/openssl/ |
H A D | README-PROVIDERS.md | 5 - [The Default Provider](#the-default-provider) 6 - [The Legacy Provider](#the-legacy-provider) 7 - [The FIPS Provider](#the-fips-provider) 8 - [The Base Provider](#the-base-provider) 9 - [The Null Provider](#the-null-provider) 23 [provider(7)]: https://www.openssl.org/docs/manmaster/man7/provider.html 32 get an algorithm from a provider if no other provider has been loaded yet. 49 legacy provider explicitly. 72 you are using the FIPS provider). 120 #include <openssl/provider.h> [all …]
|
H A D | README-FIPS.md | 5 FIPS validated. The module is implemented as an OpenSSL provider. 6 A provider is essentially a dynamically loadable module which implements 31 Installing the FIPS provider 89 Installing the FIPS provider and using it with the latest release 94 Download and build a validated FIPS provider 118 Use the OpenSSL FIPS provider for testing 122 Note that the OpenSSL 3.1.0 FIPS provider has not been validated 132 // OpenSSL 3.0.0 FIPS provider 134 -provider fips -providers 145 Check that the correct FIPS provider is being used [all …]
|
H A D | .gitmodules | 25 [submodule "oqs-provider"] 26 path = oqs-provider 27 url = https://github.com/open-quantum-safe/oqs-provider.git 35 [submodule "pkcs11-provider"] 36 path = pkcs11-provider 37 url = https://github.com/latchset/pkcs11-provider.git
|
/openssl/doc/man3/ |
H A D | OSSL_PROVIDER.pod | 16 - provider routines 75 provider is). 97 provider name with a provider initialization function. 103 or load a provider module with the given name and run its provider 105 to a provider module, in that case the provider name as returned 132 I<cb> for each one, with the current provider in I<provider> and the 161 not the provider itself, parameters managed by the provider are queried via 180 function (see L<provider(7)>), if the provider has one. It returns an 186 function (see L<provider(7)>), if the provider has one. This is considered a 190 provider. The provider context is an opaque handle set by the provider itself [all …]
|
/openssl/doc/man7/ |
H A D | provider.pod | 11 #include <openssl/provider.h> 53 the provider. 59 L<provider-base(7)>. 70 the provider. 118 L<provider-digest(7)>. 126 L<provider-cipher(7)>. 134 L<provider-mac(7)>. 142 L<provider-kdf(7)>. 164 The functions the provider can offer are described in L<provider-kem(7)>. 266 L<provider-base(7)>, [all …]
|
H A D | OSSL_PROVIDER-base.pod | 5 OSSL_PROVIDER-base - OpenSSL base provider 9 The OpenSSL base provider supplies the encoding for OpenSSL's 14 The implementations in this provider specifically have this property 19 =item "provider=base" 26 implementations of this provider and none other. 58 The OpenSSL base provider supports these operations and algorithms: 71 are also available in the default provider. 115 combination with the FIPS provider. 161 combination with the FIPS provider. 174 available in the default provider. [all …]
|
H A D | provider-digest.pod | 5 provider-digest - The digest library E<lt>-E<gt> provider functions 51 This documentation is primarily aimed at provider authors. See L<provider(7)> 62 (see L<provider-base(7)/Provider Functions>). 106 The parameter I<provctx> is the provider context generated during provider 107 initialisation (see L<provider(7)>). 127 provider side digest context in the I<dctx> parameter. 147 No provider side digest context is used. 148 Instead the provider context that was created during provider initialisation is 163 provider side digest context I<dctx> to I<params>. 180 the provider side context if I<dctx> is not NULL and on the provider [all …]
|
H A D | OSSL_PROVIDER-default.pod | 5 OSSL_PROVIDER-default - OpenSSL default provider 9 The OpenSSL default provider supplies the majority of OpenSSL's diverse 12 provider that will be used as fallback: It is loaded automatically the 13 first time that an algorithm is fetched from a provider or a function 20 provider only occurs a maximum of once; if the default provider is 31 =item "provider=default" 41 implementations of this provider and none other. 319 are also available in the base provider. 363 combination with the FIPS provider. 407 combination with the FIPS provider. [all …]
|
H A D | provider-kem.pod | 5 provider-kem - The kem library E<lt>-E<gt> provider functions 50 This documentation is primarily aimed at provider authors. See L<provider(7)> 59 F<libcrypto> and the provider in L<OSSL_DISPATCH(3)> arrays via 62 (see L<provider-base(7)/Provider Functions>). 110 See L<provider-keymgmt(7)> for further details. 118 The parameter I<provctx> is the provider context generated during provider 119 initialisation (see L<provider(7)>). 138 provider-keymgmt(7)>. 166 provider-keymgmt(7)>. 239 L<provider(7)> [all …]
|
H A D | provider-mac.pod | 5 provider-mac - The mac library E<lt>-E<gt> provider functions 44 This documentation is primarily aimed at provider authors. See L<provider(7)> 55 (see L<provider-base(7)/Provider Functions>). 100 The parameter I<provctx> is the provider context generated during provider 101 initialisation (see L<provider(7)>). 141 provider algorithm and stores them in I<params>. 144 provider side mac context I<mctx> to I<params>. 161 provider side algorithm I<provctx>. 241 provider side mac context, or NULL on failure. 254 L<provider(7)>, [all …]
|
H A D | OSSL_PROVIDER-null.pod | 5 OSSL_PROVIDER-null - OpenSSL null provider 9 The OpenSSL null provider supplies no algorithms. 12 provider will not be accidentally accessed. 16 The null provider defines no properties. 20 The OpenSSL null provider supports no operations and algorithms. 24 L<provider(7)>
|
H A D | provider-keyexch.pod | 5 provider-keyexch - The keyexch library E<lt>-E<gt> provider functions 42 This documentation is primarily aimed at provider authors. See L<provider(7)> 51 F<libcrypto> and the provider in L<OSSL_DISPATCH(3)> arrays via 54 (see L<provider-base(7)/Provider Functions>). 89 See L<provider-keymgmt(7)> for further details. 97 The parameter I<provctx> is the provider context generated during provider 98 initialisation (see L<provider(7)>). 116 (OSSL_OP_KEYMGMT) operation (see provider-keymgmt(7)>. 124 provider-keymgmt(7)>. 242 provider side key exchange context, or NULL on failure. [all …]
|
H A D | provider-base.pod | 5 provider-base 130 of the provider initialization function. See L<provider(7)/Provider> 148 provider): 232 provider. Never cast this to OSSL_LIB_CTX in a provider that is not 311 passed into a provider. This may be ignored by a provider. 353 I<handle> is this provider's handle and I<cbdata> is this provider's data 367 the provider being unloaded and this provider's data in I<cbdata>. It should 399 from the core's provider store. 617 L<provider-keyexch(7)>. 624 described in L<provider-kem(7)>. [all …]
|
H A D | ossl-guide-libraries-introduction.pod | 92 available in the OpenSSL default provider. 98 consider algorithm implementations in the default provider. 180 For information on writing a provider see L<provider(7)>. 182 =head2 Default provider 189 of the functionality in the base provider below. 197 =head2 Base provider 211 =head2 FIPS provider 220 provider can also be selected with the property "fips=yes". The FIPS provider 229 =head2 Legacy provider 241 =head2 Null provider [all …]
|
H A D | provider-asym_cipher.pod | 5 provider-asym_cipher - The asym_cipher library E<lt>-E<gt> provider functions 47 This documentation is primarily aimed at provider authors. See L<provider(7)> 57 F<libcrypto> and the provider in L<OSSL_DISPATCH(3)> arrays via 58 L<OSSL_ALGORITHM(3)> arrays that are returned by the provider's 60 (see L<provider-base(7)/Provider Functions>). 104 See L<provider-keymgmt(7)> for further details. 112 The parameter I<provctx> is the provider context generated during provider 113 initialisation (see L<provider(7)>). 130 the provider using the key management (OSSL_OP_KEYMGMT) operation (see L<provider-keymgmt(7)>). 152 L<provider-keymgmt(7)>). [all …]
|
H A D | EVP_ASYM_CIPHER-RSA.pod | 18 The default provider understands these RSA padding modes in string form: 28 This padding mode is no longer supported by the FIPS provider for key 38 The default provider understands these RSA padding modes in integer form: 44 This padding mode is no longer supported by the FIPS provider for key 76 See L<provider-asym_cipher(7)/Asymmetric Cipher Parameters> for more information. 80 The OpenSSL FIPS provider also supports the following parameters: 88 See L<provider-asym_cipher(7)/Asymmetric Cipher Parameters> for more information. 105 L<provider-asym_cipher(7)>, 106 L<provider-keymgmt(7)>,
|
H A D | provider-storemgmt.pod | 5 provider-storemgmt - The OSSL_STORE library E<lt>-E<gt> provider functions 41 The STORE operation is the provider side of the L<ossl_store(7)> API. 46 L<provider-object(7)>). The OpenSSL library is then responsible for 50 include OSSL_FUNC_keymgmt_load() (L<provider-keymgmt(7)>), 55 F<libcrypto> and the provider in L<OSSL_DISPATCH(3)> arrays via 56 L<OSSL_ALGORITHM(3)> arrays that are returned by the provider's 58 (see L<provider-base(7)/Provider Functions>). 106 L<provider-object(7)>), and calls I<object_cb> with it as well as 116 OSSL_FUNC_store_close() frees the provider side context I<ctx>. 120 exporting the object to that foreign provider if the foreign provider [all …]
|
/openssl/doc/internal/man3/ |
H A D | ossl_provider_new.pod | 23 - internal provider routines 110 A provider object is always stored in a set of provider objects 123 ossl_provider_find() finds an existing provider object in the provider 162 provider module given the provider object I<prov>. 170 ossl_provider_set_child() marks this provider as a child of a provider in the 180 provider. If I<deactivate> is nonzero then the parent provider is also 210 then the provider will only be activated if it is a child provider. Otherwise 255 the provider has one. 260 parameters that the provider has for the provider object. 341 provider module. [all …]
|
/openssl/doc/designs/ |
H A D | ossl-provider-load-ex.md | 4 Currently any provider run-time activation requires the presence of the 6 provider will be activated with some default settings, that may or may not 15 also usable for FIPS provider. 24 intended to configure the provider at load time. 27 provider can be initialized from the config file where the values are 28 represented as strings and provider init function has to deal with it. 38 provider <https://github.com/latchset/pkcs11-provider> also provides a set of 42 1. Configure a provider in the config file, activate on demand 43 2. Load/activate a provider run-time with parameters 55 Separate instances of the provider can be loaded in the separate library [all …]
|
/openssl/crypto/ |
H A D | core_algorithm.c | 56 } else if (!data->pre(provider, cur_operation, no_store, data->data, in algorithm_do_map() 77 data->fn(provider, thismap, no_store, data->data); in algorithm_do_map() 84 } else if (!data->post(provider, cur_operation, no_store, data->data, in algorithm_do_map() 102 static int algorithm_do_this(OSSL_PROVIDER *provider, void *cbdata) in algorithm_do_this() argument 120 map = ossl_provider_query_operation(provider, cur_operation, in algorithm_do_this() 123 ossl_provider_unquery_operation(provider, cur_operation, map); in algorithm_do_this() 138 OSSL_PROVIDER *provider, in ossl_algorithm_do_all() argument 142 void (*fn)(OSSL_PROVIDER *provider, in ossl_algorithm_do_all() argument 161 if (provider == NULL) { in ossl_algorithm_do_all() 164 OSSL_LIB_CTX *libctx2 = ossl_provider_libctx(provider); in ossl_algorithm_do_all() [all …]
|
H A D | core_fetch.c | 60 static int ossl_method_construct_precondition(OSSL_PROVIDER *provider, in ossl_method_construct_precondition() argument 74 && !ossl_provider_test_operation_bit(provider, operation_id, result)) in ossl_method_construct_precondition() 87 static int ossl_method_construct_postcondition(OSSL_PROVIDER *provider, in ossl_method_construct_postcondition() argument 100 || ossl_provider_set_operation_bit(provider, operation_id); in ossl_method_construct_postcondition() 103 static void ossl_method_construct_this(OSSL_PROVIDER *provider, in ossl_method_construct_this() argument 110 if ((method = data->mcm->construct(algo, provider, data->mcm_data)) in ossl_method_construct_this() 127 data->mcm->put(no_store ? data->store : NULL, method, provider, algo->algorithm_names, in ossl_method_construct_this() 139 OSSL_PROVIDER *provider = provider_rw != NULL ? *provider_rw : NULL; in ossl_method_construct() local 157 ossl_algorithm_do_all(libctx, operation_id, provider, in ossl_method_construct()
|
/openssl/test/recipes/95-test_external_oqsprovider_data/ |
H A D | oqsprovider.sh | 58 if [ ! -d $SRCTOP/oqs-provider/.local ]; then 64 cd $SRCTOP/oqs-provider \ 69 … cmake -DOPENSSL_ROOT_DIR=$OPENSSL_ROOT_DIR -DCMAKE_INSTALL_PREFIX=$SRCTOP/oqs-provider/.local .. \ 76 liboqs_DIR=$SRCTOP/oqs-provider/.local cmake $SRCTOP/oqs-provider -DOPENSSL_ROOT_DIR="$OPENSSL_ROOT… 81 export OQS_PROVIDER_TESTSCRIPTS=$SRCTOP/oqs-provider/scripts 85 …st/recipes/95-test_external_oqsprovider_data/oqsprovider-pkcs12gen.sh $SRCTOP/oqs-provider/scripts/
|
/openssl/doc/internal/man7/ |
H A D | EVP_PKEY.pod | 43 =item provider-native origin 46 key data (see L<provider-keymgmt(7)>). The internal key in the 71 copy are not reflected back in the provider key. 93 in L</Export cache for provider operations>. 104 =head2 Export cache for provider operations 123 "provider native origin".> 132 (see L<provider-keymgmt(7)>). 138 (ENGINE for legacy origin keys, provider for provider side origin 179 the provider that's to perform the operation, using its 197 reflected back in the provider key. [all …]
|
/openssl/test/ |
H A D | generate_ssl_tests.pl | 27 my $provider; 33 $provider = shift // ''; 138 my $provider = shift; 140 my $fips_mode = $provider eq "fips"; 158 $provider eq "default" || $provider eq "fips"; 168 read_config($input_file, $provider);
|
/openssl/crypto/property/ |
H A D | property.c | 43 const OSSL_PROVIDER *provider; member 51 const OSSL_PROVIDER *provider; member 196 if (res == 0 && a->provider != NULL && b->provider != NULL) in query_cmp() 197 res = b->provider > a->provider ? 1 in query_cmp() 198 : b->provider < a->provider ? -1 in query_cmp() 347 impl->provider = prov; in ossl_method_store_add() 404 if (tmpimpl->provider == impl->provider in ossl_method_store_add() 502 if (impl->provider == data->prov) { in alg_cleanup_by_provider() 856 elem.provider = prov; in ossl_method_store_cache_get() 895 elem.provider = prov; in ossl_method_store_cache_set() [all …]
|