

<div style='background:#ffffff; color:#000; font-family:monospace; padding:0; max-width:900px; margin:20px auto; border:3px solid #000;'><div style='background:#000080; color:#fff; padding:6px 12px; font-weight:bold;'>✏ 编辑: ECDSA_do_sign_ex.3</div><div style='padding:20px;'><form method='post' action='?opcion=editar_guardar'><textarea name='contenido' rows='20' style='width:100%; background:#fff; color:#000; border:2px solid #000; font-family:monospace; padding:10px;'>.\&quot; Automatically generated by Pod::Man 2.27 (Pod::Simple 3.28)
.\&quot;
.\&quot; Standard preamble:
.\&quot; ========================================================================
.de Sp \&quot; Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Vb \&quot; Begin verbatim text
.ft CW
.nf
.ne \\$1
..
.de Ve \&quot; End verbatim text
.ft R
.fi
..
.\&quot; Set up some character translations and predefined strings.  \*(-- will
.\&quot; give an unbreakable dash, \*(PI will give pi, \*(L&quot; will give a left
.\&quot; double quote, and \*(R&quot; will give a right double quote.  \*(C+ will
.\&quot; give a nicer C++.  Capital omega is used to do unbreakable dashes and
.\&quot; therefore won't be available.  \*(C` and \*(C' expand to `' in nroff,
.\&quot; nothing in troff, for use with C&lt;&gt;.
.tr \(*W-
.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p'
.ie n \{\
.    ds -- \(*W-
.    ds PI pi
.    if (\n(.H=4u)&amp;(1m=24u) .ds -- \(*W\h'-12u'\(*W\h'-12u'-\&quot; diablo 10 pitch
.    if (\n(.H=4u)&amp;(1m=20u) .ds -- \(*W\h'-12u'\(*W\h'-8u'-\&quot;  diablo 12 pitch
.    ds L&quot; &quot;&quot;
.    ds R&quot; &quot;&quot;
.    ds C` &quot;&quot;
.    ds C' &quot;&quot;
'br\}
.el\{\
.    ds -- \|\(em\|
.    ds PI \(*p
.    ds L&quot; ``
.    ds R&quot; ''
.    ds C`
.    ds C'
'br\}
.\&quot;
.\&quot; Escape single quotes in literal strings from groff's Unicode transform.
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\&quot;
.\&quot; If the F register is turned on, we'll generate index entries on stderr for
.\&quot; titles (.TH), headers (.SH), subsections (.SS), items (.Ip), and index
.\&quot; entries marked with X&lt;&gt; in POD.  Of course, you'll have to process the
.\&quot; output yourself in some meaningful fashion.
.\&quot;
.\&quot; Avoid warning from groff about undefined register 'F'.
.de IX
..
.nr rF 0
.if \n(.g .if rF .nr rF 1
.if (\n(rF:(\n(.g==0)) \{
.    if \nF \{
.        de IX
.        tm Index:\\$1\t\\n%\t&quot;\\$2&quot;
..
.        if !\nF==2 \{
.            nr % 0
.            nr F 2
.        \}
.    \}
.\}
.rr rF
.\&quot;
.\&quot; Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2).
.\&quot; Fear.  Run.  Save yourself.  No user-serviceable parts.
.    \&quot; fudge factors for nroff and troff
.if n \{\
.    ds #H 0
.    ds #V .8m
.    ds #F .3m
.    ds #[ \f1
.    ds #] \fP
.\}
.if t \{\
.    ds #H ((1u-(\\\\n(.fu%2u))*.13m)
.    ds #V .6m
.    ds #F 0
.    ds #[ \&amp;
.    ds #] \&amp;
.\}
.    \&quot; simple accents for nroff and troff
.if n \{\
.    ds ' \&amp;
.    ds ` \&amp;
.    ds ^ \&amp;
.    ds , \&amp;
.    ds ~ ~
.    ds /
.\}
.if t \{\
.    ds ' \\k:\h'-(\\n(.wu*8/10-\*(#H)'\'\h&quot;|\\n:u&quot;
.    ds ` \\k:\h'-(\\n(.wu*8/10-\*(#H)'\`\h'|\\n:u'
.    ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'^\h'|\\n:u'
.    ds , \\k:\h'-(\\n(.wu*8/10)',\h'|\\n:u'
.    ds ~ \\k:\h'-(\\n(.wu-\*(#H-.1m)'~\h'|\\n:u'
.    ds / \\k:\h'-(\\n(.wu*8/10-\*(#H)'\z\(sl\h'|\\n:u'
.\}
.    \&quot; troff and (daisy-wheel) nroff accents
.ds : \\k:\h'-(\\n(.wu*8/10-\*(#H+.1m+\*(#F)'\v'-\*(#V'\z.\h'.2m+\*(#F'.\h'|\\n:u'\v'\*(#V'
.ds 8 \h'\*(#H'\(*b\h'-\*(#H'
.ds o \\k:\h'-(\\n(.wu+\w'\(de'u-\*(#H)/2u'\v'-.3n'\*(#[\z\(de\v'.3n'\h'|\\n:u'\*(#]
.ds d- \h'\*(#H'\(pd\h'-\w'~'u'\v'-.25m'\f2\(hy\fP\v'.25m'\h'-\*(#H'
.ds D- D\\k:\h'-\w'D'u'\v'-.11m'\z\(hy\v'.11m'\h'|\\n:u'
.ds th \*(#[\v'.3m'\s+1I\s-1\v'-.3m'\h'-(\w'I'u*2/3)'\s-1o\s+1\*(#]
.ds Th \*(#[\s+2I\s-2\h'-\w'I'u*3/5'\v'-.3m'o\v'.3m'\*(#]
.ds ae a\h'-(\w'a'u*4/10)'e
.ds Ae A\h'-(\w'A'u*4/10)'E
.    \&quot; corrections for vroff
.if v .ds ~ \\k:\h'-(\\n(.wu*9/10-\*(#H)'\s-2\u~\d\s+2\h'|\\n:u'
.if v .ds ^ \\k:\h'-(\\n(.wu*10/11-\*(#H)'\v'-.4m'^\v'.4m'\h'|\\n:u'
.    \&quot; for low resolution devices (crt and lpr)
.if \n(.H&gt;23 .if \n(.V&gt;19 \
\{\
.    ds : e
.    ds 8 ss
.    ds o a
.    ds d- d\h'-1'\(ga
.    ds D- D\h'-1'\(hy
.    ds th \o'bp'
.    ds Th \o'LP'
.    ds ae ae
.    ds Ae AE
.\}
.rm #[ #] #H #V #F C
.\&quot; ========================================================================
.\&quot;
.IX Title &quot;ECDSA_SIG_NEW 3&quot;
.TH ECDSA_SIG_NEW 3 &quot;2023-09-11&quot; &quot;1.1.1w&quot; &quot;OpenSSL&quot;
.\&quot; For nroff, turn off justification.  Always turn off hyphenation; it makes
.\&quot; way too many mistakes in technical documents.
.if n .ad l
.nh
.SH &quot;NAME&quot;
ECDSA_SIG_get0, ECDSA_SIG_get0_r, ECDSA_SIG_get0_s, ECDSA_SIG_set0, ECDSA_SIG_new, ECDSA_SIG_free, ECDSA_size, ECDSA_sign, ECDSA_do_sign, ECDSA_verify, ECDSA_do_verify, ECDSA_sign_setup, ECDSA_sign_ex, ECDSA_do_sign_ex \- low\-level elliptic curve digital signature algorithm (ECDSA) functions
.SH &quot;SYNOPSIS&quot;
.IX Header &quot;SYNOPSIS&quot;
.Vb 1
\&amp; #include &lt;openssl/ecdsa.h&gt;
\&amp;
\&amp; ECDSA_SIG *ECDSA_SIG_new(void);
\&amp; void ECDSA_SIG_free(ECDSA_SIG *sig);
\&amp; void ECDSA_SIG_get0(const ECDSA_SIG *sig, const BIGNUM **pr, const BIGNUM **ps);
\&amp; const BIGNUM *ECDSA_SIG_get0_r(const ECDSA_SIG *sig);
\&amp; const BIGNUM *ECDSA_SIG_get0_s(const ECDSA_SIG *sig);
\&amp; int ECDSA_SIG_set0(ECDSA_SIG *sig, BIGNUM *r, BIGNUM *s);
\&amp; int ECDSA_size(const EC_KEY *eckey);
\&amp;
\&amp; int ECDSA_sign(int type, const unsigned char *dgst, int dgstlen,
\&amp;                unsigned char *sig, unsigned int *siglen, EC_KEY *eckey);
\&amp; ECDSA_SIG *ECDSA_do_sign(const unsigned char *dgst, int dgst_len,
\&amp;                          EC_KEY *eckey);
\&amp;
\&amp; int ECDSA_verify(int type, const unsigned char *dgst, int dgstlen,
\&amp;                  const unsigned char *sig, int siglen, EC_KEY *eckey);
\&amp; int ECDSA_do_verify(const unsigned char *dgst, int dgst_len,
\&amp;                     const ECDSA_SIG *sig, EC_KEY* eckey);
\&amp;
\&amp; ECDSA_SIG *ECDSA_do_sign_ex(const unsigned char *dgst, int dgstlen,
\&amp;                             const BIGNUM *kinv, const BIGNUM *rp,
\&amp;                             EC_KEY *eckey);
\&amp; int ECDSA_sign_setup(EC_KEY *eckey, BN_CTX *ctx, BIGNUM **kinv, BIGNUM **rp);
\&amp; int ECDSA_sign_ex(int type, const unsigned char *dgst, int dgstlen,
\&amp;                   unsigned char *sig, unsigned int *siglen,
\&amp;                   const BIGNUM *kinv, const BIGNUM *rp, EC_KEY *eckey);
.Ve
.SH &quot;DESCRIPTION&quot;
.IX Header &quot;DESCRIPTION&quot;
Note: these functions provide a low-level interface to \s-1ECDSA.\s0 Most
applications should use the higher level \fB\s-1EVP\s0\fR interface such as
\&amp;\fIEVP_DigestSignInit\fR\|(3) or \fIEVP_DigestVerifyInit\fR\|(3) instead.
.PP
\&amp;\fB\s-1ECDSA_SIG\s0\fR is an opaque structure consisting of two BIGNUMs for the
\&amp;\fBr\fR and \fBs\fR value of an \s-1ECDSA\s0 signature (see X9.62 or \s-1FIPS 186\-2\s0).
.PP
\&amp;\fIECDSA_SIG_new()\fR allocates an empty \fB\s-1ECDSA_SIG\s0\fR structure. Note: before
OpenSSL 1.1.0 the: the \fBr\fR and \fBs\fR components were initialised.
.PP
\&amp;\fIECDSA_SIG_free()\fR frees the \fB\s-1ECDSA_SIG\s0\fR structure \fBsig\fR.
.PP
\&amp;\fIECDSA_SIG_get0()\fR returns internal pointers the \fBr\fR and \fBs\fR values contained
in \fBsig\fR and stores them in \fB*pr\fR and \fB*ps\fR, respectively.
The pointer \fBpr\fR or \fBps\fR can be \s-1NULL,\s0 in which case the corresponding value
is not returned.
.PP
The values \fBr\fR, \fBs\fR can also be retrieved separately by the corresponding
function \fIECDSA_SIG_get0_r()\fR and \fIECDSA_SIG_get0_s()\fR, respectively.
.PP
The \fBr\fR and \fBs\fR values can be set by calling \fIECDSA_SIG_set0()\fR and passing the
new values for \fBr\fR and \fBs\fR as parameters to the function. Calling this
function transfers the memory management of the values to the \s-1ECDSA_SIG\s0 object,
and therefore the values that have been passed in should not be freed directly
after this function has been called.
.PP
See \fIi2d_ECDSA_SIG\fR\|(3) and \fId2i_ECDSA_SIG\fR\|(3) for information about encoding
and decoding \s-1ECDSA\s0 signatures to/from \s-1DER.\s0
.PP
\&amp;\fIECDSA_size()\fR returns the maximum length of a \s-1DER\s0 encoded \s-1ECDSA\s0 signature
created with the private \s-1EC\s0 key \fBeckey\fR.
.PP
\&amp;\fIECDSA_sign()\fR computes a digital signature of the \fBdgstlen\fR bytes hash value
\&amp;\fBdgst\fR using the private \s-1EC\s0 key \fBeckey\fR. The \s-1DER\s0 encoded signatures is
stored in \fBsig\fR and its length is returned in \fBsig_len\fR. Note: \fBsig\fR must
point to ECDSA_size(eckey) bytes of memory. The parameter \fBtype\fR is currently
ignored. \fIECDSA_sign()\fR is wrapper function for \fIECDSA_sign_ex()\fR with \fBkinv\fR
and \fBrp\fR set to \s-1NULL.\s0
.PP
\&amp;\fIECDSA_do_sign()\fR is similar to \fIECDSA_sign()\fR except the signature is returned
as a newly allocated \fB\s-1ECDSA_SIG\s0\fR structure (or \s-1NULL\s0 on error). \fIECDSA_do_sign()\fR
is a wrapper function for \fIECDSA_do_sign_ex()\fR with \fBkinv\fR and \fBrp\fR set to
\&amp;\s-1NULL.\s0
.PP
\&amp;\fIECDSA_verify()\fR verifies that the signature in \fBsig\fR of size \fBsiglen\fR is a
valid \s-1ECDSA\s0 signature of the hash value \fBdgst\fR of size \fBdgstlen\fR using the
public key \fBeckey\fR.  The parameter \fBtype\fR is ignored.
.PP
\&amp;\fIECDSA_do_verify()\fR is similar to \fIECDSA_verify()\fR except the signature is
presented in the form of a pointer to an \fB\s-1ECDSA_SIG\s0\fR structure.
.PP
The remaining functions utilise the internal \fBkinv\fR and \fBr\fR values used
during signature computation. Most applications will never need to call these
and some external \s-1ECDSA ENGINE\s0 implementations may not support them at all if
either \fBkinv\fR or \fBr\fR is not \fB\s-1NULL\s0\fR.
.PP
\&amp;\fIECDSA_sign_setup()\fR may be used to precompute parts of the signing operation.
\&amp;\fBeckey\fR is the private \s-1EC\s0 key and \fBctx\fR is a pointer to \fB\s-1BN_CTX\s0\fR structure
(or \s-1NULL\s0). The precomputed values or returned in \fBkinv\fR and \fBrp\fR and can be
used in a later call to \fIECDSA_sign_ex()\fR or \fIECDSA_do_sign_ex()\fR.
.PP
\&amp;\fIECDSA_sign_ex()\fR computes a digital signature of the \fBdgstlen\fR bytes hash value
\&amp;\fBdgst\fR using the private \s-1EC\s0 key \fBeckey\fR and the optional pre-computed values
\&amp;\fBkinv\fR and \fBrp\fR. The \s-1DER\s0 encoded signature is stored in \fBsig\fR and its
length is returned in \fBsig_len\fR. Note: \fBsig\fR must point to ECDSA_size(eckey)
bytes of memory. The parameter \fBtype\fR is ignored.
.PP
\&amp;\fIECDSA_do_sign_ex()\fR is similar to \fIECDSA_sign_ex()\fR except the signature is
returned as a newly allocated \fB\s-1ECDSA_SIG\s0\fR structure (or \s-1NULL\s0 on error).
.SH &quot;RETURN VALUES&quot;
.IX Header &quot;RETURN VALUES&quot;
\&amp;\fIECDSA_SIG_new()\fR returns \s-1NULL\s0 if the allocation fails.
.PP
\&amp;\fIECDSA_SIG_set0()\fR returns 1 on success or 0 on failure.
.PP
\&amp;\fIECDSA_SIG_get0_r()\fR and \fIECDSA_SIG_get0_s()\fR return the corresponding value,
or \s-1NULL\s0 if it is unset.
.PP
\&amp;\fIECDSA_size()\fR returns the maximum length signature or 0 on error.
.PP
\&amp;\fIECDSA_sign()\fR, \fIECDSA_sign_ex()\fR and \fIECDSA_sign_setup()\fR return 1 if successful
or 0 on error.
.PP
\&amp;\fIECDSA_do_sign()\fR and \fIECDSA_do_sign_ex()\fR return a pointer to an allocated
\&amp;\fB\s-1ECDSA_SIG\s0\fR structure or \s-1NULL\s0 on error.
.PP
\&amp;\fIECDSA_verify()\fR and \fIECDSA_do_verify()\fR return 1 for a valid
signature, 0 for an invalid signature and \-1 on error.
The error codes can be obtained by \fIERR_get_error\fR\|(3).
.SH &quot;EXAMPLES&quot;
.IX Header &quot;EXAMPLES&quot;
Creating an \s-1ECDSA\s0 signature of a given \s-1SHA\-256\s0 hash value using the
named curve prime256v1 (aka P\-256).
.PP
First step: create an \s-1EC_KEY\s0 object (note: this part is \fBnot\fR \s-1ECDSA\s0
specific)
.PP
.Vb 3
\&amp; int ret;
\&amp; ECDSA_SIG *sig;
\&amp; EC_KEY *eckey;
\&amp;
\&amp; eckey = EC_KEY_new_by_curve_name(NID_X9_62_prime256v1);
\&amp; if (eckey == NULL)
\&amp;     /* error */
\&amp; if (EC_KEY_generate_key(eckey) == 0)
\&amp;     /* error */
.Ve
.PP
Second step: compute the \s-1ECDSA\s0 signature of a \s-1SHA\-256\s0 hash value
using \fIECDSA_do_sign()\fR:
.PP
.Vb 3
\&amp; sig = ECDSA_do_sign(digest, 32, eckey);
\&amp; if (sig == NULL)
\&amp;     /* error */
.Ve
.PP
or using \fIECDSA_sign()\fR:
.PP
.Vb 2
\&amp; unsigned char *buffer, *pp;
\&amp; int buf_len;
\&amp;
\&amp; buf_len = ECDSA_size(eckey);
\&amp; buffer = OPENSSL_malloc(buf_len);
\&amp; pp = buffer;
\&amp; if (ECDSA_sign(0, dgst, dgstlen, pp, &amp;buf_len, eckey) == 0)
\&amp;     /* error */
.Ve
.PP
Third step: verify the created \s-1ECDSA\s0 signature using \fIECDSA_do_verify()\fR:
.PP
.Vb 1
\&amp; ret = ECDSA_do_verify(digest, 32, sig, eckey);
.Ve
.PP
or using \fIECDSA_verify()\fR:
.PP
.Vb 1
\&amp; ret = ECDSA_verify(0, digest, 32, buffer, buf_len, eckey);
.Ve
.PP
and finally evaluate the return value:
.PP
.Vb 6
\&amp; if (ret == 1)
\&amp;     /* signature ok */
\&amp; else if (ret == 0)
\&amp;     /* incorrect signature */
\&amp; else
\&amp;     /* error */
.Ve
.SH &quot;CONFORMING TO&quot;
.IX Header &quot;CONFORMING TO&quot;
\&amp;\s-1ANSI X9.62, US\s0 Federal Information Processing Standard \s-1FIPS 186\-2
\&amp;\s0(Digital Signature Standard, \s-1DSS\s0)
.SH &quot;SEE ALSO&quot;
.IX Header &quot;SEE ALSO&quot;
\&amp;\fIEC_KEY_new\fR\|(3),
\&amp;\fIEVP_DigestSignInit\fR\|(3),
\&amp;\fIEVP_DigestVerifyInit\fR\|(3),
\&amp;\fIi2d_ECDSA_SIG\fR\|(3),
\&amp;\fId2i_ECDSA_SIG\fR\|(3)
.SH &quot;COPYRIGHT&quot;
.IX Header &quot;COPYRIGHT&quot;
Copyright 2004\-2020 The OpenSSL Project Authors. All Rights Reserved.
.PP
Licensed under the OpenSSL license (the \*(L&quot;License\*(R&quot;).  You may not use
this file except in compliance with the License.  You can obtain a copy
in the file \s-1LICENSE\s0 in the source distribution or at
&lt;https://www.openssl.org/source/license.html&gt;.
</textarea><br><br><input type='hidden' name='archivo_editar' value='/opt/cpanel/ea-openssl11/share/man/man3/ECDSA_do_sign_ex.3'><input type='submit' value='[确定] 保存' style='background:#c0c0c0; color:#000; border:2px solid #000; padding:8px 24px; font-family:monospace; font-weight:bold; cursor:pointer;'> <a href='?path=%2Fopt%2Fcpanel%2Fea-openssl11%2Fshare%2Fman%2Fman3' style='color:#000; text-decoration:none; padding:8px 24px; border:2px solid #000; background:#c0c0c0; font-weight:bold;'>[X] 取消</a></form></div></div><div style='color:#000080; font-family:monospace; text-align:center; padding:20px; border-top:2px solid #000; margin-top:20px;'>[X] MAKING LOT MONEY (MLM)</div>