[openssl-users] RSA PKCS1 v2.1 - Multi-primes and RSASSA-PSS

[Dr. Stephen Henson]

On Tue, Apr 11, 2017, Davy Souza wrote:

> > In what context do you want to use it? For example CMS, certificates, TLS,
>     general application code or via the command line?
> 
> 
> It's a C++ embedded application for a POS.  One requirement is to use PKCS#1 v2.1 for RSA functions.
> 

Then you need to use EVP_PKEY_sign/EVP_PKEY_verify or
EVP_DigestSign*/EVP_DigestVerify.

In either case you have an EVP_PKEY_CTX structure and you need to set the
padding mode and parameters using EVP_PKEY_CTX_set_rsa_padding(),
EVP_PKEY_CTX_set_rsa_pss_saltlen() and if you use
EVP_PKEY_sign/EVP_PKEY_verify EVP_PKEY_CTX_set_signature_md().

Steve.
--
Dr Stephen N. Henson. OpenSSL project core developer.
Commercial tech support now available see: http://www.openssl.org