP_PKEY_CTX_new(EVP_PKEY *pkey, ENGINE *e);
|
|
EVP_PKEY_CTX *EVP_PKEY_CTX_new_id(int id, ENGINE *e);
|
|
EVP_PKEY_CTX *EVP_PKEY_CTX_new_from_name(OPENSSL_CTX *libctx,
|
|
const char *name,
|
|
const char *propquery);
|
|
EVP_PKEY_CTX *EVP_PKEY_CTX_new_from_pkey(OPENSSL_CTX *libctx,
|
|
EVP_PKEY *pkey);
|
|
EVP_PKEY_CTX *EVP_PKEY_CTX_dup(const EVP_PKEY_CTX *ctx);
|
|
void EVP_PKEY_CTX_free(EVP_PKEY_CTX *ctx);
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
The EVP_PKEY_CTX_new() function allocates public key algorithm context using
|
|
the I<pkey> key type and ENGINE I<e>.
|
|
|
|
The EVP_PKEY_CTX_new_id() function allocates public key algorithm context
|
|
using the key type specified by I<id> and ENGINE I<e>.
|
|
|
|
The EVP_PKEY_CTX_new_from_name() function allocates a public key algorithm
|
|
context using the library context I<libctx> (see L<OPENSSL_CTX(3)>), the
|
|
key type specified by I<name> and the property query I<propquery>. None
|
|
of the arguments are duplicated, so they must remain unchanged for the
|
|
lifetime of the returned B<EVP_PKEY_CTX> or of any of its duplicates.
|
|
|
|
The EVP_PKEY_CTX_new_from_pkey() function allocates a public key algorithm
|
|
context using the library context I<libctx> (see L<OPENSSL_CTX(3)>) and the
|
|
algorithm specified by I<pkey> and the property query I<propquery>. None of the
|
|
arguments are duplicated, so they must remain unchanged for the lifetime of the
|
|
returned B<EVP_PKEY_CTX> or any of its duplicates.
|
|
|
|
EVP_PKEY_CTX_new_id() and EVP_PKEY_CTX_new_from_name() are normally
|
|
used when no B<EVP_PKEY> structure is associated with the operations,
|
|
for example during parameter generation or key generation for some
|
|
algorithms.
|
|
|
|
EVP_PKEY_CTX_dup() duplicates the context I<ctx>.
|
|
|
|
EVP_PKEY_CTX_free() frees up the context I<ctx>.
|
|
If I<ctx> is NULL, nothing is done.
|
|
|
|
=head1 NOTES
|
|
|
|
=over 4
|
|
|
|
=item 1.
|
|
|
|
The B<EVP_PKEY_CTX> structure is an opaque public key algorithm context used
|
|
by the OpenSSL high level public key API. Contexts B<MUST NOT> be shared between
|
|
threads: that is it is not permissible to use the same context simultaneously
|
|
in two threads.
|
|
|
|
=item 2.
|
|
|
|
We mention "key type" in this manual, which is the same
|
|
as "algorithm" in most cases, allowing either term to be used
|
|
interchangeably. There are algorithms where the I<key type> and the
|
|
I<algorithm> of the operations that use the keys are not the same,
|
|
such as EC keys being used for ECDSA and ECDH operations.
|
|
|
|
=back
|
|
|
|
=head1 RETURN VALUES
|
|
|
|
EVP_PKEY_CTX_new(), EVP_PKEY_CTX_new_id(), EVP_PKEY_CTX_dup() returns either
|
|
the newly allocated B<EVP_PKEY_CTX> structure of B<NULL> if an error occurred.
|
|
|
|
EVP_PKEY_CTX_free() does not return a value.
|
|
|
|
=head1 SEE ALSO
|
|
|
|
L<EVP_PKEY_new(3)>
|
|
|
|
=head1 HISTORY
|
|
|
|
The EVP_PKEY_CTX_new(), EVP_PKEY_CTX_new_id(), EVP_PKEY_CTX_dup() and
|
|
EVP_PKEY_CTX_free() functions were added in OpenSSL 1.0.0.
|
|
|
|
The EVP_PKEY_CTX_new_from_name() and EVP_PKEY_CTX_new_from_pkey() functions were
|
|
added in OpenSSL 3.0.
|
|
|
|
=head1 COPYRIGHT
|
|
|
|
Copyright 2006-2016 The OpenSSL Project Authors. All Rights Reserved.
|
|
|
|
Licensed under the Apache License 2.0 (the "License"). You may not use
|
|
this file except in compliance with the License. You can obtain a copy
|
|
in the file LICENSE in the source distribution or at
|
|
L<https://www.openssl.org/source/license.html>.
|
|
|
|
=cut
|