{"id":3918,"date":"2022-12-20T17:28:24","date_gmt":"2022-12-20T20:28:24","guid":{"rendered":"http:\/\/lode.uno\/linux-man\/index.php\/2022\/12\/20\/rsa-pss-man7\/"},"modified":"2022-12-20T17:28:24","modified_gmt":"2022-12-20T20:28:24","slug":"rsa-pss-man7","status":"publish","type":"post","link":"https:\/\/lode.uno\/linux-man\/2022\/12\/20\/rsa-pss-man7\/","title":{"rendered":"RSA-PSS (man7)"},"content":{"rendered":"<h1 align=\"center\">RSA-PSS<\/h1>\n<p> <a href=\"#NAME\">NAME<\/a><br \/> <a href=\"#DESCRIPTION\">DESCRIPTION<\/a><br \/> <a href=\"#NOTES\">NOTES<\/a><br \/> <a href=\"#CONFORMING TO\">CONFORMING TO<\/a><br \/> <a href=\"#SEE ALSO\">SEE ALSO<\/a><br \/> <a href=\"#COPYRIGHT\">COPYRIGHT<\/a> <\/p>\n<hr>\n<h2>NAME <a name=\"NAME\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\">RSA\u2212PSS \u2212 EVP_PKEY RSA\u2212PSS algorithm support<\/p>\n<h2>DESCRIPTION <a name=\"DESCRIPTION\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\">The <b>RSA-PSS<\/b> <small>EVP_PKEY<\/small> implementation is a restricted version of the <small>RSA<\/small> algorithm which only supports signing, verification and key generation using <small>PSS<\/small> padding modes with optional parameter restrictions.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">It has associated private key and public key formats.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">This algorithm shares several control operations with the <b><small>RSA<\/small><\/b> algorithm but with some restrictions described below.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\"><b>Signing and Verification<\/b> <br \/> Signing and verification is similar to the <b><small>RSA<\/small><\/b> algorithm except the padding mode is always <small>PSS.<\/small> If the key in use has parameter restrictions then the corresponding signature parameters are set to the restrictions: for example, if the key can only be used with digest <small>SHA256, MGF1 SHA256<\/small> and minimum salt length 32 then the digest, <small>MGF1<\/small> digest and salt length will be set to <small>SHA256, SHA256<\/small> and 32 respectively.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\"><b>Key Generation<\/b> <br \/> By default no parameter restrictions are placed on the generated key.<\/p>\n<h2>NOTES <a name=\"NOTES\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\">The public key format is documented in <small>RFC4055.<\/small><\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">The PKCS#8 private key format used for RSA-PSS keys is similar to the <small>RSA<\/small> format except it uses the <b>id-RSASSA-PSS<\/b> <small>OID<\/small> and the parameters field, if present, restricts the key parameters in the same way as the public key.<\/p>\n<h2>CONFORMING TO <a name=\"CONFORMING TO\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\"><small>RFC 4055<\/small><\/p>\n<h2>SEE ALSO <a name=\"SEE ALSO\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\"><b>EVP_PKEY_CTX_set_rsa_pss_keygen_md<\/b>(3), <b>EVP_PKEY_CTX_set_rsa_pss_keygen_mgf1_md<\/b>(3), <b>EVP_PKEY_CTX_set_rsa_pss_keygen_saltlen<\/b>(3), <b>EVP_PKEY_CTX_new<\/b>(3), <b>EVP_PKEY_CTX_ctrl_str<\/b>(3), <b>EVP_PKEY_derive<\/b>(3)<\/p>\n<h2>COPYRIGHT <a name=\"COPYRIGHT\"><\/a> <\/h2>\n<p style=\"margin-left:11%; margin-top: 1em\">Copyright 2017\u22122018 The OpenSSL Project Authors. All Rights Reserved.<\/p>\n<p style=\"margin-left:11%; margin-top: 1em\">Licensed under the OpenSSL license (the &#8220;License&#8221;). You may not use this file except in compliance with the License. You can obtain a copy in the file <small>LICENSE<\/small> in the source distribution or at <https:\/\/www.openssl.org\/source\/license.html>.<\/p>\n<hr>\n","protected":false},"excerpt":{"rendered":"<p>  RSA\u2212PSS \u2212 EVP_PKEY RSA\u2212PSS algorithm support <\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[971],"tags":[973,972,1011],"class_list":["post-3918","post","type-post","status-publish","format-standard","hentry","category-7-miscelanea","tag-973","tag-man7","tag-rsa-pss"],"gutentor_comment":0,"_links":{"self":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/3918","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/comments?post=3918"}],"version-history":[{"count":0,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/posts\/3918\/revisions"}],"wp:attachment":[{"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/media?parent=3918"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/categories?post=3918"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lode.uno\/linux-man\/wp-json\/wp\/v2\/tags?post=3918"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}