evp.h revision 296465
1/* crypto/evp/evp.h */
2/* Copyright (C) 1995-1998 Eric Young (eay@cryptsoft.com)
3 * All rights reserved.
4 *
5 * This package is an SSL implementation written
6 * by Eric Young (eay@cryptsoft.com).
7 * The implementation was written so as to conform with Netscapes SSL.
8 *
9 * This library is free for commercial and non-commercial use as long as
10 * the following conditions are aheared to.  The following conditions
11 * apply to all code found in this distribution, be it the RC4, RSA,
12 * lhash, DES, etc., code; not just the SSL code.  The SSL documentation
13 * included with this distribution is covered by the same copyright terms
14 * except that the holder is Tim Hudson (tjh@cryptsoft.com).
15 *
16 * Copyright remains Eric Young's, and as such any Copyright notices in
17 * the code are not to be removed.
18 * If this package is used in a product, Eric Young should be given attribution
19 * as the author of the parts of the library used.
20 * This can be in the form of a textual message at program startup or
21 * in documentation (online or textual) provided with the package.
22 *
23 * Redistribution and use in source and binary forms, with or without
24 * modification, are permitted provided that the following conditions
25 * are met:
26 * 1. Redistributions of source code must retain the copyright
27 *    notice, this list of conditions and the following disclaimer.
28 * 2. Redistributions in binary form must reproduce the above copyright
29 *    notice, this list of conditions and the following disclaimer in the
30 *    documentation and/or other materials provided with the distribution.
31 * 3. All advertising materials mentioning features or use of this software
32 *    must display the following acknowledgement:
33 *    "This product includes cryptographic software written by
34 *     Eric Young (eay@cryptsoft.com)"
35 *    The word 'cryptographic' can be left out if the rouines from the library
36 *    being used are not cryptographic related :-).
37 * 4. If you include any Windows specific code (or a derivative thereof) from
38 *    the apps directory (application code) you must include an acknowledgement:
39 *    "This product includes software written by Tim Hudson (tjh@cryptsoft.com)"
40 *
41 * THIS SOFTWARE IS PROVIDED BY ERIC YOUNG ``AS IS'' AND
42 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
43 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
44 * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
45 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
46 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
47 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
48 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
49 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
50 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
51 * SUCH DAMAGE.
52 *
53 * The licence and distribution terms for any publically available version or
54 * derivative of this code cannot be changed.  i.e. this code cannot simply be
55 * copied and put under another distribution licence
56 * [including the GNU Public Licence.]
57 */
58
59#ifndef HEADER_ENVELOPE_H
60# define HEADER_ENVELOPE_H
61
62# ifdef OPENSSL_ALGORITHM_DEFINES
63#  include <openssl/opensslconf.h>
64# else
65#  define OPENSSL_ALGORITHM_DEFINES
66#  include <openssl/opensslconf.h>
67#  undef OPENSSL_ALGORITHM_DEFINES
68# endif
69
70# include <openssl/ossl_typ.h>
71
72# include <openssl/symhacks.h>
73
74# ifndef OPENSSL_NO_BIO
75#  include <openssl/bio.h>
76# endif
77
78# ifdef OPENSSL_FIPS
79#  include <openssl/fips.h>
80# endif
81
82/*-
83#define EVP_RC2_KEY_SIZE                16
84#define EVP_RC4_KEY_SIZE                16
85#define EVP_BLOWFISH_KEY_SIZE           16
86#define EVP_CAST5_KEY_SIZE              16
87#define EVP_RC5_32_12_16_KEY_SIZE       16
88*/
89# define EVP_MAX_MD_SIZE                 64/* longest known is SHA512 */
90# define EVP_MAX_KEY_LENGTH              32
91# define EVP_MAX_IV_LENGTH               16
92# define EVP_MAX_BLOCK_LENGTH            32
93
94# define PKCS5_SALT_LEN                  8
95/* Default PKCS#5 iteration count */
96# define PKCS5_DEFAULT_ITER              2048
97
98# include <openssl/objects.h>
99
100# define EVP_PK_RSA      0x0001
101# define EVP_PK_DSA      0x0002
102# define EVP_PK_DH       0x0004
103# define EVP_PK_EC       0x0008
104# define EVP_PKT_SIGN    0x0010
105# define EVP_PKT_ENC     0x0020
106# define EVP_PKT_EXCH    0x0040
107# define EVP_PKS_RSA     0x0100
108# define EVP_PKS_DSA     0x0200
109# define EVP_PKS_EC      0x0400
110# define EVP_PKT_EXP     0x1000 /* <= 512 bit key */
111
112# define EVP_PKEY_NONE   NID_undef
113# define EVP_PKEY_RSA    NID_rsaEncryption
114# define EVP_PKEY_RSA2   NID_rsa
115# define EVP_PKEY_DSA    NID_dsa
116# define EVP_PKEY_DSA1   NID_dsa_2
117# define EVP_PKEY_DSA2   NID_dsaWithSHA
118# define EVP_PKEY_DSA3   NID_dsaWithSHA1
119# define EVP_PKEY_DSA4   NID_dsaWithSHA1_2
120# define EVP_PKEY_DH     NID_dhKeyAgreement
121# define EVP_PKEY_EC     NID_X9_62_id_ecPublicKey
122
123#ifdef  __cplusplus
124extern "C" {
125#endif
126
127/*
128 * Type needs to be a bit field Sub-type needs to be for variations on the
129 * method, as in, can it do arbitrary encryption....
130 */
131struct evp_pkey_st {
132    int type;
133    int save_type;
134    int references;
135    union {
136        char *ptr;
137# ifndef OPENSSL_NO_RSA
138        struct rsa_st *rsa;     /* RSA */
139# endif
140# ifndef OPENSSL_NO_DSA
141        struct dsa_st *dsa;     /* DSA */
142# endif
143# ifndef OPENSSL_NO_DH
144        struct dh_st *dh;       /* DH */
145# endif
146# ifndef OPENSSL_NO_EC
147        struct ec_key_st *ec;   /* ECC */
148# endif
149    } pkey;
150    int save_parameters;
151    STACK_OF(X509_ATTRIBUTE) *attributes; /* [ 0 ] */
152} /* EVP_PKEY */ ;
153
154# define EVP_PKEY_MO_SIGN        0x0001
155# define EVP_PKEY_MO_VERIFY      0x0002
156# define EVP_PKEY_MO_ENCRYPT     0x0004
157# define EVP_PKEY_MO_DECRYPT     0x0008
158
159# if 0
160/*
161 * This structure is required to tie the message digest and signing together.
162 * The lookup can be done by md/pkey_method, oid, oid/pkey_method, or oid, md
163 * and pkey. This is required because for various smart-card perform the
164 * digest and signing/verification on-board.  To handle this case, the
165 * specific EVP_MD and EVP_PKEY_METHODs need to be closely associated. When a
166 * PKEY is created, it will have a EVP_PKEY_METHOD associated with it. This
167 * can either be software or a token to provide the required low level
168 * routines.
169 */
170typedef struct evp_pkey_md_st {
171    int oid;
172    EVP_MD *md;
173    EVP_PKEY_METHOD *pkey;
174} EVP_PKEY_MD;
175
176#  define EVP_rsa_md2() \
177                EVP_PKEY_MD_add(NID_md2WithRSAEncryption,\
178                        EVP_rsa_pkcs1(),EVP_md2())
179#  define EVP_rsa_md5() \
180                EVP_PKEY_MD_add(NID_md5WithRSAEncryption,\
181                        EVP_rsa_pkcs1(),EVP_md5())
182#  define EVP_rsa_sha0() \
183                EVP_PKEY_MD_add(NID_shaWithRSAEncryption,\
184                        EVP_rsa_pkcs1(),EVP_sha())
185#  define EVP_rsa_sha1() \
186                EVP_PKEY_MD_add(NID_sha1WithRSAEncryption,\
187                        EVP_rsa_pkcs1(),EVP_sha1())
188#  define EVP_rsa_ripemd160() \
189                EVP_PKEY_MD_add(NID_ripemd160WithRSA,\
190                        EVP_rsa_pkcs1(),EVP_ripemd160())
191#  define EVP_rsa_mdc2() \
192                EVP_PKEY_MD_add(NID_mdc2WithRSA,\
193                        EVP_rsa_octet_string(),EVP_mdc2())
194#  define EVP_dsa_sha() \
195                EVP_PKEY_MD_add(NID_dsaWithSHA,\
196                        EVP_dsa(),EVP_sha())
197#  define EVP_dsa_sha1() \
198                EVP_PKEY_MD_add(NID_dsaWithSHA1,\
199                        EVP_dsa(),EVP_sha1())
200
201typedef struct evp_pkey_method_st {
202    char *name;
203    int flags;
204    int type;                   /* RSA, DSA, an SSLeay specific constant */
205    int oid;                    /* For the pub-key type */
206    int encrypt_oid;            /* pub/priv key encryption */
207    int (*sign) ();
208    int (*verify) ();
209    struct {
210        int (*set) ();          /* get and/or set the underlying type */
211        int (*get) ();
212        int (*encrypt) ();
213        int (*decrypt) ();
214        int (*i2d) ();
215        int (*d2i) ();
216        int (*dup) ();
217    } pub, priv;
218    int (*set_asn1_parameters) ();
219    int (*get_asn1_parameters) ();
220} EVP_PKEY_METHOD;
221# endif
222
223# ifndef EVP_MD
224struct env_md_st {
225    int type;
226    int pkey_type;
227    int md_size;
228    unsigned long flags;
229    int (*init) (EVP_MD_CTX *ctx);
230    int (*update) (EVP_MD_CTX *ctx, const void *data, size_t count);
231    int (*final) (EVP_MD_CTX *ctx, unsigned char *md);
232    int (*copy) (EVP_MD_CTX *to, const EVP_MD_CTX *from);
233    int (*cleanup) (EVP_MD_CTX *ctx);
234    /* FIXME: prototype these some day */
235    int (*sign) (int type, const unsigned char *m, unsigned int m_length,
236                 unsigned char *sigret, unsigned int *siglen, void *key);
237    int (*verify) (int type, const unsigned char *m, unsigned int m_length,
238                   const unsigned char *sigbuf, unsigned int siglen,
239                   void *key);
240    int required_pkey_type[5];  /* EVP_PKEY_xxx */
241    int block_size;
242    int ctx_size;               /* how big does the ctx->md_data need to be */
243} /* EVP_MD */ ;
244
245typedef int evp_sign_method(int type, const unsigned char *m,
246                            unsigned int m_length, unsigned char *sigret,
247                            unsigned int *siglen, void *key);
248typedef int evp_verify_method(int type, const unsigned char *m,
249                              unsigned int m_length,
250                              const unsigned char *sigbuf,
251                              unsigned int siglen, void *key);
252
253typedef struct {
254    EVP_MD_CTX *mctx;
255    void *key;
256} EVP_MD_SVCTX;
257
258/* digest can only handle a single block */
259#  define EVP_MD_FLAG_ONESHOT     0x0001
260
261/* Note if suitable for use in FIPS mode */
262#  define EVP_MD_FLAG_FIPS        0x0400
263
264#  define EVP_MD_FLAG_SVCTX       0x0800
265                                       /* pass EVP_MD_SVCTX to sign/verify */
266
267#  define EVP_PKEY_NULL_method    NULL,NULL,{0,0,0,0}
268
269#  ifndef OPENSSL_NO_DSA
270#   define EVP_PKEY_DSA_method     (evp_sign_method *)DSA_sign, \
271                                (evp_verify_method *)DSA_verify, \
272                                {EVP_PKEY_DSA,EVP_PKEY_DSA2,EVP_PKEY_DSA3, \
273                                        EVP_PKEY_DSA4,0}
274#  else
275#   define EVP_PKEY_DSA_method     EVP_PKEY_NULL_method
276#  endif
277
278#  ifndef OPENSSL_NO_ECDSA
279#   define EVP_PKEY_ECDSA_method   (evp_sign_method *)ECDSA_sign, \
280                                (evp_verify_method *)ECDSA_verify, \
281                                 {EVP_PKEY_EC,0,0,0}
282#  else
283#   define EVP_PKEY_ECDSA_method   EVP_PKEY_NULL_method
284#  endif
285
286#  ifndef OPENSSL_NO_RSA
287#   define EVP_PKEY_RSA_method     (evp_sign_method *)RSA_sign, \
288                                (evp_verify_method *)RSA_verify, \
289                                {EVP_PKEY_RSA,EVP_PKEY_RSA2,0,0}
290#   define EVP_PKEY_RSA_ASN1_OCTET_STRING_method \
291                                (evp_sign_method *)RSA_sign_ASN1_OCTET_STRING, \
292                                (evp_verify_method *)RSA_verify_ASN1_OCTET_STRING, \
293                                {EVP_PKEY_RSA,EVP_PKEY_RSA2,0,0}
294#  else
295#   define EVP_PKEY_RSA_method     EVP_PKEY_NULL_method
296#   define EVP_PKEY_RSA_ASN1_OCTET_STRING_method EVP_PKEY_NULL_method
297#  endif
298
299# endif                         /* !EVP_MD */
300
301struct env_md_ctx_st {
302    const EVP_MD *digest;
303    ENGINE *engine;             /* functional reference if 'digest' is
304                                 * ENGINE-provided */
305    unsigned long flags;
306    void *md_data;
307} /* EVP_MD_CTX */ ;
308
309/* values for EVP_MD_CTX flags */
310
311# define EVP_MD_CTX_FLAG_ONESHOT         0x0001/* digest update will be
312                                                * called once only */
313# define EVP_MD_CTX_FLAG_CLEANED         0x0002/* context has already been
314                                                * cleaned */
315# define EVP_MD_CTX_FLAG_REUSE           0x0004/* Don't free up ctx->md_data
316                                                * in EVP_MD_CTX_cleanup */
317# define EVP_MD_CTX_FLAG_NON_FIPS_ALLOW  0x0008/* Allow use of non FIPS
318                                                * digest in FIPS mode */
319
320# define EVP_MD_CTX_FLAG_PAD_MASK        0xF0/* RSA mode to use */
321# define EVP_MD_CTX_FLAG_PAD_PKCS1       0x00/* PKCS#1 v1.5 mode */
322# define EVP_MD_CTX_FLAG_PAD_X931        0x10/* X9.31 mode */
323# define EVP_MD_CTX_FLAG_PAD_PSS         0x20/* PSS mode */
324# define M_EVP_MD_CTX_FLAG_PSS_SALT(ctx) \
325                ((ctx->flags>>16) &0xFFFF) /* seed length */
326# define EVP_MD_CTX_FLAG_PSS_MDLEN       0xFFFF/* salt len same as digest */
327# define EVP_MD_CTX_FLAG_PSS_MREC        0xFFFE/* salt max or auto recovered */
328
329struct evp_cipher_st {
330    int nid;
331    int block_size;
332    /* Default value for variable length ciphers */
333    int key_len;
334    int iv_len;
335    /* Various flags */
336    unsigned long flags;
337    /* init key */
338    int (*init) (EVP_CIPHER_CTX *ctx, const unsigned char *key,
339                 const unsigned char *iv, int enc);
340    /* encrypt/decrypt data */
341    int (*do_cipher) (EVP_CIPHER_CTX *ctx, unsigned char *out,
342                      const unsigned char *in, unsigned int inl);
343    /* cleanup ctx */
344    int (*cleanup) (EVP_CIPHER_CTX *);
345    /* how big ctx->cipher_data needs to be */
346    int ctx_size;
347    /* Populate a ASN1_TYPE with parameters */
348    int (*set_asn1_parameters) (EVP_CIPHER_CTX *, ASN1_TYPE *);
349    /* Get parameters from a ASN1_TYPE */
350    int (*get_asn1_parameters) (EVP_CIPHER_CTX *, ASN1_TYPE *);
351    /* Miscellaneous operations */
352    int (*ctrl) (EVP_CIPHER_CTX *, int type, int arg, void *ptr);
353    /* Application data */
354    void *app_data;
355} /* EVP_CIPHER */ ;
356
357/* Values for cipher flags */
358
359/* Modes for ciphers */
360
361# define         EVP_CIPH_STREAM_CIPHER          0x0
362# define         EVP_CIPH_ECB_MODE               0x1
363# define         EVP_CIPH_CBC_MODE               0x2
364# define         EVP_CIPH_CFB_MODE               0x3
365# define         EVP_CIPH_OFB_MODE               0x4
366# define         EVP_CIPH_MODE                   0x7
367/* Set if variable length cipher */
368# define         EVP_CIPH_VARIABLE_LENGTH        0x8
369/* Set if the iv handling should be done by the cipher itself */
370# define         EVP_CIPH_CUSTOM_IV              0x10
371/* Set if the cipher's init() function should be called if key is NULL */
372# define         EVP_CIPH_ALWAYS_CALL_INIT       0x20
373/* Call ctrl() to init cipher parameters */
374# define         EVP_CIPH_CTRL_INIT              0x40
375/* Don't use standard key length function */
376# define         EVP_CIPH_CUSTOM_KEY_LENGTH      0x80
377/* Don't use standard block padding */
378# define         EVP_CIPH_NO_PADDING             0x100
379/* cipher handles random key generation */
380# define         EVP_CIPH_RAND_KEY               0x200
381/* Note if suitable for use in FIPS mode */
382# define         EVP_CIPH_FLAG_FIPS              0x400
383/* Allow non FIPS cipher in FIPS mode */
384# define         EVP_CIPH_FLAG_NON_FIPS_ALLOW    0x800
385/* Allow use default ASN1 get/set iv */
386# define         EVP_CIPH_FLAG_DEFAULT_ASN1      0x1000
387/* Buffer length in bits not bytes: CFB1 mode only */
388# define         EVP_CIPH_FLAG_LENGTH_BITS       0x2000
389
390/* ctrl() values */
391
392# define         EVP_CTRL_INIT                   0x0
393# define         EVP_CTRL_SET_KEY_LENGTH         0x1
394# define         EVP_CTRL_GET_RC2_KEY_BITS       0x2
395# define         EVP_CTRL_SET_RC2_KEY_BITS       0x3
396# define         EVP_CTRL_GET_RC5_ROUNDS         0x4
397# define         EVP_CTRL_SET_RC5_ROUNDS         0x5
398# define         EVP_CTRL_RAND_KEY               0x6
399
400typedef struct evp_cipher_info_st {
401    const EVP_CIPHER *cipher;
402    unsigned char iv[EVP_MAX_IV_LENGTH];
403} EVP_CIPHER_INFO;
404
405struct evp_cipher_ctx_st {
406    const EVP_CIPHER *cipher;
407    ENGINE *engine;             /* functional reference if 'cipher' is
408                                 * ENGINE-provided */
409    int encrypt;                /* encrypt or decrypt */
410    int buf_len;                /* number we have left */
411    unsigned char oiv[EVP_MAX_IV_LENGTH]; /* original iv */
412    unsigned char iv[EVP_MAX_IV_LENGTH]; /* working iv */
413    unsigned char buf[EVP_MAX_BLOCK_LENGTH]; /* saved partial block */
414    int num;                    /* used by cfb/ofb mode */
415    void *app_data;             /* application stuff */
416    int key_len;                /* May change for variable length cipher */
417    unsigned long flags;        /* Various flags */
418    void *cipher_data;          /* per EVP data */
419    int final_used;
420    int block_mask;
421    unsigned char final[EVP_MAX_BLOCK_LENGTH]; /* possible final block */
422} /* EVP_CIPHER_CTX */ ;
423
424typedef struct evp_Encode_Ctx_st {
425    /* number saved in a partial encode/decode */
426    int num;
427    /*
428     * The length is either the output line length (in input bytes) or the
429     * shortest input line length that is ok.  Once decoding begins, the
430     * length is adjusted up each time a longer line is decoded
431     */
432    int length;
433    /* data to encode */
434    unsigned char enc_data[80];
435    /* number read on current line */
436    int line_num;
437    int expect_nl;
438} EVP_ENCODE_CTX;
439
440/* Password based encryption function */
441typedef int (EVP_PBE_KEYGEN) (EVP_CIPHER_CTX *ctx, const char *pass,
442                              int passlen, ASN1_TYPE *param,
443                              const EVP_CIPHER *cipher, const EVP_MD *md,
444                              int en_de);
445
446# ifndef OPENSSL_NO_RSA
447#  define EVP_PKEY_assign_RSA(pkey,rsa) EVP_PKEY_assign((pkey),EVP_PKEY_RSA,\
448                                        (char *)(rsa))
449# endif
450
451# ifndef OPENSSL_NO_DSA
452#  define EVP_PKEY_assign_DSA(pkey,dsa) EVP_PKEY_assign((pkey),EVP_PKEY_DSA,\
453                                        (char *)(dsa))
454# endif
455
456# ifndef OPENSSL_NO_DH
457#  define EVP_PKEY_assign_DH(pkey,dh) EVP_PKEY_assign((pkey),EVP_PKEY_DH,\
458                                        (char *)(dh))
459# endif
460
461# ifndef OPENSSL_NO_EC
462#  define EVP_PKEY_assign_EC_KEY(pkey,eckey) EVP_PKEY_assign((pkey),EVP_PKEY_EC,\
463                                        (char *)(eckey))
464# endif
465
466/* Add some extra combinations */
467# define EVP_get_digestbynid(a) EVP_get_digestbyname(OBJ_nid2sn(a))
468# define EVP_get_digestbyobj(a) EVP_get_digestbynid(OBJ_obj2nid(a))
469# define EVP_get_cipherbynid(a) EVP_get_cipherbyname(OBJ_nid2sn(a))
470# define EVP_get_cipherbyobj(a) EVP_get_cipherbynid(OBJ_obj2nid(a))
471
472/* Macros to reduce FIPS dependencies: do NOT use in applications */
473# define M_EVP_MD_size(e)                ((e)->md_size)
474# define M_EVP_MD_block_size(e)          ((e)->block_size)
475# define M_EVP_MD_CTX_set_flags(ctx,flgs) ((ctx)->flags|=(flgs))
476# define M_EVP_MD_CTX_clear_flags(ctx,flgs) ((ctx)->flags&=~(flgs))
477# define M_EVP_MD_CTX_test_flags(ctx,flgs) ((ctx)->flags&(flgs))
478# define M_EVP_MD_type(e)                        ((e)->type)
479# define M_EVP_MD_CTX_type(e)            M_EVP_MD_type(M_EVP_MD_CTX_md(e))
480# define M_EVP_MD_CTX_md(e)                      ((e)->digest)
481
482# define M_EVP_CIPHER_CTX_set_flags(ctx,flgs) ((ctx)->flags|=(flgs))
483
484int EVP_MD_type(const EVP_MD *md);
485# define EVP_MD_nid(e)                   EVP_MD_type(e)
486# define EVP_MD_name(e)                  OBJ_nid2sn(EVP_MD_nid(e))
487int EVP_MD_pkey_type(const EVP_MD *md);
488int EVP_MD_size(const EVP_MD *md);
489int EVP_MD_block_size(const EVP_MD *md);
490
491const EVP_MD *EVP_MD_CTX_md(const EVP_MD_CTX *ctx);
492# define EVP_MD_CTX_size(e)              EVP_MD_size(EVP_MD_CTX_md(e))
493# define EVP_MD_CTX_block_size(e)        EVP_MD_block_size(EVP_MD_CTX_md(e))
494# define EVP_MD_CTX_type(e)              EVP_MD_type(EVP_MD_CTX_md(e))
495
496int EVP_CIPHER_nid(const EVP_CIPHER *cipher);
497# define EVP_CIPHER_name(e)              OBJ_nid2sn(EVP_CIPHER_nid(e))
498int EVP_CIPHER_block_size(const EVP_CIPHER *cipher);
499int EVP_CIPHER_key_length(const EVP_CIPHER *cipher);
500int EVP_CIPHER_iv_length(const EVP_CIPHER *cipher);
501unsigned long EVP_CIPHER_flags(const EVP_CIPHER *cipher);
502# define EVP_CIPHER_mode(e)              (EVP_CIPHER_flags(e) & EVP_CIPH_MODE)
503
504const EVP_CIPHER *EVP_CIPHER_CTX_cipher(const EVP_CIPHER_CTX *ctx);
505int EVP_CIPHER_CTX_nid(const EVP_CIPHER_CTX *ctx);
506int EVP_CIPHER_CTX_block_size(const EVP_CIPHER_CTX *ctx);
507int EVP_CIPHER_CTX_key_length(const EVP_CIPHER_CTX *ctx);
508int EVP_CIPHER_CTX_iv_length(const EVP_CIPHER_CTX *ctx);
509void *EVP_CIPHER_CTX_get_app_data(const EVP_CIPHER_CTX *ctx);
510void EVP_CIPHER_CTX_set_app_data(EVP_CIPHER_CTX *ctx, void *data);
511# define EVP_CIPHER_CTX_type(c)         EVP_CIPHER_type(EVP_CIPHER_CTX_cipher(c))
512unsigned long EVP_CIPHER_CTX_flags(const EVP_CIPHER_CTX *ctx);
513# define EVP_CIPHER_CTX_mode(e)          (EVP_CIPHER_CTX_flags(e) & EVP_CIPH_MODE)
514
515# define EVP_ENCODE_LENGTH(l)    (((l+2)/3*4)+(l/48+1)*2+80)
516# define EVP_DECODE_LENGTH(l)    ((l+3)/4*3+80)
517
518# define EVP_SignInit_ex(a,b,c)          EVP_DigestInit_ex(a,b,c)
519# define EVP_SignInit(a,b)               EVP_DigestInit(a,b)
520# define EVP_SignUpdate(a,b,c)           EVP_DigestUpdate(a,b,c)
521# define EVP_VerifyInit_ex(a,b,c)        EVP_DigestInit_ex(a,b,c)
522# define EVP_VerifyInit(a,b)             EVP_DigestInit(a,b)
523# define EVP_VerifyUpdate(a,b,c)         EVP_DigestUpdate(a,b,c)
524# define EVP_OpenUpdate(a,b,c,d,e)       EVP_DecryptUpdate(a,b,c,d,e)
525# define EVP_SealUpdate(a,b,c,d,e)       EVP_EncryptUpdate(a,b,c,d,e)
526
527# ifdef CONST_STRICT
528void BIO_set_md(BIO *, const EVP_MD *md);
529# else
530#  define BIO_set_md(b,md)               BIO_ctrl(b,BIO_C_SET_MD,0,(char *)md)
531# endif
532# define BIO_get_md(b,mdp)               BIO_ctrl(b,BIO_C_GET_MD,0,(char *)mdp)
533# define BIO_get_md_ctx(b,mdcp)     BIO_ctrl(b,BIO_C_GET_MD_CTX,0,(char *)mdcp)
534# define BIO_set_md_ctx(b,mdcp)     BIO_ctrl(b,BIO_C_SET_MD_CTX,0,(char *)mdcp)
535# define BIO_get_cipher_status(b)        BIO_ctrl(b,BIO_C_GET_CIPHER_STATUS,0,NULL)
536# define BIO_get_cipher_ctx(b,c_pp)      BIO_ctrl(b,BIO_C_GET_CIPHER_CTX,0,(char *)c_pp)
537
538int EVP_Cipher(EVP_CIPHER_CTX *c,
539               unsigned char *out, const unsigned char *in, unsigned int inl);
540
541# define EVP_add_cipher_alias(n,alias) \
542        OBJ_NAME_add((alias),OBJ_NAME_TYPE_CIPHER_METH|OBJ_NAME_ALIAS,(n))
543# define EVP_add_digest_alias(n,alias) \
544        OBJ_NAME_add((alias),OBJ_NAME_TYPE_MD_METH|OBJ_NAME_ALIAS,(n))
545# define EVP_delete_cipher_alias(alias) \
546        OBJ_NAME_remove(alias,OBJ_NAME_TYPE_CIPHER_METH|OBJ_NAME_ALIAS);
547# define EVP_delete_digest_alias(alias) \
548        OBJ_NAME_remove(alias,OBJ_NAME_TYPE_MD_METH|OBJ_NAME_ALIAS);
549
550void EVP_MD_CTX_init(EVP_MD_CTX *ctx);
551int EVP_MD_CTX_cleanup(EVP_MD_CTX *ctx);
552EVP_MD_CTX *EVP_MD_CTX_create(void);
553void EVP_MD_CTX_destroy(EVP_MD_CTX *ctx);
554int EVP_MD_CTX_copy_ex(EVP_MD_CTX *out, const EVP_MD_CTX *in);
555void EVP_MD_CTX_set_flags(EVP_MD_CTX *ctx, int flags);
556void EVP_MD_CTX_clear_flags(EVP_MD_CTX *ctx, int flags);
557int EVP_MD_CTX_test_flags(const EVP_MD_CTX *ctx, int flags);
558int EVP_DigestInit_ex(EVP_MD_CTX *ctx, const EVP_MD *type, ENGINE *impl);
559int EVP_DigestUpdate(EVP_MD_CTX *ctx, const void *d, size_t cnt);
560int EVP_DigestFinal_ex(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *s);
561int EVP_Digest(const void *data, size_t count,
562               unsigned char *md, unsigned int *size, const EVP_MD *type,
563               ENGINE *impl);
564
565int EVP_MD_CTX_copy(EVP_MD_CTX *out, const EVP_MD_CTX *in);
566int EVP_DigestInit(EVP_MD_CTX *ctx, const EVP_MD *type);
567int EVP_DigestFinal(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *s);
568
569int EVP_read_pw_string(char *buf, int length, const char *prompt, int verify);
570void EVP_set_pw_prompt(const char *prompt);
571char *EVP_get_pw_prompt(void);
572
573int EVP_BytesToKey(const EVP_CIPHER *type, const EVP_MD *md,
574                   const unsigned char *salt, const unsigned char *data,
575                   int datal, int count, unsigned char *key,
576                   unsigned char *iv);
577
578void EVP_CIPHER_CTX_set_flags(EVP_CIPHER_CTX *ctx, int flags);
579void EVP_CIPHER_CTX_clear_flags(EVP_CIPHER_CTX *ctx, int flags);
580int EVP_CIPHER_CTX_test_flags(const EVP_CIPHER_CTX *ctx, int flags);
581
582int EVP_EncryptInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
583                    const unsigned char *key, const unsigned char *iv);
584int EVP_EncryptInit_ex(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
585                       ENGINE *impl, const unsigned char *key,
586                       const unsigned char *iv);
587int EVP_EncryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
588                      const unsigned char *in, int inl);
589int EVP_EncryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
590int EVP_EncryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
591
592int EVP_DecryptInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
593                    const unsigned char *key, const unsigned char *iv);
594int EVP_DecryptInit_ex(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
595                       ENGINE *impl, const unsigned char *key,
596                       const unsigned char *iv);
597int EVP_DecryptUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
598                      const unsigned char *in, int inl);
599int EVP_DecryptFinal(EVP_CIPHER_CTX *ctx, unsigned char *outm, int *outl);
600int EVP_DecryptFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *outm, int *outl);
601
602int EVP_CipherInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
603                   const unsigned char *key, const unsigned char *iv,
604                   int enc);
605int EVP_CipherInit_ex(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *cipher,
606                      ENGINE *impl, const unsigned char *key,
607                      const unsigned char *iv, int enc);
608int EVP_CipherUpdate(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl,
609                     const unsigned char *in, int inl);
610int EVP_CipherFinal(EVP_CIPHER_CTX *ctx, unsigned char *outm, int *outl);
611int EVP_CipherFinal_ex(EVP_CIPHER_CTX *ctx, unsigned char *outm, int *outl);
612
613int EVP_SignFinal(EVP_MD_CTX *ctx, unsigned char *md, unsigned int *s,
614                  EVP_PKEY *pkey);
615
616int EVP_VerifyFinal(EVP_MD_CTX *ctx, const unsigned char *sigbuf,
617                    unsigned int siglen, EVP_PKEY *pkey);
618
619int EVP_OpenInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
620                 const unsigned char *ek, int ekl, const unsigned char *iv,
621                 EVP_PKEY *priv);
622int EVP_OpenFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
623
624int EVP_SealInit(EVP_CIPHER_CTX *ctx, const EVP_CIPHER *type,
625                 unsigned char **ek, int *ekl, unsigned char *iv,
626                 EVP_PKEY **pubk, int npubk);
627int EVP_SealFinal(EVP_CIPHER_CTX *ctx, unsigned char *out, int *outl);
628
629void EVP_EncodeInit(EVP_ENCODE_CTX *ctx);
630void EVP_EncodeUpdate(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl,
631                      const unsigned char *in, int inl);
632void EVP_EncodeFinal(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl);
633int EVP_EncodeBlock(unsigned char *t, const unsigned char *f, int n);
634
635void EVP_DecodeInit(EVP_ENCODE_CTX *ctx);
636int EVP_DecodeUpdate(EVP_ENCODE_CTX *ctx, unsigned char *out, int *outl,
637                     const unsigned char *in, int inl);
638int EVP_DecodeFinal(EVP_ENCODE_CTX *ctx, unsigned
639                    char *out, int *outl);
640int EVP_DecodeBlock(unsigned char *t, const unsigned char *f, int n);
641
642void EVP_CIPHER_CTX_init(EVP_CIPHER_CTX *a);
643int EVP_CIPHER_CTX_cleanup(EVP_CIPHER_CTX *a);
644EVP_CIPHER_CTX *EVP_CIPHER_CTX_new(void);
645void EVP_CIPHER_CTX_free(EVP_CIPHER_CTX *a);
646int EVP_CIPHER_CTX_set_key_length(EVP_CIPHER_CTX *x, int keylen);
647int EVP_CIPHER_CTX_set_padding(EVP_CIPHER_CTX *c, int pad);
648int EVP_CIPHER_CTX_ctrl(EVP_CIPHER_CTX *ctx, int type, int arg, void *ptr);
649int EVP_CIPHER_CTX_rand_key(EVP_CIPHER_CTX *ctx, unsigned char *key);
650
651# ifndef OPENSSL_NO_BIO
652BIO_METHOD *BIO_f_md(void);
653BIO_METHOD *BIO_f_base64(void);
654BIO_METHOD *BIO_f_cipher(void);
655BIO_METHOD *BIO_f_reliable(void);
656void BIO_set_cipher(BIO *b, const EVP_CIPHER *c, const unsigned char *k,
657                    const unsigned char *i, int enc);
658# endif
659
660const EVP_MD *EVP_md_null(void);
661# ifndef OPENSSL_NO_MD2
662const EVP_MD *EVP_md2(void);
663# endif
664# ifndef OPENSSL_NO_MD4
665const EVP_MD *EVP_md4(void);
666# endif
667# ifndef OPENSSL_NO_MD5
668const EVP_MD *EVP_md5(void);
669# endif
670# ifndef OPENSSL_NO_SHA
671const EVP_MD *EVP_sha(void);
672const EVP_MD *EVP_sha1(void);
673const EVP_MD *EVP_dss(void);
674const EVP_MD *EVP_dss1(void);
675const EVP_MD *EVP_ecdsa(void);
676# endif
677# ifndef OPENSSL_NO_SHA256
678const EVP_MD *EVP_sha224(void);
679const EVP_MD *EVP_sha256(void);
680# endif
681# ifndef OPENSSL_NO_SHA512
682const EVP_MD *EVP_sha384(void);
683const EVP_MD *EVP_sha512(void);
684# endif
685# ifndef OPENSSL_NO_MDC2
686const EVP_MD *EVP_mdc2(void);
687# endif
688# ifndef OPENSSL_NO_RIPEMD
689const EVP_MD *EVP_ripemd160(void);
690# endif
691const EVP_CIPHER *EVP_enc_null(void); /* does nothing :-) */
692# ifndef OPENSSL_NO_DES
693const EVP_CIPHER *EVP_des_ecb(void);
694const EVP_CIPHER *EVP_des_ede(void);
695const EVP_CIPHER *EVP_des_ede3(void);
696const EVP_CIPHER *EVP_des_ede_ecb(void);
697const EVP_CIPHER *EVP_des_ede3_ecb(void);
698const EVP_CIPHER *EVP_des_cfb64(void);
699#  define EVP_des_cfb EVP_des_cfb64
700const EVP_CIPHER *EVP_des_cfb1(void);
701const EVP_CIPHER *EVP_des_cfb8(void);
702const EVP_CIPHER *EVP_des_ede_cfb64(void);
703#  define EVP_des_ede_cfb EVP_des_ede_cfb64
704#  if 0
705const EVP_CIPHER *EVP_des_ede_cfb1(void);
706const EVP_CIPHER *EVP_des_ede_cfb8(void);
707#  endif
708const EVP_CIPHER *EVP_des_ede3_cfb64(void);
709#  define EVP_des_ede3_cfb EVP_des_ede3_cfb64
710const EVP_CIPHER *EVP_des_ede3_cfb1(void);
711const EVP_CIPHER *EVP_des_ede3_cfb8(void);
712const EVP_CIPHER *EVP_des_ofb(void);
713const EVP_CIPHER *EVP_des_ede_ofb(void);
714const EVP_CIPHER *EVP_des_ede3_ofb(void);
715const EVP_CIPHER *EVP_des_cbc(void);
716const EVP_CIPHER *EVP_des_ede_cbc(void);
717const EVP_CIPHER *EVP_des_ede3_cbc(void);
718const EVP_CIPHER *EVP_desx_cbc(void);
719/*
720 * This should now be supported through the dev_crypto ENGINE. But also, why
721 * are rc4 and md5 declarations made here inside a "NO_DES" precompiler
722 * branch?
723 */
724#  if 0
725#   ifdef OPENSSL_OPENBSD_DEV_CRYPTO
726const EVP_CIPHER *EVP_dev_crypto_des_ede3_cbc(void);
727const EVP_CIPHER *EVP_dev_crypto_rc4(void);
728const EVP_MD *EVP_dev_crypto_md5(void);
729#   endif
730#  endif
731# endif
732# ifndef OPENSSL_NO_RC4
733const EVP_CIPHER *EVP_rc4(void);
734const EVP_CIPHER *EVP_rc4_40(void);
735# endif
736# ifndef OPENSSL_NO_IDEA
737const EVP_CIPHER *EVP_idea_ecb(void);
738const EVP_CIPHER *EVP_idea_cfb64(void);
739#  define EVP_idea_cfb EVP_idea_cfb64
740const EVP_CIPHER *EVP_idea_ofb(void);
741const EVP_CIPHER *EVP_idea_cbc(void);
742# endif
743# ifndef OPENSSL_NO_RC2
744const EVP_CIPHER *EVP_rc2_ecb(void);
745const EVP_CIPHER *EVP_rc2_cbc(void);
746const EVP_CIPHER *EVP_rc2_40_cbc(void);
747const EVP_CIPHER *EVP_rc2_64_cbc(void);
748const EVP_CIPHER *EVP_rc2_cfb64(void);
749#  define EVP_rc2_cfb EVP_rc2_cfb64
750const EVP_CIPHER *EVP_rc2_ofb(void);
751# endif
752# ifndef OPENSSL_NO_BF
753const EVP_CIPHER *EVP_bf_ecb(void);
754const EVP_CIPHER *EVP_bf_cbc(void);
755const EVP_CIPHER *EVP_bf_cfb64(void);
756#  define EVP_bf_cfb EVP_bf_cfb64
757const EVP_CIPHER *EVP_bf_ofb(void);
758# endif
759# ifndef OPENSSL_NO_CAST
760const EVP_CIPHER *EVP_cast5_ecb(void);
761const EVP_CIPHER *EVP_cast5_cbc(void);
762const EVP_CIPHER *EVP_cast5_cfb64(void);
763#  define EVP_cast5_cfb EVP_cast5_cfb64
764const EVP_CIPHER *EVP_cast5_ofb(void);
765# endif
766# ifndef OPENSSL_NO_RC5
767const EVP_CIPHER *EVP_rc5_32_12_16_cbc(void);
768const EVP_CIPHER *EVP_rc5_32_12_16_ecb(void);
769const EVP_CIPHER *EVP_rc5_32_12_16_cfb64(void);
770#  define EVP_rc5_32_12_16_cfb EVP_rc5_32_12_16_cfb64
771const EVP_CIPHER *EVP_rc5_32_12_16_ofb(void);
772# endif
773# ifndef OPENSSL_NO_AES
774const EVP_CIPHER *EVP_aes_128_ecb(void);
775const EVP_CIPHER *EVP_aes_128_cbc(void);
776const EVP_CIPHER *EVP_aes_128_cfb1(void);
777const EVP_CIPHER *EVP_aes_128_cfb8(void);
778const EVP_CIPHER *EVP_aes_128_cfb128(void);
779#  define EVP_aes_128_cfb EVP_aes_128_cfb128
780const EVP_CIPHER *EVP_aes_128_ofb(void);
781#  if 0
782const EVP_CIPHER *EVP_aes_128_ctr(void);
783#  endif
784const EVP_CIPHER *EVP_aes_192_ecb(void);
785const EVP_CIPHER *EVP_aes_192_cbc(void);
786const EVP_CIPHER *EVP_aes_192_cfb1(void);
787const EVP_CIPHER *EVP_aes_192_cfb8(void);
788const EVP_CIPHER *EVP_aes_192_cfb128(void);
789#  define EVP_aes_192_cfb EVP_aes_192_cfb128
790const EVP_CIPHER *EVP_aes_192_ofb(void);
791#  if 0
792const EVP_CIPHER *EVP_aes_192_ctr(void);
793#  endif
794const EVP_CIPHER *EVP_aes_256_ecb(void);
795const EVP_CIPHER *EVP_aes_256_cbc(void);
796const EVP_CIPHER *EVP_aes_256_cfb1(void);
797const EVP_CIPHER *EVP_aes_256_cfb8(void);
798const EVP_CIPHER *EVP_aes_256_cfb128(void);
799#  define EVP_aes_256_cfb EVP_aes_256_cfb128
800const EVP_CIPHER *EVP_aes_256_ofb(void);
801#  if 0
802const EVP_CIPHER *EVP_aes_256_ctr(void);
803#  endif
804# endif
805# ifndef OPENSSL_NO_CAMELLIA
806const EVP_CIPHER *EVP_camellia_128_ecb(void);
807const EVP_CIPHER *EVP_camellia_128_cbc(void);
808const EVP_CIPHER *EVP_camellia_128_cfb1(void);
809const EVP_CIPHER *EVP_camellia_128_cfb8(void);
810const EVP_CIPHER *EVP_camellia_128_cfb128(void);
811#  define EVP_camellia_128_cfb EVP_camellia_128_cfb128
812const EVP_CIPHER *EVP_camellia_128_ofb(void);
813const EVP_CIPHER *EVP_camellia_192_ecb(void);
814const EVP_CIPHER *EVP_camellia_192_cbc(void);
815const EVP_CIPHER *EVP_camellia_192_cfb1(void);
816const EVP_CIPHER *EVP_camellia_192_cfb8(void);
817const EVP_CIPHER *EVP_camellia_192_cfb128(void);
818#  define EVP_camellia_192_cfb EVP_camellia_192_cfb128
819const EVP_CIPHER *EVP_camellia_192_ofb(void);
820const EVP_CIPHER *EVP_camellia_256_ecb(void);
821const EVP_CIPHER *EVP_camellia_256_cbc(void);
822const EVP_CIPHER *EVP_camellia_256_cfb1(void);
823const EVP_CIPHER *EVP_camellia_256_cfb8(void);
824const EVP_CIPHER *EVP_camellia_256_cfb128(void);
825#  define EVP_camellia_256_cfb EVP_camellia_256_cfb128
826const EVP_CIPHER *EVP_camellia_256_ofb(void);
827# endif
828
829# ifndef OPENSSL_NO_SEED
830const EVP_CIPHER *EVP_seed_ecb(void);
831const EVP_CIPHER *EVP_seed_cbc(void);
832const EVP_CIPHER *EVP_seed_cfb128(void);
833#  define EVP_seed_cfb EVP_seed_cfb128
834const EVP_CIPHER *EVP_seed_ofb(void);
835# endif
836
837void OPENSSL_add_all_algorithms_noconf(void);
838void OPENSSL_add_all_algorithms_conf(void);
839
840# ifdef OPENSSL_LOAD_CONF
841#  define OpenSSL_add_all_algorithms() \
842                OPENSSL_add_all_algorithms_conf()
843# else
844#  define OpenSSL_add_all_algorithms() \
845                OPENSSL_add_all_algorithms_noconf()
846# endif
847
848void OpenSSL_add_all_ciphers(void);
849void OpenSSL_add_all_digests(void);
850# define SSLeay_add_all_algorithms() OpenSSL_add_all_algorithms()
851# define SSLeay_add_all_ciphers() OpenSSL_add_all_ciphers()
852# define SSLeay_add_all_digests() OpenSSL_add_all_digests()
853
854int EVP_add_cipher(const EVP_CIPHER *cipher);
855int EVP_add_digest(const EVP_MD *digest);
856
857const EVP_CIPHER *EVP_get_cipherbyname(const char *name);
858const EVP_MD *EVP_get_digestbyname(const char *name);
859void EVP_cleanup(void);
860
861int EVP_PKEY_decrypt(unsigned char *dec_key,
862                     const unsigned char *enc_key, int enc_key_len,
863                     EVP_PKEY *private_key);
864int EVP_PKEY_encrypt(unsigned char *enc_key,
865                     const unsigned char *key, int key_len,
866                     EVP_PKEY *pub_key);
867int EVP_PKEY_type(int type);
868int EVP_PKEY_bits(EVP_PKEY *pkey);
869int EVP_PKEY_size(EVP_PKEY *pkey);
870int EVP_PKEY_assign(EVP_PKEY *pkey, int type, char *key);
871
872# ifndef OPENSSL_NO_RSA
873struct rsa_st;
874int EVP_PKEY_set1_RSA(EVP_PKEY *pkey, struct rsa_st *key);
875struct rsa_st *EVP_PKEY_get1_RSA(EVP_PKEY *pkey);
876# endif
877# ifndef OPENSSL_NO_DSA
878struct dsa_st;
879int EVP_PKEY_set1_DSA(EVP_PKEY *pkey, struct dsa_st *key);
880struct dsa_st *EVP_PKEY_get1_DSA(EVP_PKEY *pkey);
881# endif
882# ifndef OPENSSL_NO_DH
883struct dh_st;
884int EVP_PKEY_set1_DH(EVP_PKEY *pkey, struct dh_st *key);
885struct dh_st *EVP_PKEY_get1_DH(EVP_PKEY *pkey);
886# endif
887# ifndef OPENSSL_NO_EC
888struct ec_key_st;
889int EVP_PKEY_set1_EC_KEY(EVP_PKEY *pkey, struct ec_key_st *key);
890struct ec_key_st *EVP_PKEY_get1_EC_KEY(EVP_PKEY *pkey);
891# endif
892
893EVP_PKEY *EVP_PKEY_new(void);
894void EVP_PKEY_free(EVP_PKEY *pkey);
895
896EVP_PKEY *d2i_PublicKey(int type, EVP_PKEY **a, const unsigned char **pp,
897                        long length);
898int i2d_PublicKey(EVP_PKEY *a, unsigned char **pp);
899
900EVP_PKEY *d2i_PrivateKey(int type, EVP_PKEY **a, const unsigned char **pp,
901                         long length);
902EVP_PKEY *d2i_AutoPrivateKey(EVP_PKEY **a, const unsigned char **pp,
903                             long length);
904int i2d_PrivateKey(EVP_PKEY *a, unsigned char **pp);
905
906int EVP_PKEY_copy_parameters(EVP_PKEY *to, const EVP_PKEY *from);
907int EVP_PKEY_missing_parameters(const EVP_PKEY *pkey);
908int EVP_PKEY_save_parameters(EVP_PKEY *pkey, int mode);
909int EVP_PKEY_cmp_parameters(const EVP_PKEY *a, const EVP_PKEY *b);
910
911int EVP_PKEY_cmp(const EVP_PKEY *a, const EVP_PKEY *b);
912
913int EVP_CIPHER_type(const EVP_CIPHER *ctx);
914
915/* calls methods */
916int EVP_CIPHER_param_to_asn1(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
917int EVP_CIPHER_asn1_to_param(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
918
919/* These are used by EVP_CIPHER methods */
920int EVP_CIPHER_set_asn1_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
921int EVP_CIPHER_get_asn1_iv(EVP_CIPHER_CTX *c, ASN1_TYPE *type);
922
923/* PKCS5 password based encryption */
924int PKCS5_PBE_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
925                       ASN1_TYPE *param, const EVP_CIPHER *cipher,
926                       const EVP_MD *md, int en_de);
927int PKCS5_PBKDF2_HMAC_SHA1(const char *pass, int passlen,
928                           const unsigned char *salt, int saltlen, int iter,
929                           int keylen, unsigned char *out);
930int PKCS5_v2_PBE_keyivgen(EVP_CIPHER_CTX *ctx, const char *pass, int passlen,
931                          ASN1_TYPE *param, const EVP_CIPHER *cipher,
932                          const EVP_MD *md, int en_de);
933
934void PKCS5_PBE_add(void);
935
936int EVP_PBE_CipherInit(ASN1_OBJECT *pbe_obj, const char *pass, int passlen,
937                       ASN1_TYPE *param, EVP_CIPHER_CTX *ctx, int en_de);
938int EVP_PBE_alg_add(int nid, const EVP_CIPHER *cipher, const EVP_MD *md,
939                    EVP_PBE_KEYGEN *keygen);
940void EVP_PBE_cleanup(void);
941
942# ifdef OPENSSL_FIPS
943#  ifndef OPENSSL_NO_ENGINE
944void int_EVP_MD_set_engine_callbacks(int (*eng_md_init) (ENGINE *impl),
945                                     int (*eng_md_fin) (ENGINE *impl),
946                                     int (*eng_md_evp)
947                                      (EVP_MD_CTX *ctx, const EVP_MD **ptype,
948                                       ENGINE *impl));
949void int_EVP_MD_init_engine_callbacks(void);
950void int_EVP_CIPHER_set_engine_callbacks(int (*eng_ciph_fin) (ENGINE *impl),
951                                         int (*eng_ciph_evp)
952                                          (EVP_CIPHER_CTX *ctx,
953                                           const EVP_CIPHER **pciph,
954                                           ENGINE *impl));
955void int_EVP_CIPHER_init_engine_callbacks(void);
956#  endif
957# endif
958
959void EVP_add_alg_module(void);
960
961/* BEGIN ERROR CODES */
962/*
963 * The following lines are auto generated by the script mkerr.pl. Any changes
964 * made after this point may be overwritten when the script is next run.
965 */
966void ERR_load_EVP_strings(void);
967
968/* Error codes for the EVP functions. */
969
970/* Function codes. */
971# define EVP_F_AES_INIT_KEY                               133
972# define EVP_F_ALG_MODULE_INIT                            138
973# define EVP_F_CAMELLIA_INIT_KEY                          159
974# define EVP_F_D2I_PKEY                                   100
975# define EVP_F_DO_EVP_ENC_ENGINE                          140
976# define EVP_F_DO_EVP_ENC_ENGINE_FULL                     141
977# define EVP_F_DO_EVP_MD_ENGINE                           139
978# define EVP_F_DO_EVP_MD_ENGINE_FULL                      142
979# define EVP_F_DSAPKEY2PKCS8                              134
980# define EVP_F_DSA_PKEY2PKCS8                             135
981# define EVP_F_ECDSA_PKEY2PKCS8                           129
982# define EVP_F_ECKEY_PKEY2PKCS8                           132
983# define EVP_F_EVP_CIPHERINIT                             137
984# define EVP_F_EVP_CIPHERINIT_EX                          123
985# define EVP_F_EVP_CIPHER_CTX_CTRL                        124
986# define EVP_F_EVP_CIPHER_CTX_SET_KEY_LENGTH              122
987# define EVP_F_EVP_DECRYPTFINAL_EX                        101
988# define EVP_F_EVP_DIGESTINIT                             136
989# define EVP_F_EVP_DIGESTINIT_EX                          128
990# define EVP_F_EVP_ENCRYPTFINAL_EX                        127
991# define EVP_F_EVP_MD_CTX_COPY_EX                         110
992# define EVP_F_EVP_OPENINIT                               102
993# define EVP_F_EVP_PBE_ALG_ADD                            115
994# define EVP_F_EVP_PBE_CIPHERINIT                         116
995# define EVP_F_EVP_PKCS82PKEY                             111
996# define EVP_F_EVP_PKEY2PKCS8_BROKEN                      113
997# define EVP_F_EVP_PKEY_COPY_PARAMETERS                   103
998# define EVP_F_EVP_PKEY_DECRYPT                           104
999# define EVP_F_EVP_PKEY_ENCRYPT                           105
1000# define EVP_F_EVP_PKEY_GET1_DH                           119
1001# define EVP_F_EVP_PKEY_GET1_DSA                          120
1002# define EVP_F_EVP_PKEY_GET1_ECDSA                        130
1003# define EVP_F_EVP_PKEY_GET1_EC_KEY                       131
1004# define EVP_F_EVP_PKEY_GET1_RSA                          121
1005# define EVP_F_EVP_PKEY_NEW                               106
1006# define EVP_F_EVP_RIJNDAEL                               126
1007# define EVP_F_EVP_SIGNFINAL                              107
1008# define EVP_F_EVP_VERIFYFINAL                            108
1009# define EVP_F_PKCS5_PBE_KEYIVGEN                         117
1010# define EVP_F_PKCS5_V2_PBE_KEYIVGEN                      118
1011# define EVP_F_PKCS8_SET_BROKEN                           112
1012# define EVP_F_RC2_MAGIC_TO_METH                          109
1013# define EVP_F_RC5_CTRL                                   125
1014
1015/* Reason codes. */
1016# define EVP_R_AES_KEY_SETUP_FAILED                       143
1017# define EVP_R_ASN1_LIB                                   140
1018# define EVP_R_BAD_BLOCK_LENGTH                           136
1019# define EVP_R_BAD_DECRYPT                                100
1020# define EVP_R_BAD_KEY_LENGTH                             137
1021# define EVP_R_BN_DECODE_ERROR                            112
1022# define EVP_R_BN_PUBKEY_ERROR                            113
1023# define EVP_R_CAMELLIA_KEY_SETUP_FAILED                  157
1024# define EVP_R_CIPHER_PARAMETER_ERROR                     122
1025# define EVP_R_CTRL_NOT_IMPLEMENTED                       132
1026# define EVP_R_CTRL_OPERATION_NOT_IMPLEMENTED             133
1027# define EVP_R_DATA_NOT_MULTIPLE_OF_BLOCK_LENGTH          138
1028# define EVP_R_DECODE_ERROR                               114
1029# define EVP_R_DIFFERENT_KEY_TYPES                        101
1030# define EVP_R_DISABLED_FOR_FIPS                          144
1031# define EVP_R_ENCODE_ERROR                               115
1032# define EVP_R_ERROR_LOADING_SECTION                      145
1033# define EVP_R_ERROR_SETTING_FIPS_MODE                    146
1034# define EVP_R_EVP_PBE_CIPHERINIT_ERROR                   119
1035# define EVP_R_EXPECTING_AN_RSA_KEY                       127
1036# define EVP_R_EXPECTING_A_DH_KEY                         128
1037# define EVP_R_EXPECTING_A_DSA_KEY                        129
1038# define EVP_R_EXPECTING_A_ECDSA_KEY                      141
1039# define EVP_R_EXPECTING_A_EC_KEY                         142
1040# define EVP_R_FIPS_MODE_NOT_SUPPORTED                    147
1041# define EVP_R_INITIALIZATION_ERROR                       134
1042# define EVP_R_INPUT_NOT_INITIALIZED                      111
1043# define EVP_R_INVALID_FIPS_MODE                          148
1044# define EVP_R_INVALID_KEY_LENGTH                         130
1045# define EVP_R_IV_TOO_LARGE                               102
1046# define EVP_R_KEYGEN_FAILURE                             120
1047# define EVP_R_MISSING_PARAMETERS                         103
1048# define EVP_R_NO_CIPHER_SET                              131
1049# define EVP_R_NO_DIGEST_SET                              139
1050# define EVP_R_NO_DSA_PARAMETERS                          116
1051# define EVP_R_NO_SIGN_FUNCTION_CONFIGURED                104
1052# define EVP_R_NO_VERIFY_FUNCTION_CONFIGURED              105
1053# define EVP_R_PKCS8_UNKNOWN_BROKEN_TYPE                  117
1054# define EVP_R_PUBLIC_KEY_NOT_RSA                         106
1055# define EVP_R_UNKNOWN_OPTION                             149
1056# define EVP_R_UNKNOWN_PBE_ALGORITHM                      121
1057# define EVP_R_UNSUPORTED_NUMBER_OF_ROUNDS                135
1058# define EVP_R_UNSUPPORTED_CIPHER                         107
1059# define EVP_R_UNSUPPORTED_KEYLENGTH                      123
1060# define EVP_R_UNSUPPORTED_KEY_DERIVATION_FUNCTION        124
1061# define EVP_R_UNSUPPORTED_KEY_SIZE                       108
1062# define EVP_R_UNSUPPORTED_PRF                            125
1063# define EVP_R_UNSUPPORTED_PRIVATE_KEY_ALGORITHM          118
1064# define EVP_R_UNSUPPORTED_SALT_TYPE                      126
1065# define EVP_R_WRONG_FINAL_BLOCK_LENGTH                   109
1066# define EVP_R_WRONG_PUBLIC_KEY_TYPE                      110
1067# define EVP_R_SEED_KEY_SETUP_FAILED                      162
1068
1069#ifdef  __cplusplus
1070}
1071#endif
1072#endif
1073