search

opencryptoki / openssl-ibmca

OpenSSL engine and provider for libica.
Apache License 2.0
6 stars 15 forks source link

provider: Support importing of RSA keys with just ME components #105

Closed ifranzki closed 11 months ago

ifranzki commented 1 year ago

RSA private keys may contain just CRT (p, q, dp, dq, qinv) or ME (d) components, or all of them. If an application imports a private RSA key from just the ME components (m, e, and private d), then the IBMCA provider can not use ica_rsa_crt() to perform private key operations.

Therefore let an RSA key also contain the private key components in ME format, and use ica_rsa_mod_expo() if only the ME components are available. RSA keys are still always generated in CRT format, but it now allows to import an RSA private key in ME format.

ifranzki commented 12 months ago

@holger-dengler ping ?

ifranzki commented 11 months ago

@holger-dengler I have addressed most of the comments, please take a look again.

holger-dengler commented 11 months ago

I think, it's ready to merge now.

ifranzki commented 11 months ago

Yep, just waiting for travis to complete, then I'll merge. Thanks for your review!