akv_rsa_priv_enc function should be for signing about azurekeyvaultmanagedhsmengine HOT 5 CLOSED

this engine only performs private key operations.

from azurekeyvaultmanagedhsmengine.

Ok, but the padding in the function akv_rsa_priv_enc still seems wrong. It should be RS256 or PS256 (for SHA256, other padding for corresponding to hash function) rather than RSA1_5 or RSA_OAEP.

from azurekeyvaultmanagedhsmengine.

Ok, but the padding in the function akv_rsa_priv_enc still seems wrong. It should be RS256 or PS256 (for SHA256, other padding for corresponding to hash function) rather than RSA1_5 or RSA_OAEP.

I think you mix up things for encrypt/decrypt and sign. Those are basics. But for your knowledge, please refer to the doc
https://learn.microsoft.com/en-us/azure/key-vault/keys/about-keys-details

from azurekeyvaultmanagedhsmengine.

I assume that the akv_rsa_priv_enc function is the key vault version of the rsa_ossl_private_encrypt (https://github.com/openssl/openssl/blob/master/crypto/rsa/rsa_ossl.c) function which is for signing. Otherwise, I'm not sure what it means to encrypt with a private key (encryption should be done with the public key).

from azurekeyvaultmanagedhsmengine.

I assume that the akv_rsa_priv_enc function is the key vault version of the rsa_ossl_private_encrypt (https://github.com/openssl/openssl/blob/master/crypto/rsa/rsa_ossl.c) function which is for signing. Otherwise, I'm not sure what it means to encrypt with a private key (encryption should be done with the public key).

Your assumption is wrong. please read the code and try the examples.

from azurekeyvaultmanagedhsmengine.