Replacement for CRYPTO_thread_id() & ERR_get_error_line_data() for openssl3.0

2021-09-02 Thread Shivakumar Poojari
Hi All, We are upgrading our code to openssl 3.0. the below function we trying to replace, searched in the openssl man pages not found proper information. CRYPTO_thread_id() ERR_get_error_line_data() please suggest. thanks, shivakumar. Notice: This e-mail together with any attachments may

Re: How to get rsa-private key in plain text format?

2021-09-02 Thread Viktor Dukhovni
On Thu, Sep 02, 2021 at 05:21:22PM -0600, Shariful Alam wrote: > Is there any command-line tool to get the plain text rsa private key like > the following format from .pem file? Yes, if you're willing to tolerate slightly different labels and ":" every two nibbles.With slightly different labels

How to get rsa-private key in plain text format?

2021-09-02 Thread Shariful Alam
Hello, Is there any command-line tool to get the plain text rsa private key like the following format from .pem file? N =

What to replace low-level padding operations with in OSSL 3.0?

2021-09-02 Thread William Roberts
I have code that applies PCKS1.5 padding via RSA_padding_add_PKCS1_type_1 and strips it with RSA_padding_check_PKCS1_type_2 before sending it to the HSM for raw RSA operation to support a legacy PKCS11 interface. Is there any way to perform these tasks with OpenSSL 3.0? Thanks, Bill

Re: Question about constness of EVP_PKEY* arguments in public API

2021-09-02 Thread Matt Caswell
On 02/09/2021 16:43, Romain GEISSLER via openssl-users wrote: I am using the following OpenSSL API: EVP_DigestSignInit, EVP_DigestVerifyInit, EVP_PKEY_size, EVP_SealInit, EVP_OpenInit. And it seems these all take an non-const EVP_PKEY* argument. Does it mean that EVP_PKEY* have some internal

Question about constness of EVP_PKEY* arguments in public API

2021-09-02 Thread Romain GEISSLER via openssl-users
Hi, I have some piece of software using OpenSSL that works right now on a single thread right now. I am adding a bit more "const" in the code everywhere I can as we want to start using the same code in multithreaded environment, and potentially two threads might sign/verify/encrypt/decrypt