Re: What to replace low-level padding operations with in OSSL 3.0?

2021-09-03 Thread Matt Caswell 




On 02/09/2021 22:47, William Roberts wrote:

I have code that applies PCKS1.5 padding via
RSA_padding_add_PKCS1_type_1 and strips it with
RSA_padding_check_PKCS1_type_2 before sending it to the HSM for raw
RSA operation to support a legacy PKCS11 interface. Is there any way
to perform these tasks with OpenSSL 3.0?


No, there is no non-deprecated way to do this in OpenSSL 3.0. Those 
functions still *exist* and you may still call them, but they are 
deprecated.


Matt

What to replace low-level padding operations with in OSSL 3.0?

2021-09-02 Thread William Roberts 
I have code that applies PCKS1.5 padding via
RSA_padding_add_PKCS1_type_1 and strips it with
RSA_padding_check_PKCS1_type_2 before sending it to the HSM for raw
RSA operation to support a legacy PKCS11 interface. Is there any way
to perform these tasks with OpenSSL 3.0?

Thanks,
Bill