mbedtls/library/rsa_alt_helpers.h

4  * \brief Context-independent RSA helper functions
6  *  This module declares some RSA-related helper functions useful when
13  *  End-users of Mbed TLS who are not providing their own alternative RSA
23  *  (1) Parameter-generating helpers. These are:
24  *      - mbedtls_rsa_deduce_primes
25  *      - mbedtls_rsa_deduce_private_exponent
26  *      - mbedtls_rsa_deduce_crt
30  *  (2) Parameter-checking helpers. These are:
31  *      - mbedtls_rsa_validate_params
32  *      - mbedtls_rsa_validate_crt
39  *  SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
62  * \param E        RSA public exponent
68  *                 - 0 if successful. In this case, P and Q constitute a
70  *                 - A non-zero error code otherwise.
73  *                 D, E are modular inverses wrt. P-1 and Q-1. For that,
77 int mbedtls_rsa_deduce_primes(mbedtls_mpi const *N, mbedtls_mpi const *E,
91  * \param E        RSA public exponent
95  *                 - 0 if successful. In this case, D is set to a simultaneous
96  *                   modular inverse of E modulo both P-1 and Q-1.
97  *                 - A non-zero error code otherwise.
104                                         mbedtls_mpi const *E,
109  * \brief          Generate RSA-CRT parameters
118  * \param DP       Output variable for D modulo P-1
119  * \param DQ       Output variable for D modulo Q-1
122  * \return         0 on success, non-zero error code otherwise.
144  * \param E        RSA public exponent
149  *                 - 0 if the following conditions are satisfied
151  *                    - P prime if f_rng != NULL (%)
152  *                    - Q prime if f_rng != NULL (%)
153  *                    - 1 < N = P * Q
154  *                    - 1 < D, E < N
155  *                    - D and E are modular inverses modulo P-1 and Q-1
157  *                 - A non-zero error code otherwise.
160  *                 to perform specific checks only. E.g., calling it with
161  *                 (-,P,-,-,-) and a PRNG amounts to a primality check for P.
165                                 const mbedtls_mpi *E,
179  * \param DP       MPI to check for D modulo P-1
180  * \param DQ       MPI to check for D modulo P-1
184  *                 - 0 if the following conditions are satisfied:
185  *                    - D = DP mod P-1 if P, D, DP != NULL
186  *                    - Q = DQ mod P-1 if P, D, DQ != NULL
187  *                    - QP = Q^-1 mod P if P, Q, QP != NULL
188  *                 - \c MBEDTLS_ERR_RSA_KEY_CHECK_FAILED if check failed,
191  *                 - \c MBEDTLS_ERR_RSA_BAD_INPUT_DATA if insufficient
195  *                 to perform specific checks only. E.g., calling it with the
196  *                 parameters (P, -, D, DP, -, -) will check DP = D mod P-1.