1 /* crypto/rsa/rsa.h */
2 /* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3  * All rights reserved.
4  *
5  * This package is an SSL implementation written
6  * by Eric Young (eay@cryptsoft.com).
7  * The implementation was written so as to conform with Netscapes SSL.
8  *
9  * This library is free for commercial and non-commercial use as long as
10  * the following conditions are aheared to.  The following conditions
11  * apply to all code found in this distribution, be it the RC4, RSA,
12  * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
13  * included with this distribution is covered by the same copyright terms
14  * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15  *
16  * Copyright remains Eric Young's, and as such any Copyright notices in
17  * the code are not to be removed.
18  * If this package is used in a product, Eric Young should be given attribution
19  * as the author of the parts of the library used.
20  * This can be in the form of a textual message at program startup or
21  * in documentation (online or textual) provided with the package.
22  *
23  * Redistribution and use in source and binary forms, with or without
24  * modification, are permitted provided that the following conditions
25  * are met:
26  * 1. Redistributions of source code must retain the copyright
27  *    notice, this list of conditions and the following disclaimer.
28  * 2. Redistributions in binary form must reproduce the above copyright
29  *    notice, this list of conditions and the following disclaimer in the
30  *    documentation and/or other materials provided with the distribution.
31  * 3. All advertising materials mentioning features or use of this software
32  *    must display the following acknowledgement:
33  *    "This product includes cryptographic software written by
34  *     Eric Young (eay@cryptsoft.com)"
35  *    The word 'cryptographic' can be left out if the rouines from the library
36  *    being used are not cryptographic related :-).
37  * 4. If you include any Windows specific code (or a derivative thereof) from
38  *    the apps directory (application code) you must include an acknowledgement:
39  *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40  *
41  * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51  * SUCH DAMAGE.
52  *
53  * The licence and distribution terms for any publically available version or
54  * derivative of this code cannot be changed.  i.e. this code cannot simply be
55  * copied and put under another distribution licence
56  * [including the GNU Public Licence.]
57  */
58 
59 #ifndef HEADER_RSA_H
60 #define HEADER_RSA_H
61 
62 #include <AvailabilityMacros.h>
63 
64 #include <openssl/asn1.h>
65 
66 #ifndef OPENSSL_NO_BIO
67 #include <openssl/bio.h>
68 #endif
69 #include <openssl/crypto.h>
70 #include <openssl/ossl_typ.h>
71 #ifndef OPENSSL_NO_DEPRECATED
72 #include <openssl/bn.h>
73 #endif
74 
75 #ifdef OPENSSL_NO_RSA
76 #error RSA is disabled.
77 #endif
78 
79 /* If this flag is set the RSA method is FIPS compliant and can be used
80  * in FIPS mode. This is set in the validated module method. If an
81  * application sets this flag in its own methods it is its reposibility
82  * to ensure the result is compliant.
83  */
84 
85 #define RSA_FLAG_FIPS_METHOD			0x0400
86 
87 /* If this flag is set the operations normally disabled in FIPS mode are
88  * permitted it is then the applications responsibility to ensure that the
89  * usage is compliant.
90  */
91 
92 #define RSA_FLAG_NON_FIPS_ALLOW			0x0400
93 
94 #ifdef OPENSSL_FIPS
95 #define FIPS_RSA_SIZE_T	int
96 #endif
97 
98 #ifdef  __cplusplus
99 extern "C" {
100 #endif
101 
102 /* Declared already in ossl_typ.h */
103 /* typedef struct rsa_st RSA; */
104 /* typedef struct rsa_meth_st RSA_METHOD; */
105 
106 struct rsa_meth_st
107 	{
108 	const char *name;
109 	int (*rsa_pub_enc)(int flen,const unsigned char *from,
110 			   unsigned char *to,
111 			   RSA *rsa,int padding) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
112 	int (*rsa_pub_dec)(int flen,const unsigned char *from,
113 			   unsigned char *to,
114 			   RSA *rsa,int padding) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
115 	int (*rsa_priv_enc)(int flen,const unsigned char *from,
116 			    unsigned char *to,
117 			    RSA *rsa,int padding) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
118 	int (*rsa_priv_dec)(int flen,const unsigned char *from,
119 			    unsigned char *to,
120 			    RSA *rsa,int padding) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
121 	int (*rsa_mod_exp)(BIGNUM *r0,const BIGNUM *I,RSA *rsa,BN_CTX *ctx) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER; /* Can be null */
122 	int (*bn_mod_exp)(BIGNUM *r, const BIGNUM *a, const BIGNUM *p,
123 			  const BIGNUM *m, BN_CTX *ctx,
124 			  BN_MONT_CTX *m_ctx) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER; /* Can be null */
125 	int (*init)(RSA *rsa) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;		/* called at new */
126 	int (*finish)(RSA *rsa) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;	/* called at free */
127 	int flags;			/* RSA_METHOD_FLAG_* things */
128 	char *app_data;			/* may be needed! */
129 /* New sign and verify functions: some libraries don't allow arbitrary data
130  * to be signed/verified: this allows them to be used. Note: for this to work
131  * the RSA_public_decrypt() and RSA_private_encrypt() should *NOT* be used
132  * RSA_sign(), RSA_verify() should be used instead. Note: for backwards
133  * compatibility this functionality is only enabled if the RSA_FLAG_SIGN_VER
134  * option is set in 'flags'.
135  */
136 	int (*rsa_sign)(int type,
137 		const unsigned char *m, unsigned int m_length,
138 		unsigned char *sigret, unsigned int *siglen, const RSA *rsa) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
139 	int (*rsa_verify)(int dtype,
140 		const unsigned char *m, unsigned int m_length,
141 		unsigned char *sigbuf, unsigned int siglen, const RSA *rsa) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
142 /* If this callback is NULL, the builtin software RSA key-gen will be used. This
143  * is for behavioural compatibility whilst the code gets rewired, but one day
144  * it would be nice to assume there are no such things as "builtin software"
145  * implementations. */
146 	int (*rsa_keygen)(RSA *rsa, int bits, BIGNUM *e, BN_GENCB *cb) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
147 	};
148 
149 struct rsa_st
150 	{
151 	/* The first parameter is used to pickup errors where
152 	 * this is passed instead of aEVP_PKEY, it is set to 0 */
153 	int pad;
154 	long version;
155 	const RSA_METHOD *meth;
156 	/* functional reference if 'meth' is ENGINE-provided */
157 	ENGINE *engine;
158 	BIGNUM *n;
159 	BIGNUM *e;
160 	BIGNUM *d;
161 	BIGNUM *p;
162 	BIGNUM *q;
163 	BIGNUM *dmp1;
164 	BIGNUM *dmq1;
165 	BIGNUM *iqmp;
166 	/* be careful using this if the RSA structure is shared */
167 	CRYPTO_EX_DATA ex_data;
168 	int references;
169 	int flags;
170 
171 	/* Used to cache montgomery values */
172 	BN_MONT_CTX *_method_mod_n;
173 	BN_MONT_CTX *_method_mod_p;
174 	BN_MONT_CTX *_method_mod_q;
175 
176 	/* all BIGNUM values are actually in the following data, if it is not
177 	 * NULL */
178 	char *bignum_data;
179 	BN_BLINDING *blinding;
180 	BN_BLINDING *mt_blinding;
181 	};
182 
183 #ifndef OPENSSL_RSA_MAX_MODULUS_BITS
184 # define OPENSSL_RSA_MAX_MODULUS_BITS	16384
185 #endif
186 
187 #define OPENSSL_RSA_FIPS_MIN_MODULUS_BITS 1024
188 
189 #ifndef OPENSSL_RSA_SMALL_MODULUS_BITS
190 # define OPENSSL_RSA_SMALL_MODULUS_BITS	3072
191 #endif
192 #ifndef OPENSSL_RSA_MAX_PUBEXP_BITS
193 # define OPENSSL_RSA_MAX_PUBEXP_BITS	64 /* exponent limit enforced for "large" modulus only */
194 #endif
195 
196 #define RSA_3	0x3L
197 #define RSA_F4	0x10001L
198 
199 #define RSA_METHOD_FLAG_NO_CHECK	0x0001 /* don't check pub/private match */
200 
201 #define RSA_FLAG_CACHE_PUBLIC		0x0002
202 #define RSA_FLAG_CACHE_PRIVATE		0x0004
203 #define RSA_FLAG_BLINDING		0x0008
204 #define RSA_FLAG_THREAD_SAFE		0x0010
205 /* This flag means the private key operations will be handled by rsa_mod_exp
206  * and that they do not depend on the private key components being present:
207  * for example a key stored in external hardware. Without this flag bn_mod_exp
208  * gets called when private key components are absent.
209  */
210 #define RSA_FLAG_EXT_PKEY		0x0020
211 
212 /* This flag in the RSA_METHOD enables the new rsa_sign, rsa_verify functions.
213  */
214 #define RSA_FLAG_SIGN_VER		0x0040
215 
216 #define RSA_FLAG_NO_BLINDING		0x0080 /* new with 0.9.6j and 0.9.7b; the built-in
217                                                 * RSA implementation now uses blinding by
218                                                 * default (ignoring RSA_FLAG_BLINDING),
219                                                 * but other engines might not need it
220                                                 */
221 #define RSA_FLAG_NO_CONSTTIME		0x0100 /* new with 0.9.8f; the built-in RSA
222 						* implementation now uses constant time
223 						* operations by default in private key operations,
224 						* e.g., constant time modular exponentiation,
225                                                 * modular inverse without leaking branches,
226                                                 * division without leaking branches. This
227                                                 * flag disables these constant time
228                                                 * operations and results in faster RSA
229                                                 * private key operations.
230                                                 */
231 #ifndef OPENSSL_NO_DEPRECATED
232 #define RSA_FLAG_NO_EXP_CONSTTIME RSA_FLAG_NO_CONSTTIME /* deprecated name for the flag*/
233                                                 /* new with 0.9.7h; the built-in RSA
234                                                 * implementation now uses constant time
235                                                 * modular exponentiation for secret exponents
236                                                 * by default. This flag causes the
237                                                 * faster variable sliding window method to
238                                                 * be used for all exponents.
239                                                 */
240 #endif
241 
242 
243 #define RSA_PKCS1_PADDING	1
244 #define RSA_SSLV23_PADDING	2
245 #define RSA_NO_PADDING		3
246 #define RSA_PKCS1_OAEP_PADDING	4
247 #define RSA_X931_PADDING	5
248 
249 #define RSA_PKCS1_PADDING_SIZE	11
250 
251 #define RSA_set_app_data(s,arg)         RSA_set_ex_data(s,0,arg)
252 #define RSA_get_app_data(s)             RSA_get_ex_data(s,0)
253 
254 RSA *	RSA_new(void) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
255 RSA *	RSA_new_method(ENGINE *engine) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
256 int	RSA_size(const RSA *) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
257 
258 /* Deprecated version */
259 #ifndef OPENSSL_NO_DEPRECATED
260 RSA *	RSA_generate_key(int bits, unsigned long e,void
261 		(*callback)(int,int,void *),void *cb_arg) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
262 #endif /* !defined(OPENSSL_NO_DEPRECATED) */
263 
264 /* New version */
265 int	RSA_generate_key_ex(RSA *rsa, int bits, BIGNUM *e, BN_GENCB *cb) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
266 int RSA_X931_derive_ex(RSA *rsa, BIGNUM *p1, BIGNUM *p2, BIGNUM *q1, BIGNUM *q2,
267 			const BIGNUM *Xp1, const BIGNUM *Xp2, const BIGNUM *Xp,
268 			const BIGNUM *Xq1, const BIGNUM *Xq2, const BIGNUM *Xq,
269 			const BIGNUM *e, BN_GENCB *cb) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
270 int RSA_X931_generate_key_ex(RSA *rsa, int bits, const BIGNUM *e, BN_GENCB *cb) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
271 
272 int	RSA_check_key(const RSA *) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
273 	/* next 4 return -1 on error */
274 int	RSA_public_encrypt(int flen, const unsigned char *from,
275 		unsigned char *to, RSA *rsa,int padding) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
276 int	RSA_private_encrypt(int flen, const unsigned char *from,
277 		unsigned char *to, RSA *rsa,int padding) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
278 int	RSA_public_decrypt(int flen, const unsigned char *from,
279 		unsigned char *to, RSA *rsa,int padding) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
280 int	RSA_private_decrypt(int flen, const unsigned char *from,
281 		unsigned char *to, RSA *rsa,int padding) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
282 void	RSA_free (RSA *r) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
283 /* "up" the RSA object's reference count */
284 int	RSA_up_ref(RSA *r) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
285 
286 int	RSA_flags(const RSA *r) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
287 
288 #ifdef OPENSSL_FIPS
289 RSA *FIPS_rsa_new(void) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
290 void FIPS_rsa_free(RSA *r) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
291 #endif
292 
293 void RSA_set_default_method(const RSA_METHOD *meth) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
294 const RSA_METHOD *RSA_get_default_method(void) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
295 const RSA_METHOD *RSA_get_method(const RSA *rsa) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
296 int RSA_set_method(RSA *rsa, const RSA_METHOD *meth) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
297 
298 /* This function needs the memory locking malloc callbacks to be installed */
299 int RSA_memory_lock(RSA *r) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
300 
301 /* these are the actual SSLeay RSA functions */
302 const RSA_METHOD *RSA_PKCS1_SSLeay(void) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
303 
304 const RSA_METHOD *RSA_null_method(void) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
305 
306 DECLARE_ASN1_ENCODE_FUNCTIONS_const(RSA, RSAPublicKey)
307 DECLARE_ASN1_ENCODE_FUNCTIONS_const(RSA, RSAPrivateKey)
308 
309 #ifndef OPENSSL_NO_FP_API
310 int	RSA_print_fp(FILE *fp, const RSA *r,int offset) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
311 #endif
312 
313 #ifndef OPENSSL_NO_BIO
314 int	RSA_print(BIO *bp, const RSA *r,int offset) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
315 #endif
316 
317 #ifndef OPENSSL_NO_RC4
318 int i2d_RSA_NET(const RSA *a, unsigned char **pp,
319 		int (*cb)(char *buf, int len, const char *prompt, int verify),
320 		int sgckey) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
321 RSA *d2i_RSA_NET(RSA **a, const unsigned char **pp, long length,
322 		 int (*cb)(char *buf, int len, const char *prompt, int verify),
323 		 int sgckey) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
324 
325 int i2d_Netscape_RSA(const RSA *a, unsigned char **pp,
326 		     int (*cb)(char *buf, int len, const char *prompt,
327 			       int verify)) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
328 RSA *d2i_Netscape_RSA(RSA **a, const unsigned char **pp, long length,
329 		      int (*cb)(char *buf, int len, const char *prompt,
330 				int verify)) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
331 #endif
332 
333 /* The following 2 functions sign and verify a X509_SIG ASN1 object
334  * inside PKCS#1 padded RSA encryption */
335 int RSA_sign(int type, const unsigned char *m, unsigned int m_length,
336 	unsigned char *sigret, unsigned int *siglen, RSA *rsa) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
337 int RSA_verify(int type, const unsigned char *m, unsigned int m_length,
338 	unsigned char *sigbuf, unsigned int siglen, RSA *rsa) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
339 
340 /* The following 2 function sign and verify a ASN1_OCTET_STRING
341  * object inside PKCS#1 padded RSA encryption */
342 int RSA_sign_ASN1_OCTET_STRING(int type,
343 	const unsigned char *m, unsigned int m_length,
344 	unsigned char *sigret, unsigned int *siglen, RSA *rsa) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
345 int RSA_verify_ASN1_OCTET_STRING(int type,
346 	const unsigned char *m, unsigned int m_length,
347 	unsigned char *sigbuf, unsigned int siglen, RSA *rsa) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
348 
349 int RSA_blinding_on(RSA *rsa, BN_CTX *ctx) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
350 void RSA_blinding_off(RSA *rsa) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
351 BN_BLINDING *RSA_setup_blinding(RSA *rsa, BN_CTX *ctx) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
352 
353 int RSA_padding_add_PKCS1_type_1(unsigned char *to,int tlen,
354 	const unsigned char *f,int fl) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
355 int RSA_padding_check_PKCS1_type_1(unsigned char *to,int tlen,
356 	const unsigned char *f,int fl,int rsa_len) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
357 int RSA_padding_add_PKCS1_type_2(unsigned char *to,int tlen,
358 	const unsigned char *f,int fl) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
359 int RSA_padding_check_PKCS1_type_2(unsigned char *to,int tlen,
360 	const unsigned char *f,int fl,int rsa_len) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
361 int PKCS1_MGF1(unsigned char *mask, long len,
362 	const unsigned char *seed, long seedlen, const EVP_MD *dgst) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
363 int RSA_padding_add_PKCS1_OAEP(unsigned char *to,int tlen,
364 	const unsigned char *f,int fl,
365 	const unsigned char *p,int pl) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
366 int RSA_padding_check_PKCS1_OAEP(unsigned char *to,int tlen,
367 	const unsigned char *f,int fl,int rsa_len,
368 	const unsigned char *p,int pl) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
369 int RSA_padding_add_SSLv23(unsigned char *to,int tlen,
370 	const unsigned char *f,int fl) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
371 int RSA_padding_check_SSLv23(unsigned char *to,int tlen,
372 	const unsigned char *f,int fl,int rsa_len) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
373 int RSA_padding_add_none(unsigned char *to,int tlen,
374 	const unsigned char *f,int fl) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
375 int RSA_padding_check_none(unsigned char *to,int tlen,
376 	const unsigned char *f,int fl,int rsa_len) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
377 int RSA_padding_add_X931(unsigned char *to,int tlen,
378 	const unsigned char *f,int fl) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
379 int RSA_padding_check_X931(unsigned char *to,int tlen,
380 	const unsigned char *f,int fl,int rsa_len) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
381 int RSA_X931_hash_id(int nid) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
382 
383 int RSA_verify_PKCS1_PSS(RSA *rsa, const unsigned char *mHash,
384 			const EVP_MD *Hash, const unsigned char *EM, int sLen) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
385 int RSA_padding_add_PKCS1_PSS(RSA *rsa, unsigned char *EM,
386 			const unsigned char *mHash,
387 			const EVP_MD *Hash, int sLen) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
388 
389 int RSA_get_ex_new_index(long argl, void *argp, CRYPTO_EX_new *new_func,
390 	CRYPTO_EX_dup *dup_func, CRYPTO_EX_free *free_func) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
391 int RSA_set_ex_data(RSA *r,int idx,void *arg) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
392 void *RSA_get_ex_data(const RSA *r, int idx) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
393 
394 RSA *RSAPublicKey_dup(RSA *rsa) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
395 RSA *RSAPrivateKey_dup(RSA *rsa) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
396 
397 /* BEGIN ERROR CODES */
398 /* The following lines are auto generated by the script mkerr.pl. Any changes
399  * made after this point may be overwritten when the script is next run.
400  */
401 void ERR_load_RSA_strings(void) DEPRECATED_IN_MAC_OS_X_VERSION_10_7_AND_LATER;
402 
403 /* Error codes for the RSA functions. */
404 
405 /* Function codes. */
406 #define RSA_F_FIPS_RSA_SIGN				 140
407 #define RSA_F_FIPS_RSA_VERIFY				 141
408 #define RSA_F_MEMORY_LOCK				 100
409 #define RSA_F_RSA_BUILTIN_KEYGEN			 129
410 #define RSA_F_RSA_CHECK_KEY				 123
411 #define RSA_F_RSA_EAY_PRIVATE_DECRYPT			 101
412 #define RSA_F_RSA_EAY_PRIVATE_ENCRYPT			 102
413 #define RSA_F_RSA_EAY_PUBLIC_DECRYPT			 103
414 #define RSA_F_RSA_EAY_PUBLIC_ENCRYPT			 104
415 #define RSA_F_RSA_GENERATE_KEY				 105
416 #define RSA_F_RSA_MEMORY_LOCK				 130
417 #define RSA_F_RSA_NEW_METHOD				 106
418 #define RSA_F_RSA_NULL					 124
419 #define RSA_F_RSA_NULL_MOD_EXP				 131
420 #define RSA_F_RSA_NULL_PRIVATE_DECRYPT			 132
421 #define RSA_F_RSA_NULL_PRIVATE_ENCRYPT			 133
422 #define RSA_F_RSA_NULL_PUBLIC_DECRYPT			 134
423 #define RSA_F_RSA_NULL_PUBLIC_ENCRYPT			 135
424 #define RSA_F_RSA_PADDING_ADD_NONE			 107
425 #define RSA_F_RSA_PADDING_ADD_PKCS1_OAEP		 121
426 #define RSA_F_RSA_PADDING_ADD_PKCS1_PSS			 125
427 #define RSA_F_RSA_PADDING_ADD_PKCS1_TYPE_1		 108
428 #define RSA_F_RSA_PADDING_ADD_PKCS1_TYPE_2		 109
429 #define RSA_F_RSA_PADDING_ADD_SSLV23			 110
430 #define RSA_F_RSA_PADDING_ADD_X931			 127
431 #define RSA_F_RSA_PADDING_CHECK_NONE			 111
432 #define RSA_F_RSA_PADDING_CHECK_PKCS1_OAEP		 122
433 #define RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_1		 112
434 #define RSA_F_RSA_PADDING_CHECK_PKCS1_TYPE_2		 113
435 #define RSA_F_RSA_PADDING_CHECK_SSLV23			 114
436 #define RSA_F_RSA_PADDING_CHECK_X931			 128
437 #define RSA_F_RSA_PRINT					 115
438 #define RSA_F_RSA_PRINT_FP				 116
439 #define RSA_F_RSA_PRIVATE_ENCRYPT			 137
440 #define RSA_F_RSA_PUBLIC_DECRYPT			 138
441 #define RSA_F_RSA_SETUP_BLINDING			 136
442 #define RSA_F_RSA_SET_DEFAULT_METHOD			 139
443 #define RSA_F_RSA_SET_METHOD				 142
444 #define RSA_F_RSA_SIGN					 117
445 #define RSA_F_RSA_SIGN_ASN1_OCTET_STRING		 118
446 #define RSA_F_RSA_VERIFY				 119
447 #define RSA_F_RSA_VERIFY_ASN1_OCTET_STRING		 120
448 #define RSA_F_RSA_VERIFY_PKCS1_PSS			 126
449 
450 /* Reason codes. */
451 #define RSA_R_ALGORITHM_MISMATCH			 100
452 #define RSA_R_BAD_E_VALUE				 101
453 #define RSA_R_BAD_FIXED_HEADER_DECRYPT			 102
454 #define RSA_R_BAD_PAD_BYTE_COUNT			 103
455 #define RSA_R_BAD_SIGNATURE				 104
456 #define RSA_R_BLOCK_TYPE_IS_NOT_01			 106
457 #define RSA_R_BLOCK_TYPE_IS_NOT_02			 107
458 #define RSA_R_DATA_GREATER_THAN_MOD_LEN			 108
459 #define RSA_R_DATA_TOO_LARGE				 109
460 #define RSA_R_DATA_TOO_LARGE_FOR_KEY_SIZE		 110
461 #define RSA_R_DATA_TOO_LARGE_FOR_MODULUS		 132
462 #define RSA_R_DATA_TOO_SMALL				 111
463 #define RSA_R_DATA_TOO_SMALL_FOR_KEY_SIZE		 122
464 #define RSA_R_DIGEST_TOO_BIG_FOR_RSA_KEY		 112
465 #define RSA_R_DMP1_NOT_CONGRUENT_TO_D			 124
466 #define RSA_R_DMQ1_NOT_CONGRUENT_TO_D			 125
467 #define RSA_R_D_E_NOT_CONGRUENT_TO_1			 123
468 #define RSA_R_FIRST_OCTET_INVALID			 133
469 #define RSA_R_INVALID_HEADER				 137
470 #define RSA_R_INVALID_MESSAGE_LENGTH			 131
471 #define RSA_R_INVALID_PADDING				 138
472 #define RSA_R_INVALID_TRAILER				 139
473 #define RSA_R_IQMP_NOT_INVERSE_OF_Q			 126
474 #define RSA_R_KEY_SIZE_TOO_SMALL			 120
475 #define RSA_R_LAST_OCTET_INVALID			 134
476 #define RSA_R_MODULUS_TOO_LARGE				 105
477 #define RSA_R_NON_FIPS_METHOD				 141
478 #define RSA_R_NO_PUBLIC_EXPONENT			 140
479 #define RSA_R_NULL_BEFORE_BLOCK_MISSING			 113
480 #define RSA_R_N_DOES_NOT_EQUAL_P_Q			 127
481 #define RSA_R_OAEP_DECODING_ERROR			 121
482 #define RSA_R_OPERATION_NOT_ALLOWED_IN_FIPS_MODE	 142
483 #define RSA_R_PADDING_CHECK_FAILED			 114
484 #define RSA_R_PKCS_DECODING_ERROR			 159
485 #define RSA_R_P_NOT_PRIME				 128
486 #define RSA_R_Q_NOT_PRIME				 129
487 #define RSA_R_RSA_OPERATIONS_NOT_SUPPORTED		 130
488 #define RSA_R_SLEN_CHECK_FAILED				 136
489 #define RSA_R_SLEN_RECOVERY_FAILED			 135
490 #define RSA_R_SSLV3_ROLLBACK_ATTACK			 115
491 #define RSA_R_THE_ASN1_OBJECT_IDENTIFIER_IS_NOT_KNOWN_FOR_THIS_MD 116
492 #define RSA_R_UNKNOWN_ALGORITHM_TYPE			 117
493 #define RSA_R_UNKNOWN_PADDING_TYPE			 118
494 #define RSA_R_WRONG_SIGNATURE_LENGTH			 119
495 
496 #ifdef  __cplusplus
497 }
498 #endif
499 #endif
500