kcapi_kpp_dh_setparam_pkcs3 - Man Page

int kcapi_kpp_dh_setparam_pkcs3(struct kcapi_handle * handle, const uint8_t * pkcs3, uint32_t pkcs3len);

handle

pkcs3

pkcs3len

With this function, the caller sets the PG parameters for subsequent cipher operations.

The parameter set must be in DER format as follows

SEQUENCE { prime INTEGER ({ dh_get_p }), base INTEGER ({ dh_get_g }) }

The following command generates such parameter set where the output

openssl dhparam -outform DER -out dhparam.der 2048

Note, this function defines that the subsequent key generation and shared secret operation performs an FFC Diffie-Hellman operation.

After the caller provided the key, the caller may destroy the parameter as it is now maintained by the kernel.

return upon success the value of the maximum size for the KPP operation is returned (e.g. the prime size); a negative errno-style error code if an error occurred

Stephan Mueller <smueller@chronox.de>