[openssl-users] Specify padding scheme with EVP_VerifyFinal

[openssl at tuta.io]

Hi Michel,

it looks like what I am looking for, but the software uses EVP_VerifyInit_ex which is a typedef for EVP_DigestInit_ex. How are those functions related to EVP_DigestVerifyInit? Can I use EVP_DigestVerify* functions along with EVP_Verify* functions? I must not break compatibility with the old implementation which needs to support arbitrary MD algorithms.

Thank you for your response!
Tom


>
> Hi,
>
>  
>
> > > Is it possible to specify a different padding scheme (e.g. > RSA_PKCS1_PSS_PADDING) using this API>  > ?
>
> > > If not, what is the easiest way to work around this "limitation" ?
>
>
>
> Isn’t it what you are looking for : EVP_PKEY_CTX_set_rsa_padding() ?
>
> https://www.openssl.org/docs/manmaster/man3/EVP_PKEY_CTX_set_rsa_padding.html
>
> and :
>
> https://wiki.openssl.org/index.php/EVP_Signing_and_Verifying
>
> (OpenSSL version >= 1.0)
>
>  
>
> Hope it helps,
>
>  
>
> Michel.
>
>  
>
>  
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mta.openssl.org/pipermail/openssl-users/attachments/20170223/78a56239/attachment-0001.html>