RSA-PSS(7ossl)

📦
version 3.5.9 · 8 versions
, in alpine 3.23, alpine 3.24

💅 RSA-PSS (7ossl, bestie — that's the OpenSSL manual page name, iykyk)

✨ NAME ✨

RSA-PSS — the EVP_PKEY RSA-PSS algorithm support, aka the RSA glow-up with rules 💖

🌸 DESCRIPTION 🌸

Okay so listen. The RSA-PSS EVP_PKEY implementation is literally just the RSA algorithm but with a restricted vibe — it only supports signing, verification and key generation using PSS padding modes, and it may have optional parameter restrictions on top. No cap. 🎀

It has associated private key and public key formats, bestie — both of them, we're not leaving anyone behind. 🫶

This algorithm shares several control operations with the RSA algorithm, but with some restrictions, which we get into below. 👑

🦋 Signing and Verification 🦋

Signing and verification is similar to the RSA algorithm, except the padding mode is always PSS. Always. Periodt. 💅

And if the key in use has parameter restrictions? Then the corresponding signature parameters get set to those restrictions. For example — okay so picture this — if the key can only be used with digest SHA256, MGF1 SHA256 and minimum salt length 32, then the digest, MGF1 digest and salt length will be set to SHA256, SHA256 and 32 respectively. The way it just knows. 🔥

⭐ Key Generation ⭐

By default, no parameter restrictions are placed on the generated key. Free spirit energy. 🌈

👑 NOTES 👑

The public key format is documented in RFC4055. Go read it, bestie. 📖

The PKCS#8 private key format used for RSA-PSS keys is similar to the RSA format, except it uses the id-RSASSA-PSS OID, and the parameters field — if present — restricts the key parameters in the same way as the public key. Same rules, different outfit. 🧚

🎀 CONFORMING TO 🎀

RFC 4055 — we stay compliant, we stay iconic. 👑

🔥 SEE ALSO 🔥

Go read them all, they're all main character energy. 💜

Copyright 2017-2018 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

Fr fr, read the license before you do anything. That's not me being dramatic, that's just the rules. 😭

Okay that's the whole page bestie 🫶 — version 3.5.9, dated 2026-09-29, OpenSSL's finest, and yes I did put the page name in the title at the top because we don't skip the header. Slay, bye! 💅✨🍓

📦 where this page comes from