mirror/openssl
2
0
Fork 0
mirror of https://github.com/openssl/openssl.git synced 2025-01-30 14:01:55 +08:00
Code Issues Packages Projects Releases Wiki Activity
8951ee06b4
openssl/doc
History
Joachim Vandersmissen 6c39d21a48 Replace PKCS#1 v1.5 padding in RSA PCT 
After December 31, 2023, SP 800-131Ar2 [0] no longer allows PKCS#1 v1.5
padding for RSA "key-transport" (aka encryption and decryption).
There's a few good options to replace this usage in the RSA PCT, but
the simplest is verifying m = (m^e)^d mod n, (where 1 < m < (n − 1)).
This is specified in SP 800-56Br2 (Section 6.4.1.1) [1] and allowed by
FIPS 140-3 IG 10.3.A. In OpenSSL, this corresponds to RSA_NO_PADDING.

[0]: https://doi.org/10.6028/NIST.SP.800-131Ar2
[1]: https://doi.org/10.6028/NIST.SP.800-56Br2

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23832)
2024-08-22 07:24:29 +10:00
..
designs Remove repetitive words 2024-04-16 09:07:05 +02:00
HOWTO Fix some small typos 2024-08-07 04:57:29 -04:00
images
internal hashtable: Support lockless reads 2024-08-21 15:21:25 +02:00
life-cycles
man1 Add FIPS KMAC key check 2024-08-21 15:34:58 +02:00
man3 Implement functionality for direct use of composite signature algorithms 2024-08-21 08:21:06 +02:00
man5 Fix remaining provider config settings to be decisive in value 2023-12-27 09:32:48 +01:00
man7 Replace PKCS#1 v1.5 padding in RSA PCT 2024-08-22 07:24:29 +10:00
build.info adds TLS signature algorithms list feature 2024-08-13 11:48:54 +10:00
build.info.in
dir-locals.example.el
fingerprints.txt Drop the old PGP key fingerprint 2024-06-06 16:03:38 +02:00
openssl-c-indent.el
perlvars.pm Document SSL_OP_PREFER_NO_DHE_KEX option. 2023-11-24 15:08:04 +00:00
README.md

README.md

OpenSSL Documentation

README.md This file

fingerprints.txt PGP fingerprints of authorised release signers

standards.txt standards.txt Moved to the web, https://www.openssl.org/docs/standards.html

HOWTO/ A few how-to documents; not necessarily up-to-date

man1/ The openssl command-line tools; start with openssl.pod

man3/ The SSL library and the crypto library

man5/ File formats

man7/ Overviews; start with crypto.pod and ssl.pod, for example Algorithm specific EVP_PKEY documentation.

Formatted versions of the manpages (apps,ssl,crypto) can be found at https://www.openssl.org/docs/manpages.html