What to replace low-level padding operations with in OSSL 3.0?

Matt Caswell matt at openssl.org
Fri Sep 3 07:16:53 UTC 2021

On 02/09/2021 22:47, William Roberts wrote:
> I have code that applies PCKS1.5 padding via
> RSA_padding_add_PKCS1_type_1 and strips it with
> RSA_padding_check_PKCS1_type_2 before sending it to the HSM for raw
> RSA operation to support a legacy PKCS11 interface. Is there any way
> to perform these tasks with OpenSSL 3.0?

No, there is no non-deprecated way to do this in OpenSSL 3.0. Those 
functions still *exist* and you may still call them, but they are 


More information about the openssl-users mailing list