>> In OpenSSL, we recommend always using the low-level interface to RSA signing, using the function RSA_sign( ) to >>perform signatures when you've already calculated the appropriate hash. The signature, defined in openssl/rsa.h, is:
>>
>>int RSA_sign(int md_type, unsigned char *dgst, unsigned int dlen,
>> unsigned char *sig, unsigned int *siglen, RSA *r);
>>
>>The high-level interface to RSA signatures is certainly no less complex than computing the digest and calling RSA_sign( ) >>yourself. The only advantage of it is that you can minimize the amount of code you need to change if you would additionally >>like to support DSA signatures. If you're interested in this API, see the book Network Security with OpenSSL for more >>information.
Anyone know the advantages of using the low level API defined in openssl/rsa.h ?
Thanks in advance,
Rafael
Nils Larsch wrote:
Rafael Cividanes wrote:
I was studing the EVP interface for public key to use RSA. I'd like to know if the low level interface using /openssl/rsa.h/ is better than EVP (hight level) solution. In symetric encryption the list told me that EVP interface was the best solution.
unless you need features only supplied by the low level api I would recommend to use the EVP api.
Nils ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
-- Rafael Cividanes Instituto Tecnológico de Aeronáutica - ITA Divisão de Ciência da Computação - IEC Pça. Mal.Eduardo Gomes, 50 Vila das Acácias CTA-ITA-IEP 12.228-900 São José dos Campos,SP Prédio da Guerra Eletrônica - Sala 235 Tel 12-39476891 E-mail: [EMAIL PROTECTED]
______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]
