EVP_MD_METH_NEW(3ossl)
π EVP_MD_METH_NEW β the legacy digest-method builder page, bestie
okay so welcome to EVP_MD_METH_NEW(3ossl), the OpenSSL manual page all about building up legacy EVP_MD methods π. Yes it's giving deprecated. Yes we still gotta know it. Let's go πΈ
β¨ NAME β¨
EVP_MD_meth_new, EVP_MD_meth_dup, EVP_MD_meth_free, EVP_MD_meth_set_input_blocksize, EVP_MD_meth_set_result_size, EVP_MD_meth_set_app_datasize, EVP_MD_meth_set_flags, EVP_MD_meth_set_init, EVP_MD_meth_set_update, EVP_MD_meth_set_final, EVP_MD_meth_set_copy, EVP_MD_meth_set_cleanup, EVP_MD_meth_set_ctrl, EVP_MD_meth_get_input_blocksize, EVP_MD_meth_get_result_size, EVP_MD_meth_get_app_datasize, EVP_MD_meth_get_flags, EVP_MD_meth_get_init, EVP_MD_meth_get_update, EVP_MD_meth_get_final, EVP_MD_meth_get_copy, EVP_MD_meth_get_cleanup, EVP_MD_meth_get_ctrl β Routines to build up legacy EVP_MD methods π¦
π SYNOPSIS π
#include <openssl/evp.h>
Lowkey important heads up: the following functions have been deprecated since OpenSSL 3.0, and can be hidden entirely by defining OPENSSL_API_COMPAT with a suitable version value, see openssl_user_macros(7):
EVP_MD *EVP_MD_meth_new(int md_type, int pkey_type);
void EVP_MD_meth_free(EVP_MD *md);
EVP_MD *EVP_MD_meth_dup(const EVP_MD *md);
int EVP_MD_meth_set_input_blocksize(EVP_MD *md, int blocksize);
int EVP_MD_meth_set_result_size(EVP_MD *md, int resultsize);
int EVP_MD_meth_set_app_datasize(EVP_MD *md, int datasize);
int EVP_MD_meth_set_flags(EVP_MD *md, unsigned long flags);
int EVP_MD_meth_set_init(EVP_MD *md, int (*init)(EVP_MD_CTX *ctx));
int EVP_MD_meth_set_update(EVP_MD *md, int (*update)(EVP_MD_CTX *ctx,
const void *data,
size_t count));
int EVP_MD_meth_set_final(EVP_MD *md, int (*final)(EVP_MD_CTX *ctx,
unsigned char *md));
int EVP_MD_meth_set_copy(EVP_MD *md, int (*copy)(EVP_MD_CTX *to,
const EVP_MD_CTX *from));
int EVP_MD_meth_set_cleanup(EVP_MD *md, int (*cleanup)(EVP_MD_CTX *ctx));
int EVP_MD_meth_set_ctrl(EVP_MD *md, int (*ctrl)(EVP_MD_CTX *ctx, int cmd,
int p1, void *p2));
int EVP_MD_meth_get_input_blocksize(const EVP_MD *md);
int EVP_MD_meth_get_result_size(const EVP_MD *md);
int EVP_MD_meth_get_app_datasize(const EVP_MD *md);
unsigned long EVP_MD_meth_get_flags(const EVP_MD *md);
int (*EVP_MD_meth_get_init(const EVP_MD *md))(EVP_MD_CTX *ctx);
int (*EVP_MD_meth_get_update(const EVP_MD *md))(EVP_MD_CTX *ctx,
const void *data,
size_t count);
int (*EVP_MD_meth_get_final(const EVP_MD *md))(EVP_MD_CTX *ctx,
unsigned char *md);
int (*EVP_MD_meth_get_copy(const EVP_MD *md))(EVP_MD_CTX *to,
const EVP_MD_CTX *from);
int (*EVP_MD_meth_get_cleanup(const EVP_MD *md))(EVP_MD_CTX *ctx);
int (*EVP_MD_meth_get_ctrl(const EVP_MD *md))(EVP_MD_CTX *ctx, int cmd,
int p1, void *p2);
π«Ά DESCRIPTION π«Ά
β οΈ All of the functions described on this page are deprecated. Applications should instead use the OSSL_PROVIDER APIs. no cap, this is the old way π
So the EVP_MD type is a structure for digest method implementation. It can also have associated public/private key signing and verifying routines. multi-talented, honestly π
EVP_MD_meth_new()β creates a newEVP_MDstructure. TheseEVP_MDstructures are reference counted. β¨EVP_MD_meth_dup()β creates a copy ofmd. π¦EVP_MD_meth_free()β decrements the reference count for theEVP_MDstructure. If the reference count drops to 0 then the structure is freed. If the argument isNULL, nothing is done. (respectful of your time fr) π
πΈ the setters, one by one πΈ
EVP_MD_meth_set_input_blocksize()β sets the internal input block size for the methodmdtoblocksizebytes.EVP_MD_meth_set_result_size()β sets the size of the result that the digest method inmdis expected to produce toresultsizebytes.EVP_MD_meth_set_app_datasize()β the digest method may have its own private data, which OpenSSL will allocate for it. This one should be used to set the size for it todatasize. π
π¦ EVP_MD_meth_set_flags() and the flag lore π¦
EVP_MD_meth_set_flags() sets the flags to describe optional behaviours in the particular md. Several flags can be or'd together. The available flags are:
EVP_MD_FLAG_ONESHOTβ This digest method can only handle one block of input.EVP_MD_FLAG_XOFβ This digest method is an extensible-output function (XOF) and supports theEVP_MD_CTRL_XOF_LENcontrol.EVP_MD_FLAG_DIGALGID_NULLβ When setting up aDigestAlgorithmIdentifier, this flag will have the parameter set toNULLby default. Use this for PKCS#1. Note: if combined withEVP_MD_FLAG_DIGALGID_ABSENT, the latter will override.EVP_MD_FLAG_DIGALGID_ABSENTβ When setting up aDigestAlgorithmIdentifier, this flag will have the parameter be left absent by default. Note: if combined withEVP_MD_FLAG_DIGALGID_NULL, the latter will be overridden.EVP_MD_FLAG_DIGALGID_CUSTOMβ CustomDigestAlgorithmIdentifierhandling via ctrl, withEVP_MD_FLAG_DIGALGID_ABSENTas default. Note: if combined withEVP_MD_FLAG_DIGALGID_NULL, the latter will be overridden. Currently unused.EVP_MD_FLAG_FIPSβ This digest method is suitable for use in FIPS mode. Currently unused.
π the rest of the setters π
EVP_MD_meth_set_init()β sets the digest init function formd. The digest init function is called byEVP_Digest(),EVP_DigestInit(),EVP_DigestInit_ex(),EVP_SignInit,EVP_SignInit_ex(),EVP_VerifyInit()andEVP_VerifyInit_ex().EVP_MD_meth_set_update()β sets the digest update function formd. The digest update function is called byEVP_Digest(),EVP_DigestUpdate()andEVP_SignUpdate().EVP_MD_meth_set_final()β sets the digest final function formd. The digest final function is called byEVP_Digest(),EVP_DigestFinal(),EVP_DigestFinal_ex(),EVP_SignFinal()andEVP_VerifyFinal().EVP_MD_meth_set_copy()β sets the function formdto do extra computations after the method's private data structure has been copied from oneEVP_MD_CTXto another. If all that's needed is to copy the data, there is no need for this copy function. Note that the copy function is passed twoEVP_MD_CTX *, the private data structure is then available withEVP_MD_CTX_get0_md_data(). This copy function is called byEVP_MD_CTX_copy()andEVP_MD_CTX_copy_ex().EVP_MD_meth_set_cleanup()β sets the function formdto do extra cleanup before the method's private data structure is cleaned out and freed. Note that the cleanup function is passed aEVP_MD_CTX *, the private data structure is then available withEVP_MD_CTX_get0_md_data(). This cleanup function is called byEVP_MD_CTX_reset()andEVP_MD_CTX_free().EVP_MD_meth_set_ctrl()β sets the control function formd. SeeEVP_MD_CTX_ctrl(3)for the available controls.
π and the getters π
EVP_MD_meth_get_input_blocksize(), EVP_MD_meth_get_result_size(), EVP_MD_meth_get_app_datasize(), EVP_MD_meth_get_flags(), EVP_MD_meth_get_init(), EVP_MD_meth_get_update(), EVP_MD_meth_get_final(), EVP_MD_meth_get_copy(), EVP_MD_meth_get_cleanup() and EVP_MD_meth_get_ctrl() are all used to retrieve the method data given with the EVP_MD_meth_set_*() functions above. they're the lil read-back girlies π
π₯ RETURN VALUES π₯
EVP_MD_meth_new()andEVP_MD_meth_dup()return a pointer to a newly createdEVP_MD, orNULLon failure. π- All
EVP_MD_meth_set_*()functions return1. iconic, consistent, slay β¨ EVP_MD_get_input_blocksize(),EVP_MD_meth_get_result_size(),EVP_MD_meth_get_app_datasize()andEVP_MD_meth_get_flags()return the indicated sizes or flags.- All other
EVP_CIPHER_meth_get_*()functions return pointers to their respectivemdfunction.
π SEE ALSO π
EVP_DigestInit(3), EVP_SignInit(3), EVP_VerifyInit(3)
π HISTORY π
- All of these functions were deprecated in OpenSSL 3.0.
- The
EVP_MDstructure was openly available in OpenSSL before version 1.1. - The functions described here were added in OpenSSL 1.1.
- The
EVP_MDstructure created with these functions became reference counted in OpenSSL 3.0.
π COPYRIGHT π
Copyright 2015-2024 The OpenSSL Project Authors. All Rights Reserved.
Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.
and that's the whole page bestie, you ate π«Ά this was 3.5.9 of the OpenSSL manual, dated 2026-09-29, and it lives at EVP_MD_METH_NEW(3ossl) β go build something cute (with the provider APIs tho, fr fr) π
β¨
π¦ where this page comes from
- fedora 43: openssl-devel 1:3.5.9-1.fc43 Β· Apache-2.0
- fedora 43: openssl-devel 1:3.5.9-1.fc43 Β· Apache-2.0
- fedora 44: openssl-devel 1:3.5.9-1.fc44 Β· Apache-2.0
- fedora 44: openssl-devel 1:3.5.9-1.fc44 Β· Apache-2.0
- π girlified by deepseek-ai/DeepSeek-V4.1-Flash on : a language model's rewrite of the original, under its terms