query on PEM_write_bio_PKCS8PrivateKey

Hi Team, I have a query. I see the below API is used to write the private key in encrypted PKCS#8 format. *PEM_write_bio_PKCS8PrivateKey()* and *PEM_write_PKCS8PrivateKey()* write a private key in an EVP_PKEY structure in PKCS#8 EncryptedPrivateKeyInfo format using PKCS#5 v2.0 password based encry

OpenSSL SSL_CTX_set_default_verify_paths Slow

While migrating some applications from OpenSSL 1.0.2 (and 1.1.1) to 3.0.0, I have noticed that the SSL_CTX_set_default_verify_paths() function is much slower in 3.0.0.  In 1.0.0 it would take about 0.1 seconds and in 3.0.0 it takes over 3 seconds. strace indicates that the extra time is during

Re: RSA provider use example

Thank you for your reply. I'm still a bit confused though. In /providers/implementations/asymcipher/rsa_enc.c I find function rsa_decrypt() that calls RSA_private_decrypt(prsactx->rsa) I haven't found other implementation of this RSA_private_decrypt() apart from the one in crypto/RSA/rsa_crypt.c ,

Re: RSA provider use example

On 24/09/2021 14:49, Antonio Santagiuliana wrote: Hello , thank you all for the replies. Very useful. I have seen in Openssl/crypto/RSA/rsa_local.h the definition of rsa_st has a pointer to RSA_METHOD and I can't see this filled in in any of the examples' set up or initializations, where is

Re: RSA provider use example

Hello , thank you all for the replies. Very useful. I have seen in Openssl/crypto/RSA/rsa_local.h the definition of rsa_st has a pointer to RSA_METHOD and I can't see this filled in in any of the examples' set up or initializations, where is it filled in for the default provider , for the RSA algor

Re: Replacement for BIO_get_port(), BIO_get_host_ip()

Gentle reminder. Thanks, Shiva Kumar From: Shivakumar Poojari Sent: Friday, September 24, 2021 11:35 AM To: openssl-users@openssl.org Cc: Paramashivaiah, Sunil ; Kumar Mishra, Sanjeev Subject: Replacement for BIO_get_port(), BIO_get_host_ip() Hi BIO_get_port(),

Re: RSA provider use example

On 24/09/2021 12:17, Dr Paul Dale wrote: What about: apps/rsa.c, apps/rsautl.c and apps/genrsa.c 3.0 doesn't use the RSA structure in the non-deprecated public API. You probably want the EVP_PKEY_fromdata call. An example of building an RSA key from its constituent parts is available on th

Re: RSA provider use example

On 24/9/21 9:15 pm, Angus Robertson - Magenta Systems Ltd wrote: I've been wondering if this is more efficient than getting the parameters one at a time using multiple EVP_PKEY_get_xx_param which also calls EVP_PKEY_get_params. I'd be surprised if there was a lot of difference. If I had to g

Re: RSA provider use example

On 24/09/2021 11:55, Antonio Santagiuliana wrote: Hello Is there any app or command in the current Openssl master repository that initialises and uses the new RSA provider? I would like to see how the RSA* context parameter is filled in and used, but I can't find an example using the RSA pro

Re: RSA provider use example

What about: apps/rsa.c, apps/rsautl.c and apps/genrsa.c 3.0 doesn't use the RSA structure in the non-deprecated public API. You probably want the EVP_PKEY_fromdata call. Pauli On 24/9/21 8:55 pm, Antonio Santagiuliana wrote: Hello Is there any app or command in the current Openssl master rep

Re: RSA provider use example

> I would like to see how the RSA* context parameter is filled in > and used, but I can't find an example using the RSA provider. This is an example I just created by building a OSSL_PARAM array with OSSL_PARAM_construct_xx and calling EVP_PKEY_get_params. I've been wondering if this is more e

RSA provider use example

Hello Is there any app or command in the current Openssl master repository that initialises and uses the new RSA provider? I would like to see how the RSA* context parameter is filled in and used, but I can't find an example using the RSA provider. Thank you