openssl/providers/fips
Shane Lontis 80f4fd18f7 Add KEM (Key encapsulation mechanism) support to providers
SP800-56Br2 requires support for the RSA primitives for RSASVE generate and recover.
As these are simple KEM operations another operation type has been added that can support future extensions.

Added public functions EVP_PKEY_encapsulate_init(), EVP_PKEY_encapsulate(), EVP_PKEY_decapsulate_init() and EVP_PKEY_decapsulate()
Added EVP_KEM_* functions.
Added OSSL_FUNC_kem_* dispatch functions

Added EVP_PKEY_CTX_set_kem_op() so that different types of KEM can be added in the future. This value must currently be set to
"RSASVE" after EVP_PKEY_encapsulate_init() & EVP_PKEY_decapsulate_init() as there is no default value.
This allows the existing RSA key types, keymanagers, and encoders to be used with the encapsulation operations.

The design of the public API's resulted from contributions from @romen & @levitte.

Reviewed-by: Nicola Tuveri <nic.tuv@gmail.com>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/12750)
2020-09-19 18:08:46 +10:00
..
build.info Add pairwise consistency self tests to asym keygenerators 2020-03-03 14:02:36 +10:00
fipsprov.c Add KEM (Key encapsulation mechanism) support to providers 2020-09-19 18:08:46 +10:00
self_test_data.inc Add self tests for rsa encryption 2020-09-16 14:10:23 +10:00
self_test_kats.c Add self tests for rsa encryption 2020-09-16 14:10:23 +10:00
self_test.c keygen: add FIPS error state management to conditional self tests 2020-09-12 16:46:51 +10:00
self_test.h keygen: add FIPS error state management to conditional self tests 2020-09-12 16:46:51 +10:00