Global index

Types

Name	Description
ACCESS_DESCRIPTION_st	AccessDescription: access method OID and GeneralName location (RFC 5280 AIA/SIA).
ASIdOrRange_st	RFC 3779 AS identifier: either a single AS number or an ASRange.
ASIdentifierChoice_st	RFC 3779 choice between inheriting AS identifiers and listing them explicitly.
ASIdentifiers_st	RFC 3779 ASIdentifiers extension: AS numbers and routing domain identifiers.
ASN1_ENCODING_st	Saved DER encoding of an ASN.1 value, used when re-emitting the original bytes (for example so invalid encodings do not break signatures).
ASN1_ITEM_st	Opaque ASN.1 item descriptor used by the generic encode/decode/print APIs.
ASN1_TEMPLATE_st	Opaque field descriptor used when building ASN.1 ITEM templates.
ASN1_TLC_st	Opaque ASN.1 tag/length cache (struct ASN1_TLC_st) used while decoding constructed types; layout is private to the ASN.1 implementation.
ASN1_VALUE_st	Opaque ASN.1 value handle used by generic item encode/decode and S/MIME helpers.
ASRange_st	Inclusive Autonomous System Number range used in RFC 3779 ASIdentifiers.
AUTHORITY_KEYID_st	X.509v3 AuthorityKeyIdentifier extension value.
AdmissionSyntax_st	Common PKI AdmissionSyntax extension: admission authority and contents of admissions.
Admissions_st	One admissions entry in Common PKI AdmissionSyntax (authority and profession infos).
BASIC_CONSTRAINTS_st	Basic Constraints extension: whether the subject is a CA and optional path length.
BIO_sock_info_u	Output union for BIO_sock_info(); currently holds a BIO_ADDR pointer.
BIT_STRING_BITNAME_st	Mapping of a named bit in an ASN.1 BIT STRING to its bit number.
CMAC_CTX_st	Opaque CMAC (Cipher-based MAC) context (deprecated; prefer EVP_MAC).
CMS_CertificateChoices	One certificate choice in a CMS SignedData certificates set (X.509, attribute, or other).
CMS_ContentInfo_st	Top-level Cryptographic Message Syntax (CMS) ContentInfo structure.
CMS_EnvelopedData_st	Opaque CMS EnvelopedData: recipient infos and encrypted content info.
CMS_OtherKeyAttribute_st	Optional other-key-attribute identifying material in a CMS KEK RecipientInfo.
CMS_ReceiptRequest_st	ESS receipt request attribute carried on a CMS SignerInfo.
CMS_Receipt_st	ESS signed receipt content verifying that a signed message was received.
CMS_RecipientEncryptedKey_st	Encrypted key for one recipient in a CMS key-agreement (KARI) RecipientInfo.
CMS_RecipientInfo_st	Per-recipient information in a CMS EnvelopedData or AuthEnvelopedData message.
CMS_RevocationInfoChoice_st	One revocation-info choice in a CMS SignedData crls set (CRL or other).
CMS_SignedData_st	CMS SignedData content: digest algorithms, content, certificates, CRLs, and signer infos.
CMS_SignerInfo_st	Opaque CMS SignerInfo: per-signer algorithms, sid, signed/unsigned attrs, and signature.
CONF_VALUE	One configuration entry: section, name, and string value.
CRYPTO_dynlock	Legacy placeholder type once used for dynamic lock callbacks (deprecated).
DES_ks	Legacy DES expanded key schedule (sixteen round subkeys; prefer EVP).
DIST_POINT_NAME_st	Distribution point name: either a full GeneralNames set or a relative name.
DIST_POINT_st	Opaque CRL distribution-point structure from a certificate extension.
DSA_SIG_st	Opaque DSA signature value holding the ASN.1 integers r and s.
ECDSA_SIG_st	Opaque ECDSA signature holding the integers r and s.
EC_builtin_curve	Built-in named curve entry (NID plus a short description).
EDIPartyName_st	EDI party name form of a GeneralName (nameAssigner optional, partyName required).
ENGINE_CMD_DEFN_st	Describes one ENGINE-specific control command for ENGINE_set_cmd_defns().
ERR_string_data_st	Mapping from a packed OpenSSL error code to a human-readable string.
ESS_cert_id	ESS CertID: SHA-1 hash identifying a signing certificate (RFC 2634).
ESS_cert_id_v2_st	ESS CertIDv2: hash identifying a signing certificate with a chosen digest (RFC 5035).
ESS_issuer_serial	ESS IssuerSerial: certificate issuer name and serial number (RFC 2634).
ESS_signing_cert	ESS SigningCertificate attribute listing CertIDs for the signer chain (RFC 2634).
ESS_signing_cert_v2_st	ESS SigningCertificateV2 attribute with CertIDv2 entries (RFC 5035).
EVP_CTRL_TLS1_1_MULTIBLOCK_PARAM	Parameters for TLS 1.1 AES multiblock EVP_CIPHER_CTX_ctrl operations.
GENERAL_NAME_st	X.509 GeneralName: one alternative name form selected by type.
GENERAL_SUBTREE_st	Name Constraints subtree: a base GeneralName with optional minimum/maximum.
IPAddressChoice_st	RFC 3779 choice between inheriting IP address blocks and listing them.
IPAddressFamily_st	RFC 3779 IP address family entry: AFI/SAFI octets plus an address choice.
IPAddressOrRange_st	RFC 3779 IP address: either a prefix or an explicit address range.
IPAddressRange_st	Inclusive IP address range encoded as bit strings (RFC 3779).
ISSUER_SIGN_TOOL_st	Issuer Signing Tool extension naming signing and CA tools and their certificates.
ISSUING_DIST_POINT_st	Opaque Issuing Distribution Point extension value (CRL IDP).
MD4state_st	Incremental MD4 digest state (also typedef'd as MD4_CTX); deprecated low-level API.
MD5state_st	Incremental MD5 digest state (also typedef'd as MD5_CTX); deprecated low-level API.
NAME_CONSTRAINTS_st	Opaque Name Constraints extension value (permitted/excluded subtrees).
NOTICEREF_st	Notice reference: organization name and notice numbers for a user notice qualifier.
NamingAuthority_st	Naming authority identifying who issues profession or admission attributes (Common PKI).
Netscape_certificate_sequence	Netscape Certificate Sequence: a type OID plus a stack of certificates.
Netscape_spkac_st	Netscape Signed Public Key And Challenge (SPKAC) request body.
Netscape_spki_st	Netscape SPKI: an SPKAC plus the signature algorithm and signature bits.
OSSL_HPKE_SUITE	HPKE cipher suite identifying the KEM, KDF, and AEAD algorithms (RFC 9180).
PBE2PARAM_st	PKCS#5 PBES2 parameters: key-derivation function and encryption scheme.
PBEPARAM_st	PKCS#5 PBES1 password-based encryption parameters (salt and iteration count).
PBKDF2PARAM_st	PKCS#5 PBKDF2 parameters: salt, iteration count, optional key length, and PRF.
PKCS12_MAC_DATA_st	MAC salt, iteration count, and digest algorithm for a PKCS#12 PFX integrity check.
PKCS12_SAFEBAG_st	One PKCS#12 safeBag holding a certificate, key, CRL, secret, or nested safeContents.
PKCS12_st	Top-level PKCS#12 PFX structure (version, authSafes, and optional MAC).
PKCS7_CTX_st	Library/provider context carried by PKCS#7 objects when fetching algorithms.
PKEY_USAGE_PERIOD_st	Private key usage period extension giving the interval when the key is valid.
POLICYINFO_st	Single certificate policy: policy OID plus optional qualifiers.
POLICYQUALINFO_st	Certificate policy qualifier: CPS URI, user notice, or other typed value.
POLICY_CONSTRAINTS_st	Policy Constraints extension: requireExplicitPolicy and inhibitPolicyMapping skip counts.
POLICY_MAPPING_st	Mapping from an issuer domain policy OID to a subject domain policy OID.
PROXY_CERT_INFO_EXTENSION_st	Proxy Certificate Information extension (RFC 3820): path length and proxy policy.
PROXY_POLICY_st	Proxy certificate policy: language OID and optional policy octets (RFC 3820).
ProfessionInfo_st	Profession information: naming authority, profession items/OIDs, and registration number.
RIPEMD160state_st	Legacy RIPEMD-160 hashing context (deprecated; prefer EVP_MD APIs).
SCRYPT_PARAMS_st	PKCS#5 scrypt password-based key derivation parameters.
SHA256state_st	Incremental SHA-224 / SHA-256 digest state (also typedef'd as SHA256_CTX); deprecated low-level API.
SHA512state_st	Incremental SHA-384 / SHA-512 digest state (also typedef'd as SHA512_CTX).
SHAstate_st	Incremental SHA-1 digest state (also typedef'd as SHA_CTX); deprecated low-level API.
SRP_VBASE_st	In-memory SRP verifier database loaded from a verifier file.
SRP_gN_cache_st	Cache entry mapping a base64-encoded SRP group parameter to a BIGNUM.
SRP_gN_st	Named SRP group parameters (generator g and safe prime N).
SRP_user_pwd_st	SRP verifier database entry for one user (salt, verifier, and group parameters).
SXNET_ID_st	Strong Extranet (SXNET) zone and user identifier pair.
SXNET_st	Strong Extranet (SXNET) certificate extension value.
TS_accuracy_st	RFC 3161 Accuracy: optional seconds, millis, and micros time precision.
TS_msg_imprint_st	RFC 3161 MessageImprint: hash algorithm and hashed message octets.
TS_req_st	RFC 3161 TimeStampReq: version, message imprint, policy, nonce, and extensions.
TS_resp_ctx	Opaque context used while generating RFC 3161 time-stamp responses.
TS_resp_st	RFC 3161 TimeStampResp: status info and optional signed time-stamp token.
TS_status_info_st	RFC 3161 PKIStatusInfo: status, optional statusString, and failureInfo.
TS_tst_info_st	RFC 3161 TSTInfo: policy, imprint, serial, time, accuracy, and TSA fields.
TS_verify_ctx	Opaque context holding flags and expected values for time-stamp verification.
USERNOTICE_st	User notice policy qualifier: optional notice reference and explicit text.
WHIRLPOOL_CTX	Incremental WHIRLPOOL digest state (deprecated; prefer EVP_MD APIs).
X509V3_CONF_METHOD_st	Callback table for reading configuration database sections used by X509v3 helpers.
X509_POLICY_CACHE_st	Opaque cache of processed certificate policy data used during path validation.
X509_POLICY_LEVEL_st	Opaque single depth level within an X.509 certificate policy tree.
X509_POLICY_NODE_st	Opaque node in an X.509 certificate policy tree.
X509_POLICY_TREE_st	Opaque X.509 certificate policy tree built during path validation (RFC 5280).
X509_VERIFY_PARAM_st	Opaque verification-parameter object (purpose, trust, time, flags, …).
X509_algor_st	Opaque ASN.1 AlgorithmIdentifier (algorithm OID plus optional parameters).
X509_crl_info_st	Opaque TBSCertList / CRL info structure inside an X509_CRL.
X509_crl_st	Opaque X.509 certificate revocation list.
X509_extension_st	Opaque X.509 extension object (OID, criticality, and octet-string value).
X509_info_st	Bundle of certificate, CRL, and/or encrypted private key as found in PEM info files.
X509_name_entry_st	Single Relative Distinguished Name attribute (type OID plus value) within an X509_NAME.
X509_name_st	Opaque X.509 distinguished name (SEQUENCE OF RelativeDistinguishedName).
X509_pubkey_st	Opaque SubjectPublicKeyInfo container (algorithm + public key BIT STRING).
X509_req_info_st	Opaque TBSCertificateRequest / certification request info inside an X509_REQ.
X509_req_st	Opaque PKCS#10 certification request (CertificateRequest).
X509_sig_st	Opaque DigestInfo / encrypted-key structure used by PKCS#8 and related APIs.
X509_val_st	Validity period (notBefore / notAfter) used inside X.509 certificates and CRLs.
aes_key_st	Expanded AES key schedule for the low-level AES_* APIs (deprecated; prefer EVP).
asn1_object_st	Opaque ASN.1 OBJECT IDENTIFIER (OID) value.
asn1_pctx_st	Opaque ASN.1 print context controlling formatting flags for item printers.
asn1_sctx_st	Opaque ASN.1 scan context used while decoding constructed types.
asn1_string_st	ASN.1 INTEGER stored in the generic asn1_string_st representation.
asn1_string_table_st	Table entry describing size limits and encoding masks for an ASN.1 string NID.
asn1_type_st	ASN.1 ANY / CHOICE container holding a typed value and its V_ASN1_* tag.
async_job_st	Opaque state for an asynchronous job.
async_wait_ctx_st	Opaque wait context describing file descriptors an ASYNC_JOB is blocked on.
bf_key_st	Legacy Blowfish expanded key schedule (P-array and S-boxes).
bignum_ctx	Temporary-variable pool used by BIGNUM arithmetic helpers.
bignum_st	Arbitrary-precision integer used throughout OpenSSL's public-key math.
bio_addr_st	Opaque socket address union used by BIO socket and datagram APIs.
bio_addrinfo_st	Opaque linked address-info node returned by BIO_lookup() / BIO_lookup_ex().
bio_method_st	Opaque BIO method table describing how a BIO type reads, writes, and controls I/O.
bio_mmsg_cb_args_st	Argument bundle passed to multi-message BIO callbacks (sendmmsg/recvmmsg).
bio_msg_st	Single message descriptor for BIO_sendmmsg() / BIO_recvmmsg().
bio_poll_descriptor_st	Pollable I/O target returned by BIO_get_rpoll_descriptor / BIO_get_wpoll_descriptor.
bio_st	Opaque Basic I/O abstraction (filters and source/sink streams).
bn_blinding_st	Opaque RSA/modular blinding state (BN_BLINDING_*).
bn_gencb_st	Progress-callback object used by prime generation and similar BN routines.
bn_mont_ctx_st	Montgomery multiplication context for a fixed odd modulus (BN_MONT_CTX_*).
bn_recp_ctx_st	Reciprocal context accelerating repeated modular division/remainder.
buf_mem_st	Growable memory buffer used by BIO memory BIOs and similar helpers.
camellia_key_st	Legacy Camellia expanded key schedule (deprecated low-level type; prefer EVP_CIPHER APIs).
cast_key_st	Legacy CAST-128 expanded key schedule (deprecated low-level type; prefer EVP).
ccm128_context	Opaque context for CRYPTO_ccm128_* Counter with CBC-MAC helpers.
comp_ctx_st	Opaque compression/decompression stream context used with COMP_METHOD.
comp_method_st	Opaque compression method table (zlib, brotli, zstd, and related COMP_* APIs).
conf_imodule_st	Opaque instance of a loaded CONF module (per-section module state).
conf_method_st	Legacy CONF method vtable (deprecated; contents will become opaque).
conf_module_st	Opaque registration record for a CONF DSO module implementation.
conf_st	Opaque NCONF configuration object holding sections and name/value pairs.
crypto_ex_data_st	Opaque bag of application-specific ex_data slots attached to OpenSSL objects.
crypto_threadid_st	Legacy thread-id placeholder retained for API compatibility (no longer used).
ct_policy_eval_ctx_st	Opaque Certificate Transparency policy evaluation context.
ctlog_st	Opaque Certificate Transparency log identity (public key + description).
ctlog_store_st	Opaque store of Certificate Transparency logs trusted for SCT verification.
dh_method	Opaque DH method table (deprecated engine-style DH_METHOD_*).
dh_st	Opaque Diffie-Hellman key/parameters object (deprecated low-level DH_* API).
dsa_method	Opaque DSA_METHOD table of low-level DSA callbacks (deprecated).
dsa_st	Opaque DSA key/parameters object (deprecated low-level DSA_* API).
ec_group_st	Opaque elliptic-curve parameter/group object (field, curve equation, and generator).
ec_key_method_st	Opaque method table customizing EC_KEY operations (deprecated ENGINE-style API).
ec_key_st	Opaque elliptic-curve key containing group parameters and public/private points.
ec_method_st	Opaque description of the field arithmetic and curve methods for an EC_GROUP.
ec_parameters_st	Opaque ASN.1 EcpkParameters / ECParameters encoding helper type.
ec_point_st	Opaque elliptic-curve point (coordinates over the field of an EC_GROUP).
ecpk_parameters_st	ASN.1 EC private-key parameters CHOICE (named curve OID or explicit ECParameters).
engine_st	Opaque cryptographic ENGINE handle for legacy algorithm implementations (deprecated; prefer providers).
err_state_st	Opaque per-thread (or saved) OpenSSL error-queue state.
evp_Encode_Ctx_st	Opaque context for EVP_Encode and EVP_Decode base64 streaming.
evp_asym_cipher_st	Opaque asymmetric cipher method (EVP_ASYM_CIPHER_fetch).
evp_cipher_ctx_st	Opaque symmetric-cipher operation context (EVP_EncryptInit and related EVP_Cipher APIs).
evp_cipher_info_st	Cipher algorithm pointer paired with an initialization vector buffer.
evp_cipher_st	Opaque symmetric cipher method (algorithm implementation) used with EVP_CIPHER_CTX.
evp_kdf_ctx_st	Opaque key-derivation function context (EVP_KDF_CTX_*).
evp_kdf_st	Opaque key-derivation function method returned by EVP_KDF_fetch().
evp_kem_st	Opaque key-encapsulation mechanism algorithm (EVP_KEM_*).
evp_keyexch_st	Opaque key-exchange algorithm method (EVP_KEYEXCH_fetch).
evp_keymgmt_st	Opaque key-management algorithm implementation (provider keymgmt).
evp_mac_ctx_st	Opaque MAC operation context (EVP_MAC_CTX_new / EVP_MAC_init / EVP_MAC_update / EVP_MAC_final).
evp_mac_st	Opaque MAC algorithm (EVP_MAC_fetch / EVP_Q_mac).
evp_md_ctx_st	Opaque message-digest operation context (EVP_Digest* / EVP_DigestSign*).
evp_md_st	Opaque message-digest method (algorithm implementation) used with EVP_MD_CTX.
evp_pkey_asn1_method_st	Opaque ASN.1 method table describing how an EVP_PKEY type is encoded.
evp_pkey_ctx_st	Opaque context for public-key operations (sign, verify, encrypt, derive, keygen, and related controls).
evp_pkey_method_st	Opaque legacy method table implementing an EVP_PKEY algorithm (deprecated in 3.0).
evp_pkey_st	Opaque public/private key handle used throughout the EVP and X.509 APIs.
evp_rand_ctx_st	Opaque RAND operation context created from an EVP_RAND method.
evp_rand_st	Opaque random-number generator method fetched from a provider (DRBG and related).
evp_signature_st	Opaque signature algorithm method (EVP_SIGNATURE_fetch).
gcm128_context	Opaque context for CRYPTO_gcm128_* Galois/Counter Mode helpers.
hmac_ctx_st	Opaque HMAC computation context (legacy HMAC_* API).
hostent	Resolve name with gethostbyname(3) (deprecated; prefer BIO_lookup_ex()).
idea_key_st	Expanded IDEA key schedule for the low-level IDEA_* APIs (deprecated; prefer EVP).
lhash_node_st	Opaque hash-table node used internally by OPENSSL_LHASH.
lhash_st	Opaque dynamic hash table (LHASH) of void* elements.
lhash_st_CONF_VALUE
lhash_st_ERR_STRING_DATA
lhash_st_OPENSSL_CSTRING
lhash_st_OPENSSL_STRING
lhash_st_SSL_SESSION	Hash table of SSL_SESSION objects used for the internal session cache.
mdc2_ctx_st	Incremental MDC-2 digest state (also typedef'd as MDC2_CTX); deprecated low-level API.
obj_name_st	One entry in OpenSSL's name table mapping algorithm names to type-specific data.
ocb128_context	Opaque context for CRYPTO_ocb128_* Offset Codebook Mode helpers.
ocsp_basic_response_st	OCSP BasicOCSPResponse: ResponseData with signature and optional certificates.
ocsp_cert_id_st	OCSP CertID identifying a certificate by issuer name/key hashes and serial (RFC 6960).
ocsp_cert_status_st	OCSP CertStatus CHOICE: good, revoked, or unknown (RFC 6960).
ocsp_crl_id_st	OCSP CrlID extension identifying a CRL by URL, number, or time.
ocsp_one_request_st	Single OCSP request entry with a CertID and optional extensions (RFC 6960).
ocsp_req_info_st	OCSP TBSRequest: version, optional requestor name, request list, and extensions.
ocsp_request_st	OCSP Request message containing TBSRequest and optional signature (RFC 6960).
ocsp_resp_bytes_st	OCSP ResponseBytes: responseType OID and response OCTET STRING payload.
ocsp_responder_id_st	Opaque OCSP ResponderID (byName or byKey).
ocsp_response_data_st	OCSP ResponseData (tbsResponseData): version, ResponderID, producedAt, and responses.
ocsp_response_st	Opaque OCSP response structure (RFC 6960).
ocsp_revoked_info_st	OCSP RevokedInfo: revocation time and optional CRL reason (RFC 6960).
ocsp_service_locator_st	OCSP ServiceLocator extension with issuer name and locator AccessDescriptions.
ocsp_signature_st	Optional signature over an OCSP request, with algorithm and certificates.
ocsp_single_response_st	OCSP SingleResponse for one CertID: status, thisUpdate, nextUpdate, and extensions.
openssl_core_ctx_st	Opaque core-side library context handle passed across the provider boundary.
ossl_algorithm_st	Opaque provider algorithm description (name, property, implementation).
ossl_cmp_certrepmessage_st	CertRepMessage from RFC 4210 section 5.3.3: CA Pubs and certResponse sequence.
ossl_cmp_certresponse_st	CertResponse from RFC 4210 section 5.3.3: certReqId, status, and optional cert/key.
ossl_cmp_certstatus_st	CertStatus from RFC 4210 section 5.3.18: certHash and certReqId for certConf.
ossl_cmp_ctx_st	Opaque CMP client or server context holding transaction state and options.
ossl_cmp_itav_st	Opaque InfoTypeAndValue (ITAV) key-value pair used in CMP messages (RFC 4210 section 5.3.19).
ossl_cmp_msg_st	Opaque PKIMessage structure (PKIHeader and body) from RFC 4210.
ossl_cmp_pkiheader_st	Opaque PKIHeader structure for a CMP PKIMessage (RFC 4210 section 5.2).
ossl_cmp_pkisi_st	Opaque PKIStatusInfo structure with status, statusString, and failInfo (RFC 4210 section 5.3.14).
ossl_cmp_pollrep_st	Opaque PollRepContent entry with certReqId, checkAfter, and optional reason (RFC 4210 section 5.3.22).
ossl_cmp_revrepcontent_st	RevRepContent from RFC 4210 section 5.3.4: status for each certReqId in an RR.
ossl_cmp_srv_ctx_st	Opaque CMP server context holding callbacks and server-side state.
ossl_core_bio_st	Opaque core-side BIO handle passed across the provider boundary for upcalls.
ossl_core_handle_st	Opaque core handle passed to a provider's OSSL_provider_init() for upcalls.
ossl_crmf_attributetypeandvalue_st	AttributeTypeAndValue for CRMF regCtrl or regInfo attributes.
ossl_crmf_certid_st	CertId from RFC 4211: issuer GeneralName and certificate serial number.
ossl_crmf_certrequest_st	CertRequest from RFC 4211: certReqId, certTemplate, and optional controls.
ossl_crmf_certtemplate_st	CertTemplate from RFC 4211: selected certificate fields for a requested certificate.
ossl_crmf_encryptedvalue_st	EncryptedValue from RFC 4211: optional algorithm identifiers and an encrypted bit string.
ossl_crmf_msg_st	CertReqMsg from RFC 4211: certificate request, optional proof-of-possession, and optional regInfo.
ossl_crmf_optionalvalidity_st	OptionalValidity from RFC 4211: optional notBefore and notAfter times in a certTemplate.
ossl_crmf_pbmparameter_st	PBMParameter from RFC 4211: salt, one-way function, iteration count, and MAC algorithm.
ossl_crmf_pkipublicationinfo_st	PKIPublicationInfo from RFC 4211 section 6.3: publication action and optional SinglePubInfo list.
ossl_crmf_poposigningkey_st	POPOSigningKey from RFC 4211: optional POPOSigningKeyInput, algorithm identifier, and signature.
ossl_crmf_singlepubinfo_st	SinglePubInfo from RFC 4211: publication method and optional publication location.
ossl_decoder_ctx_st	Opaque context that drives OSSL_DECODER providers when decoding keys/objects.
ossl_decoder_instance_st	Opaque pairing of an OSSL_DECODER with its per-instance decoder context during a decode run.
ossl_decoder_st	Opaque decoder method that converts external key/cert encodings into OpenSSL objects.
ossl_dispatch_st	Function-pointer dispatch table entry exchanged between libcrypto and providers.
ossl_encoder_ctx_st	Opaque encoder context that drives OSSL_ENCODER output of keys and related objects.
ossl_encoder_instance_st	Opaque pairing of an OSSL_ENCODER with its per-instance encoder context during an encode run.
ossl_encoder_st	Opaque encoder method that serializes keys and related objects.
ossl_hpke_ctx_st	Opaque HPKE session state holding secrets and sequence for sender or receiver role.
ossl_http_req_ctx_st	Opaque HTTP request context used by OSSL_HTTP_* client helpers.
ossl_init_settings_st	Opaque OpenSSL library initialization settings passed to OPENSSL_init_crypto().
ossl_item_st	Opaque provider item pairing an identifier with a pointer payload.
ossl_lib_ctx_st	Opaque library context that scopes providers, properties, and algorithm fetches.
ossl_param_bld_st	Opaque builder that assembles a dynamic OSSL_PARAM array.
ossl_param_st	Key/type/data triple used to pass parameters across provider boundaries.
ossl_provider_st	Opaque provider object representing a loaded algorithm implementation module.
ossl_self_test_st	Opaque self-test event object used by provider FIPS self-test callbacks.
ossl_store_ctx_st	Opaque context for an open OSSL_STORE channel to a URI or BIO.
ossl_store_info_st	Opaque object returned by OSSL_STORE describing a loaded key, cert, or CRL.
ossl_store_loader_ctx_st	Opaque per-open context used by a deprecated ENGINE-based store loader.
ossl_store_loader_st	Opaque OSSL_STORE loader implementation for a URI scheme.
ossl_store_search_st	Opaque search criterion object used with OSSL_STORE_expect / find APIs.
otherName_st	otherName form of a GeneralName: an OID typed value.
pkcs12_bag_st	Bag payload choice structure (certBag, crlBag, secretBag, or other ASN.1 value).
pkcs7_digest_st	PKCS#7 DigestedData content: digest algorithm, encapsulated content, and message digest.
pkcs7_enc_content_st	PKCS#7 EncryptedContentInfo: content type, content-encryption algorithm, and ciphertext.
pkcs7_encrypted_st	PKCS#7 EncryptedData content: encrypted content info.
pkcs7_enveloped_st	PKCS#7 EnvelopedData content: per-recipient key infos and encrypted content.
pkcs7_issuer_and_serial_st	Issuer name and certificate serial number identifying a PKCS#7 signer or recipient.
pkcs7_recip_info_st	PKCS#7 RecipientInfo: recipient identity and encrypted content-encryption key.
pkcs7_signed_st	PKCS#7 SignedData content: digests, optional certificates/CRLs, signer infos, and encapsulated content.
pkcs7_signedandenveloped_st	PKCS#7 SignedAndEnvelopedData content: digests, optional certificates/CRLs, signer infos, per-recipient key infos, and encrypted content.
pkcs7_signer_info_st	PKCS#7 SignerInfo: identity, digest/signature algorithms, attributes, and signature.
pkcs7_st	PKCS#7 ContentInfo container holding typed content and related state.
pkcs8_priv_key_info_st	Opaque PKCS#8 PrivateKeyInfo structure (RFC 5208).
private_key_st	PKCS#8 encrypted private key container used with PEM reading/writing.
rand_drbg_st	Legacy deterministic random bit generator handle (deprecated; prefer EVP_RAND).
rand_meth_st	Legacy RAND method table (deprecated; prefer EVP_RAND providers).
rc2_key_st	Expanded RC2 key schedule used by the deprecated low-level RC2_* encryptors.
rc4_key_st	Legacy RC4 key stream state (deprecated; prefer EVP_CIPHER APIs).
rsa_meth_st	Opaque RSA method table for ENGINE-style RSA implementations (deprecated).
rsa_oaep_params_st	Opaque RSAES-OAEP parameter structure (hashFunc / maskGenFunc / pSourceFunc).
rsa_pss_params_st	Opaque RSASSA-PSS parameter structure (hashAlg / maskGenAlg / saltLength / trailerField).
rsa_st	Opaque RSA key object (deprecated; prefer EVP_PKEY).
sct_ctx_st	Opaque context used when verifying Certificate Transparency SCTs.
sct_st	Opaque Certificate Transparency Signed Certificate Timestamp.
seed_key_st	Legacy SEED expanded key schedule (deprecated low-level type; prefer EVP).
srtp_protection_profile_st	SRTP protection profile for the use_srtp DTLS extension (RFC 5764).
ssl_cipher_st	Opaque description of an SSL/TLS cipher suite.
ssl_comp_st	Opaque SSL/TLS compression method entry.
ssl_conf_ctx_st	Opaque configuration context used with the SSL_CONF_* command API.
ssl_conn_close_info_st	Information describing why and how a QUIC connection was closed.
ssl_ctx_st	Opaque TLS/DTLS/QUIC context holding shared configuration and certificates.
ssl_dane_st	Opaque DANE (DNS-based Authentication of Named Entities) state for TLS.
ssl_method_st	Opaque SSL/TLS protocol method table used with SSL_CTX_new and related APIs.
ssl_poll_item_st	One pollable resource and event masks for an SSL_poll() array entry.
ssl_session_st	Opaque SSL/TLS session state used for resumption and caching.
ssl_shutdown_ex_args_st	Extended arguments for SSL_shutdown_ex() (currently QUIC-specific).
ssl_st	Opaque TLS/DTLS/QUIC connection object.
ssl_stream_reset_args_st	Arguments for SSL_stream_reset() describing how a QUIC stream is aborted.
st_dynamic_MEM_fns	Memory-management callbacks passed into a dynamically loaded ENGINE.
st_dynamic_fns	Callbacks and static-state cookie passed when binding a dynamic ENGINE.
stack_st	Opaque generic pointer stack; prefer the typed STACK_OF(...) wrappers.
stack_st_ACCESS_DESCRIPTION	Opaque STACK_OF(ACCESS_DESCRIPTION) container type.
stack_st_ADMISSIONS	Opaque STACK_OF(ADMISSIONS) container type.
stack_st_ASIdOrRange	Opaque STACK_OF(ASIdOrRange) container type.
stack_st_ASN1_GENERALSTRING	Opaque STACK_OF(ASN1_GENERALSTRING) container type.
stack_st_ASN1_INTEGER	Opaque STACK_OF(ASN1_INTEGER) container type.
stack_st_ASN1_OBJECT
stack_st_ASN1_STRING
stack_st_ASN1_STRING_TABLE	Opaque STACK_OF(ASN1_STRING_TABLE) container type.
stack_st_ASN1_TYPE	Opaque STACK_OF(ASN1_TYPE) container type.
stack_st_ASN1_UTF8STRING	Opaque STACK_OF(ASN1_UTF8STRING) container type.
stack_st_BIGNUM	STACK_OF container for mutable BIGNUM pointers.
stack_st_BIGNUM_const	STACK_OF container for const BIGNUM pointers.
stack_st_BIO	Opaque STACK_OF(BIO) container type.
stack_st_CMS_RecipientEncryptedKey
stack_st_CMS_RecipientInfo
stack_st_CMS_RevocationInfoChoice	Opaque STACK_OF(CMS_RevocationInfoChoice) container type.
stack_st_CMS_SignerInfo	Opaque STACK_OF(CMS_SignerInfo) container type.
stack_st_CONF_IMODULE	Opaque STACK_OF(CONF_IMODULE) container type for per-section module instances.
stack_st_CONF_MODULE	Opaque STACK_OF(CONF_MODULE) container type for loaded DSO configuration modules.
stack_st_CONF_VALUE
stack_st_CTLOG	Opaque STACK_OF(CTLOG) container type.
stack_st_DIST_POINT	Opaque STACK_OF(DIST_POINT) container type.
stack_st_ESS_CERT_ID
stack_st_ESS_CERT_ID_V2
stack_st_GENERAL_NAME	Opaque STACK_OF(GENERAL_NAME) container type.
stack_st_GENERAL_NAMES	Opaque STACK_OF(GENERAL_NAMES) container type.
stack_st_GENERAL_SUBTREE	Opaque STACK_OF(GENERAL_SUBTREE) container type.
stack_st_IPAddressFamily	Opaque STACK_OF(IPAddressFamily) container type.
stack_st_IPAddressOrRange	Opaque STACK_OF(IPAddressOrRange) container type.
stack_st_OCSP_CERTID
stack_st_OCSP_ONEREQ
stack_st_OCSP_RESPID
stack_st_OCSP_SINGLERESP
stack_st_OPENSSL_BLOCK
stack_st_OPENSSL_CSTRING
stack_st_OPENSSL_PSTRING
stack_st_OPENSSL_STRING
stack_st_OSSL_CMP_CERTREPMESSAGE
stack_st_OSSL_CMP_CERTRESPONSE
stack_st_OSSL_CMP_CERTSTATUS
stack_st_OSSL_CMP_ITAV
stack_st_OSSL_CMP_PKISI
stack_st_OSSL_CRMF_CERTID
stack_st_OSSL_CRMF_MSG
stack_st_PKCS12_SAFEBAG
stack_st_PKCS7	Opaque STACK_OF(PKCS7) container type.
stack_st_PKCS7_RECIP_INFO	Opaque STACK_OF(PKCS7_RECIP_INFO) container type.
stack_st_PKCS7_SIGNER_INFO
stack_st_POLICYINFO	Opaque STACK_OF(POLICYINFO) container type.
stack_st_POLICYQUALINFO
stack_st_POLICY_MAPPING	Opaque STACK_OF(POLICY_MAPPING) container type.
stack_st_PROFESSION_INFO	Opaque STACK_OF(PROFESSION_INFO) container type.
stack_st_SCT
stack_st_SRP_gN
stack_st_SRP_gN_cache
stack_st_SRP_user_pwd
stack_st_SRTP_PROTECTION_PROFILE	Opaque STACK_OF(SRTP_PROTECTION_PROFILE) container type.
stack_st_SSL_CIPHER
stack_st_SSL_COMP	Opaque STACK_OF(SSL_COMP) container type.
stack_st_SXNETID	Opaque STACK_OF(SXNETID) container type.
stack_st_UI_STRING	Opaque STACK_OF(UI_STRING) container type.
stack_st_X509
stack_st_X509V3_EXT_METHOD	Opaque STACK_OF(X509V3_EXT_METHOD) container type.
stack_st_X509_ALGOR
stack_st_X509_ATTRIBUTE
stack_st_X509_CRL	Opaque STACK_OF(X509_CRL) container type.
stack_st_X509_EXTENSION
stack_st_X509_INFO
stack_st_X509_LOOKUP	Opaque STACK_OF(X509_LOOKUP) container type.
stack_st_X509_NAME
stack_st_X509_NAME_ENTRY	Opaque STACK_OF(X509_NAME_ENTRY) container type.
stack_st_X509_OBJECT
stack_st_X509_POLICY_NODE
stack_st_X509_PURPOSE	Opaque STACK_OF(X509_PURPOSE) container type.
stack_st_X509_REVOKED	Opaque STACK_OF(X509_REVOKED) container type.
stack_st_X509_TRUST	Opaque STACK_OF(X509_TRUST) container type.
stack_st_X509_VERIFY_PARAM	Opaque STACK_OF(X509_VERIFY_PARAM) container type.
stack_st_void
tls_session_ticket_ext_st	TLS session-ticket extension payload (length plus opaque data bytes).
tls_sigalgs_st	Opaque container for TLS signature algorithm preferences.
txt_db_st	In-memory text database parsed from newline-separated, comma-separated rows.
ui_method_st	Opaque UI_METHOD table implementing interactive user prompting.
ui_st	Opaque interactive user-interface object used with UI_METHOD prompting.
ui_string_st	Prompt or output string entry stored in a UI for method writers to consume.
v3_ext_ctx	Opaque context passed to X.509v3 extension helpers (issuer/subject/cert/request).
v3_ext_method	Method table describing encode/decode/print behaviour for one X.509v3 extension NID.
x509_attributes_st	Opaque X.509 Attribute (AttributeTypeAndValue sequence) used in CSRs and PKCS#12.
x509_cert_aux_st	Auxiliary trust/reject OID lists and related metadata attached to an X509.
x509_cinf_st	Opaque TBSCertificate structure holding the unsigned certificate fields.
x509_crl_method_st	Opaque method table customizing CRL lookup/verification behaviour.
x509_lookup_method_st	Opaque method table describing how an X509_LOOKUP finds certificates/CRLs.
x509_lookup_st	Opaque certificate/CRL lookup method instance attached to an X509_STORE.
x509_object_st	Opaque X509_STORE cache entry holding a certificate or CRL.
x509_purpose_st	Certificate purpose entry used by X509_check_purpose and related helpers.
x509_revoked_st	Opaque single revoked-certificate entry within an X509_CRL.
x509_sig_info_st	Opaque signature metadata (security bits / TLS usage flags) for an X.509 signature.
x509_st	Opaque X.509 certificate (RFC 5280 Certificate).
x509_store_ctx_st	Opaque certificate-verification context (one chain validation attempt).
x509_store_st	Opaque trust store of certificates and CRLs used during verification.
x509_trust_st	Entry describing a named X.509 trust purpose and its checker callback.
xts128_context	Opaque context holding the two keys used by CRYPTO_xts128_encrypt().

Type Aliases

Name	Description
ACCESS_DESCRIPTION	AccessDescription: access method OID and GeneralName location (RFC 5280 AIA/SIA).
ADMISSIONS	One admissions entry in Common PKI AdmissionSyntax (authority and profession infos).
ADMISSION_SYNTAX	Common PKI AdmissionSyntax extension: admission authority and contents of admissions.
AES_KEY	Expanded AES key schedule for the low-level AES_* APIs (deprecated; prefer EVP).
ASIdOrRange	RFC 3779 AS identifier: either a single AS number or an ASRange.
ASIdOrRanges	Stack of ASIdOrRange values used in an ASIdentifierChoice.
ASIdentifierChoice	RFC 3779 choice between inheriting AS identifiers and listing them explicitly.
ASIdentifiers	RFC 3779 ASIdentifiers extension: AS numbers and routing domain identifiers.
ASN1_BIT_STRING	ASN.1 BIT STRING stored in the generic asn1_string_st representation.
ASN1_BMPSTRING	ASN.1 BMPString (UCS-2 / Basic Multilingual Plane) stored as an asn1_string_st.
ASN1_BOOLEAN	ASN.1 BOOLEAN represented as an int (-1 unset, 0 FALSE, 0xff TRUE).
ASN1_ENCODING	Saved DER encoding of an ASN.1 value, used when re-emitting the original bytes (for example so invalid encodings do not break signatures).
ASN1_ENUMERATED	ASN.1 ENUMERATED stored in the generic asn1_string_st representation.
ASN1_GENERALIZEDTIME	ASN.1 GeneralizedTime value stored as an asn1_string_st.
ASN1_GENERALSTRING	ASN.1 GeneralString stored in the generic asn1_string_st representation.
ASN1_IA5STRING	ASN.1 IA5String stored in the generic asn1_string_st representation.
ASN1_INTEGER	ASN.1 INTEGER stored in the generic asn1_string_st representation.
ASN1_ITEM	Opaque ASN.1 item descriptor used by the generic encode/decode/print APIs.
ASN1_ITEM_EXP	Function type that returns a pointer to a static ASN1_ITEM descriptor.
ASN1_NULL	ASN.1 NULL placeholder type (no payload).
ASN1_OBJECT	Opaque ASN.1 OBJECT IDENTIFIER (OID) value.
ASN1_OCTET_STRING	ASN.1 OCTET STRING stored in the generic asn1_string_st representation.
ASN1_PCTX	Opaque ASN.1 print context controlling formatting flags for item printers.
ASN1_PRINTABLESTRING	ASN.1 PrintableString stored as an asn1_string_st.
ASN1_SCTX	Opaque ASN.1 scan context used while decoding constructed types.
ASN1_SEQUENCE_ANY	Stack of ASN1_TYPE values representing SEQUENCE OF ANY or SET OF ANY.
ASN1_STRING	Generic ASN.1 string container (length, type, and data bytes).
ASN1_STRING_TABLE	Table entry describing size limits and encoding masks for an ASN.1 string NID.
ASN1_T61STRING	ASN.1 TeletexString/T61String stored as an asn1_string_st.
ASN1_TEMPLATE	Opaque field descriptor used when building ASN.1 ITEM templates.
ASN1_TIME	ASN.1 Time choice (UTCTime or GeneralizedTime) stored as an asn1_string_st.
ASN1_TLC	Opaque ASN.1 tag/length cache (struct ASN1_TLC_st) used while decoding constructed types; layout is private to the ASN.1 implementation.
ASN1_TYPE	ASN.1 ANY / CHOICE container holding a typed value and its V_ASN1_* tag.
ASN1_UNIVERSALSTRING	ASN.1 UniversalString stored as an asn1_string_st.
ASN1_UTCTIME	ASN.1 UTCTime value stored as an asn1_string_st.
ASN1_UTF8STRING	ASN.1 UTF8String stored as an asn1_string_st.
ASN1_VALUE	Opaque ASN.1 value handle used by generic item encode/decode and S/MIME helpers.
ASN1_VISIBLESTRING	ASN.1 VisibleString stored in the generic asn1_string_st representation.
ASRange	Inclusive Autonomous System Number range used in RFC 3779 ASIdentifiers.
ASYNC_JOB	Opaque state for an asynchronous job.
ASYNC_WAIT_CTX	Opaque wait context describing file descriptors an ASYNC_JOB is blocked on.
ASYNC_callback_fn	Callback invoked when an asynchronous wait context is ready.
ASYNC_stack_alloc_fn	Allocate a stack for an asynchronous job (POSIX custom stack allocator).
ASYNC_stack_free_fn	Free a stack previously returned by an ASYNC_stack_alloc_fn callback.
AUTHORITY_INFO_ACCESS	Authority Information Access extension: stack of ACCESS_DESCRIPTION entries.
AUTHORITY_KEYID	X.509v3 AuthorityKeyIdentifier extension value.
BASIC_CONSTRAINTS	Basic Constraints extension: whether the subject is a CA and optional path length.
BF_KEY	Legacy Blowfish expanded key schedule (P-array and S-boxes).
BIGNUM	Arbitrary-precision integer used throughout OpenSSL's public-key math.
BIO	Opaque Basic I/O abstraction (filters and source/sink streams).
BIO_ADDR	Opaque socket address union used by BIO socket and datagram APIs.
BIO_ADDRINFO	Opaque linked address-info node returned by BIO_lookup() / BIO_lookup_ex().
BIO_METHOD	Opaque BIO method table describing how a BIO type reads, writes, and controls I/O.
BIO_MMSG_CB_ARGS	Argument bundle passed to multi-message BIO callbacks (sendmmsg/recvmmsg).
BIO_MSG	Single message descriptor for BIO_sendmmsg() / BIO_recvmmsg().
BIO_POLL_DESCRIPTOR	Pollable I/O target returned by BIO_get_rpoll_descriptor / BIO_get_wpoll_descriptor.
BIO_callback_fn	Legacy BIO callback invoked immediately before and after I/O operations (deprecated).
BIO_callback_fn_ex	Extended BIO callback invoked immediately before and after I/O operations.
BIO_dgram_sctp_notification_handler_fn	Callback invoked when an SCTP datagram BIO receives a notification message.
BIO_info_cb	Ctrl-style info callback type used with BIO_callback_ctrl() / BIO_set_info_callback().
BIT_STRING_BITNAME	Mapping of a named bit in an ASN.1 BIT STRING to its bit number.
BN_BLINDING	Opaque RSA/modular blinding state (BN_BLINDING_*).
BN_CTX	Temporary-variable pool used by BIGNUM arithmetic helpers.
BN_GENCB	Progress-callback object used by prime generation and similar BN routines.
BN_MONT_CTX	Montgomery multiplication context for a fixed odd modulus (BN_MONT_CTX_*).
BN_RECP_CTX	Reciprocal context accelerating repeated modular division/remainder.
BUF_MEM	Growable memory buffer used by BIO memory BIOs and similar helpers.
CAMELLIA_KEY	Typedef alias for struct camellia_key_st used by the deprecated Camellia_* primitives.
CAST_KEY	Legacy CAST-128 expanded key schedule (deprecated low-level type; prefer EVP).
CCM128_CONTEXT	Opaque context for CRYPTO_ccm128_* Counter with CBC-MAC helpers.
CERTIFICATEPOLICIES	Certificate Policies extension: stack of POLICYINFO entries.
CMAC_CTX	Opaque CMAC (Cipher-based MAC) context (deprecated; prefer EVP_MAC).
CMS_CertificateChoices	One certificate choice in a CMS SignedData certificates set (X.509, attribute, or other).
CMS_ContentInfo	Top-level Cryptographic Message Syntax (CMS) ContentInfo structure.
CMS_EnvelopedData	Opaque CMS EnvelopedData: recipient infos and encrypted content info.
CMS_OtherKeyAttribute	Optional other-key-attribute identifying material in a CMS KEK RecipientInfo.
CMS_Receipt	ESS signed receipt content verifying that a signed message was received.
CMS_ReceiptRequest	ESS receipt request attribute carried on a CMS SignerInfo.
CMS_RecipientEncryptedKey	Encrypted key for one recipient in a CMS key-agreement (KARI) RecipientInfo.
CMS_RecipientInfo	Per-recipient information in a CMS EnvelopedData or AuthEnvelopedData message.
CMS_RevocationInfoChoice	One revocation-info choice in a CMS SignedData crls set (CRL or other).
CMS_SignedData	CMS SignedData content: digest algorithms, content, certificates, CRLs, and signer infos.
CMS_SignerInfo	Opaque CMS SignerInfo: per-signer algorithms, sid, signed/unsigned attrs, and signature.
COMP_CTX	Opaque compression/decompression stream context used with COMP_METHOD.
COMP_METHOD	Opaque compression method table (zlib, brotli, zstd, and related COMP_* APIs).
CONF	Opaque NCONF configuration object holding sections and name/value pairs.
CONF_IMODULE	Opaque instance of a loaded CONF module (per-section module state).
CONF_METHOD	Legacy CONF vtable type (see struct conf_method_st in conftypes.h).
CONF_MODULE	Opaque registration record for a CONF DSO module implementation.
CRL_DIST_POINTS	CRL Distribution Points extension: stack of DIST_POINT entries.
CRYPTO_EX_DATA	Opaque bag of application-specific ex_data slots attached to OpenSSL objects.
CRYPTO_EX_dup	Callback that duplicates one ex_data slot when an object is copied.
CRYPTO_EX_free	Callback invoked when an ex_data slot is freed or the owning object is destroyed.
CRYPTO_EX_new	Callback invoked when a new ex_data slot is first associated with an object.
CRYPTO_ONCE	Once-control type used with CRYPTO_THREAD_run_once() on POSIX builds.
CRYPTO_RWLOCK	Opaque read/write lock used by CRYPTO_THREAD_* and CRYPTO_atomic_* helpers.
CRYPTO_THREADID	Legacy thread-id placeholder retained for API compatibility (no longer used).
CRYPTO_THREAD_ID	Platform thread identifier used by CRYPTO_THREAD_get_current_id() and friends.
CRYPTO_THREAD_LOCAL	Platform thread-local storage key used by CRYPTO_THREAD_*_local().
CRYPTO_free_fn	Deallocator callback type used by CRYPTO_set_mem_functions().
CRYPTO_malloc_fn	Allocator callback type used by CRYPTO_set_mem_functions().
CRYPTO_realloc_fn	Reallocator callback type used by CRYPTO_set_mem_functions().
CTLOG	Opaque Certificate Transparency log identity (public key + description).
CTLOG_STORE	Opaque store of Certificate Transparency logs trusted for SCT verification.
CT_POLICY_EVAL_CTX	Opaque Certificate Transparency policy evaluation context.
DES_LONG	Host unsigned word type used by low-level DES block primitives.
DES_cblock	Eight-byte DES block (key or data) used by the legacy DES_* APIs.
DES_key_schedule	Legacy DES expanded key schedule (sixteen round subkeys; prefer EVP).
DH	Opaque Diffie-Hellman key/parameters object (deprecated low-level DH_* API).
DH_METHOD	Opaque DH method table (deprecated engine-style DH_METHOD_*).
DIST_POINT	Opaque CRL distribution-point structure from a certificate extension.
DIST_POINT_NAME	Distribution point name: either a full GeneralNames set or a relative name.
DSA	Opaque DSA key/parameters object (deprecated low-level DSA_* API).
DSA_METHOD	Opaque DSA_METHOD table of low-level DSA callbacks (deprecated).
DSA_SIG	Opaque DSA signature value holding the ASN.1 integers r and s.
DTLS_timer_cb	Callback that chooses the next DTLS retransmission timeout in microseconds.
ECDSA_SIG	Opaque ECDSA signature holding the integers r and s.
ECPARAMETERS	Opaque ASN.1 EcpkParameters / ECParameters encoding helper type.
ECPKPARAMETERS	ASN.1 EC private-key parameters CHOICE (named curve OID or explicit ECParameters).
EC_GROUP	Opaque elliptic-curve parameter/group object (field, curve equation, and generator).
EC_KEY	Opaque elliptic-curve key containing group parameters and public/private points.
EC_KEY_METHOD	Opaque method table customizing EC_KEY operations (deprecated ENGINE-style API).
EC_METHOD	Opaque description of the field arithmetic and curve methods for an EC_GROUP.
EC_POINT	Opaque elliptic-curve point (coordinates over the field of an EC_GROUP).
EDIPARTYNAME	EDI party name form of a GeneralName (nameAssigner optional, partyName required).
ENGINE	Opaque cryptographic ENGINE handle for legacy algorithm implementations (deprecated; prefer providers).
ENGINE_CIPHERS_PTR	ENGINE ciphers handler: list supported NIDs or return an EVP_CIPHER for a NID.
ENGINE_CMD_DEFN	Describes one ENGINE-specific control command for ENGINE_set_cmd_defns().
ENGINE_CTRL_FUNC_PTR	ENGINE control-command handler (same calling convention as ENGINE_ctrl()).
ENGINE_DIGESTS_PTR	ENGINE digests handler: list supported NIDs or return an EVP_MD for a NID.
ENGINE_GEN_FUNC_PTR	Generic ENGINE callback with no parameters.
ENGINE_GEN_INT_FUNC_PTR	Generic ENGINE callback receiving the ENGINE being operated on.
ENGINE_LOAD_KEY_PTR	Callback that loads a key from an ENGINE-backed store.
ENGINE_PKEY_ASN1_METHS_PTR	ENGINE ASN.1 method handler: list supported NIDs or return an EVP_PKEY_ASN1_METHOD.
ENGINE_PKEY_METHS_PTR	ENGINE public-key method handler: list supported NIDs or return an EVP_PKEY_METHOD.
ENGINE_SSL_CLIENT_CERT_PTR	ENGINE callback that supplies a client certificate and key for an SSL connection.
ENUMERATED_NAMES	BIT_STRING_BITNAME entry describing a named ASN.1 ENUMERATED value (long name / short name / number).
ERR_STATE	Opaque per-thread (or saved) OpenSSL error-queue state.
ERR_STRING_DATA	Mapping from a packed OpenSSL error code to a human-readable string.
ESS_CERT_ID	ESS CertID: SHA-1 hash identifying a signing certificate (RFC 2634).
ESS_CERT_ID_V2	ESS CertIDv2: hash identifying a signing certificate with a chosen digest (RFC 5035).
ESS_ISSUER_SERIAL	ESS IssuerSerial: certificate issuer name and serial number (RFC 2634).
ESS_SIGNING_CERT	ESS SigningCertificate attribute listing CertIDs for the signer chain (RFC 2634).
ESS_SIGNING_CERT_V2	ESS SigningCertificateV2 attribute with CertIDv2 entries (RFC 5035).
EVP_ASYM_CIPHER	Opaque asymmetric cipher method (EVP_ASYM_CIPHER_fetch).
EVP_CIPHER	Opaque symmetric cipher method (algorithm implementation) used with EVP_CIPHER_CTX.
EVP_CIPHER_CTX	Opaque symmetric-cipher operation context (EVP_EncryptInit and related EVP_Cipher APIs).
EVP_CIPHER_INFO	Cipher algorithm pointer paired with an initialization vector buffer.
EVP_ENCODE_CTX	Opaque context for EVP_Encode and EVP_Decode base64 streaming.
EVP_KDF	Opaque key-derivation function method returned by EVP_KDF_fetch().
EVP_KDF_CTX	Opaque key-derivation function context (EVP_KDF_CTX_*).
EVP_KEM	Opaque key-encapsulation mechanism algorithm (EVP_KEM_*).
EVP_KEYEXCH	Opaque key-exchange algorithm method (EVP_KEYEXCH_fetch).
EVP_KEYMGMT	Opaque key-management algorithm implementation (provider keymgmt).
EVP_MAC	Opaque MAC algorithm (EVP_MAC_fetch / EVP_Q_mac).
EVP_MAC_CTX	Opaque MAC operation context (EVP_MAC_CTX_new / EVP_MAC_init / EVP_MAC_update / EVP_MAC_final).
EVP_MD	Opaque message-digest method (algorithm implementation) used with EVP_MD_CTX.
EVP_MD_CTX	Opaque message-digest operation context (EVP_Digest* / EVP_DigestSign*).
EVP_PBE_KEYGEN	Callback type that derives a key/IV from a password and initializes a cipher context for PBE.
EVP_PBE_KEYGEN_EX	Extended password-based encryption key-setup callback with library context support.
EVP_PKEY	Opaque public/private key handle used throughout the EVP and X.509 APIs.
EVP_PKEY_ASN1_METHOD	Opaque ASN.1 method table describing how an EVP_PKEY type is encoded.
EVP_PKEY_CTX	Opaque context for public-key operations (sign, verify, encrypt, derive, keygen, and related controls).
EVP_PKEY_METHOD	Opaque legacy method table implementing an EVP_PKEY algorithm (deprecated in 3.0).
EVP_PKEY_gen_cb	Callback type invoked during key or parameter generation to report progress or cancel.
EVP_RAND	Opaque random-number generator method fetched from a provider (DRBG and related).
EVP_RAND_CTX	Opaque RAND operation context created from an EVP_RAND method.
EVP_SIGNATURE	Opaque signature algorithm method (EVP_SIGNATURE_fetch).
EXTENDED_KEY_USAGE	Extended Key Usage extension: stack of key-purpose object identifiers.
GCM128_CONTEXT	Opaque context for CRYPTO_gcm128_* Galois/Counter Mode helpers.
GENERAL_NAME	X.509 GeneralName: one alternative name form selected by type.
GENERAL_NAMES	Stack of GeneralName values (SubjectAltName, IssuerAltName, distribution points, etc.).
GENERAL_SUBTREE	Name Constraints subtree: a base GeneralName with optional minimum/maximum.
GEN_SESSION_CB	Server callback that generates a new SSL/TLS session ID.
HMAC_CTX	Opaque HMAC computation context (legacy HMAC_* API).
IDEA_INT	Unsigned word type used in the IDEA key schedule tables.
IDEA_KEY_SCHEDULE	Expanded IDEA key schedule for the low-level IDEA_* APIs (deprecated; prefer EVP).
IPAddrBlocks	RFC 3779 IPAddrBlocks extension: stack of per-family address blocks.
IPAddressChoice	RFC 3779 choice between inheriting IP address blocks and listing them.
IPAddressFamily	RFC 3779 IP address family entry: AFI/SAFI octets plus an address choice.
IPAddressOrRange	RFC 3779 IP address: either a prefix or an explicit address range.
IPAddressOrRanges	Stack of IPAddressOrRange values for one address family choice.
IPAddressRange	Inclusive IP address range encoded as bit strings (RFC 3779).
ISSUER_SIGN_TOOL	Issuer Signing Tool extension naming signing and CA tools and their certificates.
ISSUING_DIST_POINT	Opaque Issuing Distribution Point extension value (CRL IDP).
KEY_TABLE_TYPE	Expanded Camellia round-key table stored as CAMELLIA_TABLE_WORD_LEN unsigned ints.
MD4_CTX	Incremental MD4 digest state (also typedef'd as MD4_CTX); deprecated low-level API.
MD5_CTX	Incremental MD5 digest state (also typedef'd as MD5_CTX); deprecated low-level API.
MDC2_CTX	Incremental MDC-2 digest state (also typedef'd as MDC2_CTX); deprecated low-level API.
NAME_CONSTRAINTS	Opaque Name Constraints extension value (permitted/excluded subtrees).
NAMING_AUTHORITY	Naming authority identifying who issues profession or admission attributes (Common PKI).
NETSCAPE_CERT_SEQUENCE	Netscape Certificate Sequence: a type OID plus a stack of certificates.
NETSCAPE_SPKAC	Netscape Signed Public Key And Challenge (SPKAC) request body.
NETSCAPE_SPKI	Netscape SPKI: an SPKAC plus the signature algorithm and signature bits.
NOTICEREF	Notice reference: organization name and notice numbers for a user notice qualifier.
OBJ_NAME	One entry in OpenSSL's name table mapping algorithm names to type-specific data.
OCB128_CONTEXT	Opaque context for CRYPTO_ocb128_* Offset Codebook Mode helpers.
OCSP_BASICRESP	OCSP BasicOCSPResponse: ResponseData with signature and optional certificates.
OCSP_CERTID	OCSP CertID identifying a certificate by issuer name/key hashes and serial (RFC 6960).
OCSP_CERTSTATUS	OCSP CertStatus CHOICE: good, revoked, or unknown (RFC 6960).
OCSP_CRLID	OCSP CrlID extension identifying a CRL by URL, number, or time.
OCSP_ONEREQ	Single OCSP request entry with a CertID and optional extensions (RFC 6960).
OCSP_REQINFO	OCSP TBSRequest: version, optional requestor name, request list, and extensions.
OCSP_REQUEST	OCSP Request message containing TBSRequest and optional signature (RFC 6960).
OCSP_REQ_CTX	Legacy alias for OSSL_HTTP_REQ_CTX used by older OCSP HTTP client APIs.
OCSP_RESPBYTES	OCSP ResponseBytes: responseType OID and response OCTET STRING payload.
OCSP_RESPDATA	OCSP ResponseData (tbsResponseData): version, ResponderID, producedAt, and responses.
OCSP_RESPID	Opaque OCSP ResponderID (byName or byKey).
OCSP_RESPONSE	Opaque OCSP response structure (RFC 6960).
OCSP_REVOKEDINFO	OCSP RevokedInfo: revocation time and optional CRL reason (RFC 6960).
OCSP_SERVICELOC	OCSP ServiceLocator extension with issuer name and locator AccessDescriptions.
OCSP_SIGNATURE	Optional signature over an OCSP request, with algorithm and certificates.
OCSP_SINGLERESP	OCSP SingleResponse for one CertID: status, thisUpdate, nextUpdate, and extensions.
OPENSSL_BLOCK	Opaque pointer to a non-NUL-terminated byte block for STACK_OF(OPENSSL_BLOCK) (unused by OpenSSL; deprecated).
OPENSSL_CORE_CTX	Opaque core-side library context handle passed across the provider boundary.
OPENSSL_CSTRING	Const NUL-terminated C string pointer used with STACK_OF(OPENSSL_CSTRING).
OPENSSL_INIT_SETTINGS	Opaque OpenSSL library initialization settings passed to OPENSSL_init_crypto().
OPENSSL_LHASH	Opaque dynamic hash table (LHASH) of void* elements.
OPENSSL_LH_COMPFUNC	Comparison callback returning <0 / 0 / >0 for two LHASH element pointers.
OPENSSL_LH_COMPFUNCTHUNK	Adapter that invokes a typed OPENSSL_LH_COMPFUNC on two void* elements.
OPENSSL_LH_DOALL_FUNC	Callback applied to each element by OPENSSL_LH_doall().
OPENSSL_LH_DOALL_FUNCARG	Callback applied to each element by OPENSSL_LH_doall_arg() with a user argument.
OPENSSL_LH_DOALL_FUNCARG_THUNK	Adapter that invokes a typed OPENSSL_LH_DOALL_FUNCARG on void* element/arg.
OPENSSL_LH_DOALL_FUNC_THUNK	Adapter that invokes a typed OPENSSL_LH_DOALL_FUNC on a void* element.
OPENSSL_LH_HASHFUNC	Hash callback that maps an LHASH element pointer to an unsigned long hash value.
OPENSSL_LH_HASHFUNCTHUNK	Adapter that invokes a typed OPENSSL_LH_HASHFUNC on a void* element.
OPENSSL_LH_NODE	Opaque hash-table node used internally by OPENSSL_LHASH.
OPENSSL_PSTRING	Pointer to an OPENSSL_STRING (char *); used as the row type in TXT_DB stacks.
OPENSSL_STACK	Opaque generic pointer stack; prefer the typed STACK_OF(...) wrappers.
OPENSSL_STRING	Mutable NUL-terminated C string pointer used with STACK_OF(OPENSSL_STRING) / LHASH.
OPENSSL_sk_compfunc	Comparison callback used to order or search OPENSSL_STACK elements.
OPENSSL_sk_copyfunc	Deep-copy callback used by OPENSSL_sk_deep_copy() to duplicate one stack element.
OPENSSL_sk_freefunc	Callback that frees one element when OPENSSL_sk_pop_free() drains a stack.
OSSL_ALGORITHM	Opaque provider algorithm description (name, property, implementation).
OSSL_CALLBACK	Generic provider/libcrypto callback receiving an OSSL_PARAM array.
OSSL_CMP_CERTREPMESSAGE	CertRepMessage from RFC 4210 section 5.3.3: CA Pubs and certResponse sequence.
OSSL_CMP_CERTRESPONSE	CertResponse from RFC 4210 section 5.3.3: certReqId, status, and optional cert/key.
OSSL_CMP_CERTSTATUS	CertStatus from RFC 4210 section 5.3.18: certHash and certReqId for certConf.
OSSL_CMP_CTX	Opaque CMP client or server context holding transaction state and options.
OSSL_CMP_ITAV	Opaque InfoTypeAndValue (ITAV) key-value pair used in CMP messages (RFC 4210 section 5.3.19).
OSSL_CMP_MSG	Opaque PKIMessage structure (PKIHeader and body) from RFC 4210.
OSSL_CMP_PKIFAILUREINFO	ASN.1 BIT STRING encoding PKIFailureInfo failure flags (RFC 4210).
OSSL_CMP_PKIFREETEXT	Sequence of UTF8String status or error detail text in PKIStatusInfo (RFC 4210).
OSSL_CMP_PKIHEADER	Opaque PKIHeader structure for a CMP PKIMessage (RFC 4210 section 5.2).
OSSL_CMP_PKISI	Opaque PKIStatusInfo structure with status, statusString, and failInfo (RFC 4210 section 5.3.14).
OSSL_CMP_PKISTATUS	ASN.1 INTEGER encoding a PKIStatus value (RFC 4210).
OSSL_CMP_POLLREP	Opaque PollRepContent entry with certReqId, checkAfter, and optional reason (RFC 4210 section 5.3.22).
OSSL_CMP_POLLREPCONTENT	STACK_OF(OSSL_CMP_POLLREP) representing a PollRepContent sequence.
OSSL_CMP_REVREPCONTENT	RevRepContent from RFC 4210 section 5.3.4: status for each certReqId in an RR.
OSSL_CMP_SRV_CTX	Opaque CMP server context holding callbacks and server-side state.
OSSL_CMP_SRV_certConf_cb_t	Server callback type for processing incoming certConf messages.
OSSL_CMP_SRV_cert_request_cb_t	Server callback type for processing IR/CR/KUR/P10CR certificate requests.
OSSL_CMP_SRV_clean_transaction_cb_t	Callback type for cleaning up server state after a transaction completes.
OSSL_CMP_SRV_delayed_delivery_cb_t	Callback type for deciding whether to delay delivery of a CMP response.
OSSL_CMP_SRV_error_cb_t	Server callback invoked when constructing an error message response.
OSSL_CMP_SRV_genm_cb_t	Callback type for processing CMP General Message (genm) requests on the server.
OSSL_CMP_SRV_pollReq_cb_t	Server callback type for processing pollReq messages.
OSSL_CMP_SRV_rr_cb_t	Server callback type for processing Revocation Request (RR) messages.
OSSL_CMP_certConf_cb_t	Callback type for evaluating a newly enrolled certificate before certConf.
OSSL_CMP_log_cb_t	Callback type for CMP logging: receive component, source location, severity, and message.
OSSL_CMP_severity	Syslog-style severity level for CMP log messages (OSSL_CMP_LOG_*).
OSSL_CMP_transfer_cb_t	Callback type for sending a CMP request and returning the response message.
OSSL_CORE_BIO	Opaque core-side BIO handle passed across the provider boundary for upcalls.
OSSL_CORE_HANDLE	Opaque core handle passed to a provider's OSSL_provider_init() for upcalls.
OSSL_CRMF_ATTRIBUTETYPEANDVALUE	AttributeTypeAndValue for CRMF regCtrl or regInfo attributes.
OSSL_CRMF_CERTID	CertId from RFC 4211: issuer GeneralName and certificate serial number.
OSSL_CRMF_CERTREQUEST	CertRequest from RFC 4211: certReqId, certTemplate, and optional controls.
OSSL_CRMF_CERTTEMPLATE	CertTemplate from RFC 4211: selected certificate fields for a requested certificate.
OSSL_CRMF_ENCRYPTEDVALUE	EncryptedValue from RFC 4211: optional algorithm identifiers and an encrypted bit string.
OSSL_CRMF_MSG	CertReqMsg from RFC 4211: certificate request, optional proof-of-possession, and optional regInfo.
OSSL_CRMF_MSGS	CertReqMessages from RFC 4211: a sequence of CertReqMsg values.
OSSL_CRMF_OPTIONALVALIDITY	OptionalValidity from RFC 4211: optional notBefore and notAfter times in a certTemplate.
OSSL_CRMF_PBMPARAMETER	PBMParameter from RFC 4211: salt, one-way function, iteration count, and MAC algorithm.
OSSL_CRMF_PKIPUBLICATIONINFO	PKIPublicationInfo from RFC 4211 section 6.3: publication action and optional SinglePubInfo list.
OSSL_CRMF_POPOSIGNINGKEY	POPOSigningKey from RFC 4211: optional POPOSigningKeyInput, algorithm identifier, and signature.
OSSL_CRMF_SINGLEPUBINFO	SinglePubInfo from RFC 4211: publication method and optional publication location.
OSSL_DECODER	Opaque decoder method that converts external key/cert encodings into OpenSSL objects.
OSSL_DECODER_CLEANUP	Callback that frees construct data when an OSSL_DECODER_CTX is freed.
OSSL_DECODER_CONSTRUCT	Callback that builds an application object from a decoder's provider-native result.
OSSL_DECODER_CTX	Opaque context that drives OSSL_DECODER providers when decoding keys/objects.
OSSL_DECODER_INSTANCE	Opaque pairing of an OSSL_DECODER with its per-instance decoder context during a decode run.
OSSL_DISPATCH	Function-pointer dispatch table entry exchanged between libcrypto and providers.
OSSL_ENCODER	Opaque encoder method that serializes keys and related objects.
OSSL_ENCODER_CLEANUP	Cleanup callback that releases construct_data after encoding finishes.
OSSL_ENCODER_CONSTRUCT	Callback that builds the provider-native object passed to an encoder instance.
OSSL_ENCODER_CTX	Opaque encoder context that drives OSSL_ENCODER output of keys and related objects.
OSSL_ENCODER_INSTANCE	Opaque pairing of an OSSL_ENCODER with its per-instance encoder context during an encode run.
OSSL_HPKE_CTX	Opaque HPKE context used for encapsulation, sealing, opening, and export (RFC 9180).
OSSL_HTTP_REQ_CTX	Opaque HTTP request context used by OSSL_HTTP_* client helpers.
OSSL_HTTP_bio_cb_t	Optional callback that updates or replaces the HTTP connection BIO around connect/TLS.
OSSL_INOUT_CALLBACK	Callback that both consumes input parameters and may populate output parameters.
OSSL_ITEM	Opaque provider item pairing an identifier with a pointer payload.
OSSL_LIB_CTX	Opaque library context that scopes providers, properties, and algorithm fetches.
OSSL_PARAM	Key/type/data triple used to pass parameters across provider boundaries.
OSSL_PARAM_BLD	Opaque builder that assembles a dynamic OSSL_PARAM array.
OSSL_PASSPHRASE_CALLBACK	Callback that obtains a passphrase, optionally guided by OSSL_PARAM descriptors.
OSSL_PROVIDER	Opaque provider object representing a loaded algorithm implementation module.
OSSL_SELF_TEST	Opaque self-test event object used by provider FIPS self-test callbacks.
OSSL_STORE_CTX	Opaque context for an open OSSL_STORE channel to a URI or BIO.
OSSL_STORE_INFO	Opaque object returned by OSSL_STORE describing a loaded key, cert, or CRL.
OSSL_STORE_LOADER	Opaque OSSL_STORE loader implementation for a URI scheme.
OSSL_STORE_LOADER_CTX	Opaque per-open context used by a deprecated ENGINE-based store loader.
OSSL_STORE_SEARCH	Opaque search criterion object used with OSSL_STORE_expect / find APIs.
OSSL_STORE_attach_fn	Deprecated loader callback that attaches to a BIO.
OSSL_STORE_close_fn	Deprecated loader callback that closes and frees a loader context.
OSSL_STORE_ctrl_fn	Deprecated loader callback implementing OSSL_STORE_ctrl() / vctrl().
OSSL_STORE_eof_fn	Deprecated loader callback implementing OSSL_STORE_eof().
OSSL_STORE_error_fn	Deprecated loader callback implementing OSSL_STORE_error().
OSSL_STORE_expect_fn	Deprecated loader callback implementing OSSL_STORE_expect().
OSSL_STORE_find_fn	Deprecated loader callback implementing OSSL_STORE_find().
OSSL_STORE_load_fn	Deprecated loader callback implementing OSSL_STORE_load().
OSSL_STORE_open_ex_fn	Deprecated loader callback that opens a URI with library context and property query.
OSSL_STORE_open_fn	Deprecated loader callback that opens a URI and returns a loader context.
OSSL_STORE_post_process_info_fn	Callback that may rewrite or drop each OSSL_STORE_INFO after it is loaded.
OSSL_provider_init_fn	Provider module entry-point signature invoked when OpenSSL loads the provider.
OSSL_thread_stop_handler_fn	Callback invoked when a thread is stopping so a provider can release thread-local state.
OSSL_trace_cb	Application callback that receives OpenSSL trace output for a category.
OTHERNAME	otherName form of a GeneralName: an OID typed value.
PBE2PARAM	PKCS#5 PBES2 parameters: key-derivation function and encryption scheme.
PBEPARAM	PKCS#5 PBES1 password-based encryption parameters (salt and iteration count).
PBKDF2PARAM	PKCS#5 PBKDF2 parameters: salt, iteration count, optional key length, and PRF.
PKCS12	Top-level PKCS#12 PFX structure (version, authSafes, and optional MAC).
PKCS12_BAGS	Bag payload choice structure (certBag, crlBag, secretBag, or other ASN.1 value).
PKCS12_MAC_DATA	MAC salt, iteration count, and digest algorithm for a PKCS#12 PFX integrity check.
PKCS12_SAFEBAG	One PKCS#12 safeBag holding a certificate, key, CRL, secret, or nested safeContents.
PKCS12_create_cb	Callback invoked for each safeBag while building a PKCS#12 structure.
PKCS7	PKCS#7 ContentInfo container holding typed content and related state.
PKCS7_CTX	Library/provider context carried by PKCS#7 objects when fetching algorithms.
PKCS7_DIGEST	PKCS#7 DigestedData content: digest algorithm, encapsulated content, and message digest.
PKCS7_ENCRYPT	PKCS#7 EncryptedData content: encrypted content info.
PKCS7_ENC_CONTENT	PKCS#7 EncryptedContentInfo: content type, content-encryption algorithm, and ciphertext.
PKCS7_ENVELOPE	PKCS#7 EnvelopedData content: per-recipient key infos and encrypted content.
PKCS7_ISSUER_AND_SERIAL	Issuer name and certificate serial number identifying a PKCS#7 signer or recipient.
PKCS7_RECIP_INFO	PKCS#7 RecipientInfo: recipient identity and encrypted content-encryption key.
PKCS7_SIGNED	PKCS#7 SignedData content: digests, optional certificates/CRLs, signer infos, and encapsulated content.
PKCS7_SIGNER_INFO	PKCS#7 SignerInfo: identity, digest/signature algorithms, attributes, and signature.
PKCS7_SIGN_ENVELOPE	PKCS#7 SignedAndEnvelopedData content: digests, optional certificates/CRLs, signer infos, per-recipient key infos, and encrypted content.
PKCS8_PRIV_KEY_INFO	Opaque PKCS#8 PrivateKeyInfo structure (RFC 5208).
PKEY_USAGE_PERIOD	Private key usage period extension giving the interval when the key is valid.
POLICYINFO	Single certificate policy: policy OID plus optional qualifiers.
POLICYQUALINFO	Certificate policy qualifier: CPS URI, user notice, or other typed value.
POLICY_CONSTRAINTS	Policy Constraints extension: requireExplicitPolicy and inhibitPolicyMapping skip counts.
POLICY_MAPPING	Mapping from an issuer domain policy OID to a subject domain policy OID.
POLICY_MAPPINGS	Stack of POLICY_MAPPING entries used by the policy-mappings certificate extension.
PROFESSION_INFO	Profession information: naming authority, profession items/OIDs, and registration number.
PROFESSION_INFOS	Stack of PROFESSION_INFO entries used inside an ADMISSIONS structure.
PROXY_CERT_INFO_EXTENSION	Proxy Certificate Information extension (RFC 3820): path length and proxy policy.
PROXY_POLICY	Proxy certificate policy: language OID and optional policy octets (RFC 3820).
RAND_DRBG	Legacy deterministic random bit generator handle (deprecated; prefer EVP_RAND).
RAND_METHOD	Legacy RAND method table (deprecated; prefer EVP_RAND providers).
RC2_INT	Unsigned integer word type used in the deprecated low-level RC2 key schedule.
RC2_KEY	Expanded RC2 key schedule used by the deprecated low-level RC2_* encryptors.
RC4_KEY	Legacy RC4 key stream state (deprecated; prefer EVP_CIPHER APIs).
RIPEMD160_CTX	Legacy RIPEMD-160 hashing context (deprecated; prefer EVP_MD APIs).
RSA	Opaque RSA key object (deprecated; prefer EVP_PKEY).
RSA_METHOD	Opaque RSA method table for ENGINE-style RSA implementations (deprecated).
RSA_OAEP_PARAMS	Opaque RSAES-OAEP parameter structure (hashFunc / maskGenFunc / pSourceFunc).
RSA_PSS_PARAMS	Opaque RSASSA-PSS parameter structure (hashAlg / maskGenAlg / saltLength / trailerField).
SCRYPT_PARAMS	PKCS#5 scrypt password-based key derivation parameters.
SCT	Opaque Certificate Transparency Signed Certificate Timestamp.
SCT_CTX	Opaque context used when verifying Certificate Transparency SCTs.
SEED_KEY_SCHEDULE	Legacy SEED expanded key schedule (deprecated low-level type; prefer EVP).
SHA256_CTX	Incremental SHA-224 / SHA-256 digest state (also typedef'd as SHA256_CTX); deprecated low-level API.
SHA512_CTX	Incremental SHA-384 / SHA-512 digest state (also typedef'd as SHA512_CTX).
SHA_CTX	Incremental SHA-1 digest state (also typedef'd as SHA_CTX); deprecated low-level API.
SRP_VBASE	In-memory SRP verifier database loaded from a verifier file.
SRP_gN	Named SRP group parameters (generator g and safe prime N).
SRP_gN_cache	Cache entry mapping a base64-encoded SRP group parameter to a BIGNUM.
SRP_user_pwd	SRP verifier database entry for one user (salt, verifier, and group parameters).
SRTP_PROTECTION_PROFILE	SRTP protection profile for the use_srtp DTLS extension (RFC 5764).
SSL	Opaque TLS/DTLS/QUIC connection object.
SSL_CIPHER	Opaque description of an SSL/TLS cipher suite.
SSL_COMP	Opaque SSL/TLS compression method entry.
SSL_CONF_CTX	Opaque configuration context used with the SSL_CONF_* command API.
SSL_CONN_CLOSE_INFO	Information describing why and how a QUIC connection was closed.
SSL_CTX	Opaque TLS/DTLS/QUIC context holding shared configuration and certificates.
SSL_CTX_alpn_select_cb_func	Server callback that selects an ALPN protocol from the client's offer.
SSL_CTX_decrypt_session_ticket_fn	Application callback that decrypts/validates a received session ticket.
SSL_CTX_generate_session_ticket_fn	Callback invoked just before a server creates a session ticket (set ticket appdata here).
SSL_CTX_keylog_cb_func	Callback that logs a single line of TLS key material for debugging.
SSL_CTX_npn_advertised_cb_func	NPN server callback that advertises the server's protocol list.
SSL_CTX_npn_select_cb_func	NPN client callback that selects a protocol from the server's list.
SSL_DANE	Opaque DANE (DNS-based Authentication of Named Entities) state for TLS.
SSL_METHOD	Opaque SSL/TLS protocol method table used with SSL_CTX_new and related APIs.
SSL_POLL_ITEM	One pollable resource and event masks for an SSL_poll() array entry.
SSL_SESSION	Opaque SSL/TLS session state used for resumption and caching.
SSL_SHUTDOWN_EX_ARGS	Extended arguments for SSL_shutdown_ex() (currently QUIC-specific).
SSL_STREAM_RESET_ARGS	Arguments for SSL_stream_reset() describing how a QUIC stream is aborted.
SSL_TICKET_RETURN	Return code from the decrypt-session-ticket callback controlling ticket use and renewal.
SSL_TICKET_STATUS	Status code describing the outcome of session-ticket decryption for the ticket callback.
SSL_allow_early_data_cb_fn	Server callback that decides whether to accept TLSv1.3 early data for a connection.
SSL_async_callback_fn	Callback invoked when an asynchronous SSL cryptography operation completes.
SSL_client_hello_cb_fn	Server callback invoked after a ClientHello is received and parsed.
SSL_custom_ext_add_cb_ex	Callback that supplies the contents of a custom TLS extension being sent.
SSL_custom_ext_free_cb_ex	Free temporary storage allocated while adding a custom TLS extension.
SSL_custom_ext_parse_cb_ex	Parse a received custom TLS extension (context-aware form).
SSL_psk_client_cb_func	Client callback that selects a PSK identity and pre-shared key for TLSv1.2 and below.
SSL_psk_find_session_cb_func	TLSv1.3 server callback that looks up a PSK session by identity.
SSL_psk_server_cb_func	PSK server callback that supplies the pre-shared key for a client identity.
SSL_psk_use_session_cb_func	TLSv1.3 client callback that selects a PSK session to offer.
SSL_verify_cb	Certificate verification callback invoked during chain checking.
SXNET	Strong Extranet (SXNET) certificate extension value.
SXNETID	Strong Extranet (SXNET) zone and user identifier pair.
TLS_FEATURE	TLS Feature extension: stack of TLS extension feature integers (RFC 7633).
TLS_SESSION_TICKET_EXT	TLS session-ticket extension payload (length plus opaque data bytes).
TLS_SIGALGS	Opaque container for TLS signature algorithm preferences.
TS_ACCURACY	RFC 3161 Accuracy: optional seconds, millis, and micros time precision.
TS_MSG_IMPRINT	RFC 3161 MessageImprint: hash algorithm and hashed message octets.
TS_REQ	RFC 3161 TimeStampReq: version, message imprint, policy, nonce, and extensions.
TS_RESP	RFC 3161 TimeStampResp: status info and optional signed time-stamp token.
TS_RESP_CTX	Opaque context used while generating RFC 3161 time-stamp responses.
TS_STATUS_INFO	RFC 3161 PKIStatusInfo: status, optional statusString, and failureInfo.
TS_TST_INFO	RFC 3161 TSTInfo: policy, imprint, serial, time, accuracy, and TSA fields.
TS_VERIFY_CTX	Opaque context holding flags and expected values for time-stamp verification.
TS_extension_cb	Callback that processes a requested extension while building TSTInfo.
TS_serial_cb	Callback that allocates a unique TSTInfo serial number for a response.
TS_time_cb	Callback that supplies the current time for TSTInfo genTime.
TXT_DB	In-memory text database parsed from newline-separated, comma-separated rows.
UI	Opaque interactive user-interface object used with UI_METHOD prompting.
UI_METHOD	Opaque UI_METHOD table implementing interactive user prompting.
UI_STRING	Prompt or output string entry stored in a UI for method writers to consume.
USERNOTICE	User notice policy qualifier: optional notice reference and explicit text.
X509	Opaque X.509 certificate (RFC 5280 Certificate).
X509V3_CONF_METHOD	Callback table for reading configuration database sections used by X509v3 helpers.
X509V3_CTX	Opaque context passed to X.509v3 extension helpers (issuer/subject/cert/request).
X509V3_EXT_D2I	Decode an X.509v3 extension value from DER.
X509V3_EXT_FREE	Free an X.509v3 extension-specific value allocated by the matching NEW/D2I/S2I handlers.
X509V3_EXT_I2D	Encode an X.509v3 extension value to DER.
X509V3_EXT_I2R	Print an extension-specific value to a BIO.
X509V3_EXT_I2S	Convert an extension value to a configuration string.
X509V3_EXT_I2V	Convert an extension value to a stack of configuration name/value pairs.
X509V3_EXT_METHOD	Method table describing how an X.509v3 extension type is encoded and printed.
X509V3_EXT_NEW	Callback that allocates a fresh extension-specific value for an X.509v3 method.
X509V3_EXT_R2I	Parse a raw configuration string into an extension value.
X509V3_EXT_S2I	Callback that parses a configuration string into an extension-specific structure.
X509V3_EXT_V2I	Parse configuration name/value pairs into an extension-specific value.
X509_ALGOR	Opaque ASN.1 AlgorithmIdentifier (algorithm OID plus optional parameters).
X509_ALGORS	Stack of X509_ALGOR AlgorithmIdentifier values.
X509_ATTRIBUTE	Opaque X.509 Attribute (AttributeTypeAndValue sequence) used in CSRs and PKCS#12.
X509_CERT_AUX	Auxiliary trust/reject OID lists and related metadata attached to an X509.
X509_CINF	Opaque TBSCertificate structure holding the unsigned certificate fields.
X509_CRL	Opaque X.509 certificate revocation list.
X509_CRL_INFO	Opaque TBSCertList / CRL info structure inside an X509_CRL.
X509_CRL_METHOD	Opaque method table customizing CRL lookup/verification behaviour.
X509_EXTENSION	Opaque X.509 extension object (OID, criticality, and octet-string value).
X509_EXTENSIONS	Typedef for a STACK_OF(X509_EXTENSION) used as an ASN.1 SEQUENCE OF Extension.
X509_INFO	Bundle of certificate, CRL, and/or encrypted private key as found in PEM info files.
X509_LOOKUP	Opaque certificate/CRL lookup method instance attached to an X509_STORE.
X509_LOOKUP_METHOD	Opaque method table describing how an X509_LOOKUP finds certificates/CRLs.
X509_LOOKUP_ctrl_ex_fn	Extended control callback for an X509_LOOKUP_METHOD (with library context).
X509_LOOKUP_ctrl_fn	Control-command callback for an X509_LOOKUP_METHOD.
X509_LOOKUP_get_by_alias_fn	Callback type that looks up a certificate or CRL by alias / friendly name.
X509_LOOKUP_get_by_fingerprint_fn	Callback type that looks up a certificate or CRL by fingerprint.
X509_LOOKUP_get_by_issuer_serial_fn	Callback type that looks up a certificate by issuer name and serial number.
X509_LOOKUP_get_by_subject_ex_fn	Callback type that looks up a certificate or CRL by subject name, with provider selection.
X509_LOOKUP_get_by_subject_fn	Callback type that looks up a certificate or CRL by subject name.
X509_NAME	Opaque X.509 distinguished name (SEQUENCE OF RelativeDistinguishedName).
X509_NAME_ENTRY	Single Relative Distinguished Name attribute (type OID plus value) within an X509_NAME.
X509_OBJECT	Opaque X509_STORE cache entry holding a certificate or CRL.
X509_PKEY	PKCS#8 encrypted private key container used with PEM reading/writing.
X509_POLICY_CACHE	Opaque cache of processed certificate policy data used during path validation.
X509_POLICY_LEVEL	Opaque single depth level within an X.509 certificate policy tree.
X509_POLICY_NODE	Opaque node in an X.509 certificate policy tree.
X509_POLICY_TREE	Opaque X.509 certificate policy tree built during path validation (RFC 5280).
X509_PUBKEY	Opaque SubjectPublicKeyInfo container (algorithm + public key BIT STRING).
X509_PURPOSE	Certificate purpose entry used by X509_check_purpose and related helpers.
X509_REQ	Opaque PKCS#10 certification request (CertificateRequest).
X509_REQ_INFO	Opaque TBSCertificateRequest / certification request info inside an X509_REQ.
X509_REVOKED	Opaque single revoked-certificate entry within an X509_CRL.
X509_SIG	Opaque DigestInfo / encrypted-key structure used by PKCS#8 and related APIs.
X509_SIG_INFO	Opaque signature metadata (security bits / TLS usage flags) for an X.509 signature.
X509_STORE	Opaque trust store of certificates and CRLs used during verification.
X509_STORE_CTX	Opaque certificate-verification context (one chain validation attempt).
X509_STORE_CTX_cert_crl_fn	Callback type that checks the revocation status of a certificate against a CRL.
X509_STORE_CTX_check_crl_fn	Callback type that verifies the signature/validity of a CRL in context ctx.
X509_STORE_CTX_check_issued_fn	Callback type that checks whether issuer appears to have issued x.
X509_STORE_CTX_check_policy_fn	Callback type that evaluates certificate policies for a verification context.
X509_STORE_CTX_check_revocation_fn	Callback that checks revocation status for certificates in a store context.
X509_STORE_CTX_cleanup_fn	Callback type invoked to clean up application state associated with a store context.
X509_STORE_CTX_get_crl_fn	Callback type that locates a CRL for certificate x.
X509_STORE_CTX_get_issuer_fn	Callback that finds an issuer certificate for x.
X509_STORE_CTX_lookup_certs_fn	Callback type that looks up certificates in a store by subject name.
X509_STORE_CTX_lookup_crls_fn	Callback type that returns CRLs matching issuer name nm.
X509_STORE_CTX_verify_cb	Verify-result callback invoked for each certificate during chain verification.
X509_STORE_CTX_verify_fn	Callback that verifies a certificate chain in an X509_STORE_CTX.
X509_TRUST	Entry describing a named X.509 trust purpose and its checker callback.
X509_VAL	Validity period (notBefore / notAfter) used inside X.509 certificates and CRLs.
X509_VERIFY_PARAM	Opaque verification-parameter object (purpose, trust, time, flags, …).
XTS128_CONTEXT	Opaque context holding the two keys used by CRYPTO_xts128_encrypt().
asn1_ps_func	Prefix/suffix producer for an ASN.1 filter BIO (BIO_f_asn1).
bio_info_cb	Backward-compatible alias for BIO_info_cb.
block128_f	Callback that encrypts or decrypts one 16-byte block with a cipher key.
cbc128_f	Callback that encrypts or decrypts a contiguous span of bytes in CBC mode.
ccm128_f	Streaming CCM helper that processes whole 16-byte blocks and updates CMAC state.
conf_finish_func	DSO module finalizer called when a CONF module is unloaded.
conf_init_func	DSO module initializer called when a CONF module is loaded.
const_DES_cblock	Const-qualified eight-byte DES block typedef for read-only key/IV inputs.
ctr128_f	Callback that encrypts or decrypts whole 16-byte blocks in CTR mode.
custom_ext_add_cb	Callback that supplies payload bytes for a legacy custom TLS extension being sent.
custom_ext_free_cb	Free custom extension output produced by a matching add callback.
custom_ext_parse_cb	Callback that parses a received custom TLS extension.
d2i_of_void	Function-pointer type for a type-erased ASN.1 DER decoder (d2i_*).
dyn_MEM_free_fn	Free callback supplied by the loading application to a dynamic ENGINE.
dyn_MEM_malloc_fn	Allocator callback supplied by the loading application to a dynamic ENGINE.
dyn_MEM_realloc_fn	Reallocator callback supplied by the loading application to a dynamic ENGINE.
dynamic_MEM_fns	Memory-management callbacks passed into a dynamically loaded ENGINE.
dynamic_bind_engine	Bind entry point that populates an ENGINE loaded from a shared library.
dynamic_fns	Callbacks and static-state cookie passed when binding a dynamic ENGINE.
dynamic_v_check_fn	Version-check entry point expected from a dynamically loaded ENGINE.
ecb128_f	Callback that encrypts or decrypts a contiguous span of 16-byte blocks in ECB mode.
i2d_of_void	Function-pointer type for a type-erased ASN.1 DER encoder (i2d_*).
lh_CONF_VALUE_compfunc
lh_CONF_VALUE_doallfunc
lh_CONF_VALUE_hashfunc
lh_ERR_STRING_DATA_compfunc
lh_ERR_STRING_DATA_doallfunc
lh_ERR_STRING_DATA_hashfunc
lh_OPENSSL_CSTRING_compfunc
lh_OPENSSL_CSTRING_doallfunc
lh_OPENSSL_CSTRING_hashfunc
lh_OPENSSL_STRING_compfunc
lh_OPENSSL_STRING_doallfunc
lh_OPENSSL_STRING_hashfunc
ocb128_f	Streaming OCB helper that processes whole 16-byte blocks and updates checksum state.
ossl_intmax_t	Signed 64-bit fallback when stdint.h max-width types are unavailable.
ossl_uintmax_t	Unsigned 64-bit fallback when stdint.h max-width types are unavailable.
pem_password_cb	Callback that supplies a passphrase when reading or writing encrypted PEM.
ssl_crock_st	Incomplete pointer-to-SSL type used in SSL_CTX callback prototypes.
ssl_ct_validation_cb	Callback that decides whether received SCTs satisfy Certificate Transparency policy.
tls_session_secret_cb_fn	EAP-FAST callback that supplies the TLS master secret for a connection.
tls_session_ticket_ext_cb_fn	Callback invoked with the TLS session-ticket extension payload.

Enums

Name	Description
BIO_hostserv_priorities	How BIO_parse_hostserv() disambiguates host vs service in a combined string.
BIO_lookup_type	Whether BIO_lookup resolves addresses for a client connect or server bind.
BIO_sock_info_type	Kinds of socket metadata that BIO_sock_info() can retrieve.
OSSL_HANDSHAKE_STATE	Fine-grained TLS/DTLS handshake state machine values reported by SSL_get_state().
SSL_ct_validation_mode	Certificate Transparency validation policy for SSL_CTX_enable_ct().
UI_string_types
X509_LOOKUP_TYPE	Kind of object returned by an X509_LOOKUP.
ct_log_entry_type_t	Certificate Transparency log entry type for an SCT.
point_conversion_form_t	Enum for the point conversion form as defined in X9.62 (ECDSA) for the encoding of a elliptic curve point (x,y)
sct_source_t	Origin of a Signed Certificate Timestamp.
sct_validation_status_t	Result of validating a Signed Certificate Timestamp.
sct_version_t	Version of a Signed Certificate Timestamp.

Functions

Name	Description
ACCESS_DESCRIPTION_free	Free an AccessDescription value and its contents.
ACCESS_DESCRIPTION_it	Return the ASN.1 item descriptor for ACCESS_DESCRIPTION.
ACCESS_DESCRIPTION_new	Allocate a new AccessDescription value (Authority Info Access entry).
ADMISSIONS_free	Free an ADMISSIONS value and its contents.
ADMISSIONS_get0_admissionAuthority	Return the admission authority GENERAL_NAME from an ADMISSIONS entry.
ADMISSIONS_get0_namingAuthority	Return the naming authority from an ADMISSIONS entry.
ADMISSIONS_get0_professionInfos	Return the profession-info stack from an ADMISSIONS entry.
ADMISSIONS_it	Return the ASN.1 item descriptor for ADMISSIONS.
ADMISSIONS_new	Allocate a new ADMISSIONS value.
ADMISSIONS_set0_admissionAuthority	Set the admission authority GENERAL_NAME on an ADMISSIONS entry, transferring ownership.
ADMISSIONS_set0_namingAuthority	Set the naming authority on an ADMISSIONS entry, taking ownership of na.
ADMISSIONS_set0_professionInfos	Set the profession-info stack on an ADMISSIONS entry, transferring ownership.
ADMISSION_SYNTAX_free	Free an ADMISSION_SYNTAX value and its contents.
ADMISSION_SYNTAX_get0_admissionAuthority	Return the admission authority GeneralName from an ADMISSION_SYNTAX.
ADMISSION_SYNTAX_get0_contentsOfAdmissions	Return the stack of ADMISSIONS entries from an ADMISSION_SYNTAX.
ADMISSION_SYNTAX_it	Return the ASN.1 item descriptor for ADMISSION_SYNTAX.
ADMISSION_SYNTAX_new	Allocate a new ADMISSION_SYNTAX value.
ADMISSION_SYNTAX_set0_admissionAuthority	Set the admission authority GeneralName on an ADMISSION_SYNTAX, taking ownership of aa.
ADMISSION_SYNTAX_set0_contentsOfAdmissions	Set the admissions stack on an ADMISSION_SYNTAX, taking ownership of a.
AES_bi_ige_encrypt [deprecated]	Encrypt or decrypt with AES in bidirectional IGE mode (deprecated; prefer EVP).
AES_cbc_encrypt [deprecated]	Encrypt or decrypt data with AES in CBC mode (deprecated; prefer EVP).
AES_cfb128_encrypt [deprecated]	Encrypt or decrypt data with AES in 128-bit CFB mode (deprecated; prefer EVP).
AES_cfb1_encrypt [deprecated]	Encrypt or decrypt data with AES in 1-bit CFB mode (deprecated; prefer EVP).
AES_cfb8_encrypt [deprecated]	Encrypt or decrypt data with AES in 8-bit CFB mode (deprecated; prefer EVP).
AES_decrypt [deprecated]	Decrypt one 16-byte AES block with a key schedule (deprecated; prefer EVP).
AES_ecb_encrypt [deprecated]	Encrypt or decrypt one 16-byte AES block in ECB mode (deprecated; prefer EVP).
AES_encrypt [deprecated]	Encrypt one 16-byte AES block with a key schedule (deprecated; prefer EVP).
AES_ige_encrypt [deprecated]	Encrypt or decrypt with AES in infinite garble extension (IGE) mode (deprecated; prefer EVP).
AES_ofb128_encrypt [deprecated]	Encrypt or decrypt data with AES in 128-bit OFB mode (deprecated; prefer EVP).
AES_options [deprecated]	Return a short string describing compiled AES implementation options (deprecated).
AES_set_decrypt_key [deprecated]	Expand a user key into an AES decryption key schedule (deprecated; prefer EVP).
AES_set_encrypt_key [deprecated]	Expand a user key into an AES encryption key schedule (deprecated; prefer EVP).
AES_unwrap_key [deprecated]	Unwrap (decrypt) a key with AES Key Wrap per RFC 3394 (deprecated; prefer EVP).
AES_wrap_key [deprecated]	Wrap (encrypt) a key with AES Key Wrap per RFC 3394 (deprecated; prefer EVP).
ASIdOrRange_free	Free an ASIdOrRange value and its contents.
ASIdOrRange_it	Return the ASN.1 item descriptor for ASIdOrRange.
ASIdOrRange_new	Allocate a new ASIdOrRange value.
ASIdentifierChoice_free	Free an ASIdentifierChoice value and its contents.
ASIdentifierChoice_it	Return the ASN.1 item descriptor for ASIdentifierChoice.
ASIdentifierChoice_new	Allocate a new ASIdentifierChoice value.
ASIdentifiers_free	Free an ASIdentifiers extension value and its contents.
ASIdentifiers_it	Return the ASN.1 item descriptor for ASIdentifiers.
ASIdentifiers_new	Allocate a new ASIdentifiers extension value.
ASN1_ANY_it	Return the ASN.1 item descriptor for ASN.1 ANY (ASN1_TYPE).
ASN1_BIT_STRING_check	Verify that every set bit in a is allowed by the flags mask.
ASN1_BIT_STRING_free	Free an ASN.1 BIT STRING and its contents.
ASN1_BIT_STRING_get_bit	Test whether bit n is set in an ASN.1 BIT STRING.
ASN1_BIT_STRING_it	Return the ASN.1 item descriptor for ASN1_BIT_STRING.
ASN1_BIT_STRING_name_print	Print the long names of set bits from a BIT_STRING_BITNAME table.
ASN1_BIT_STRING_new	Allocate an empty ASN.1 BIT STRING.
ASN1_BIT_STRING_num_asc	Look up the bit number for a named bit in a BIT_STRING_BITNAME table.
ASN1_BIT_STRING_set	Replace the raw bit-string payload of an ASN1_BIT_STRING.
ASN1_BIT_STRING_set_asc	Set or clear a named bit in an ASN.1 bit string using a name table.
ASN1_BIT_STRING_set_bit	Set or clear a single bit in an ASN.1 BIT STRING.
ASN1_BMPSTRING_free	Free a ASN.1 BMPString and its contents.
ASN1_BMPSTRING_it	Return the ASN.1 item descriptor for ASN1_BMPSTRING.
ASN1_BMPSTRING_new	Allocate an empty ASN.1 BMPString.
ASN1_ENUMERATED_free	Free an ASN.1 ENUMERATED value and its contents.
ASN1_ENUMERATED_get	Return the value of an ASN.1 ENUMERATED as a long (legacy; prefer ASN1_ENUMERATED_get_int64).
ASN1_ENUMERATED_get_int64	Convert an ASN1_ENUMERATED to a signed 64-bit integer.
ASN1_ENUMERATED_it	Return the ASN.1 item descriptor for ASN1_ENUMERATED.
ASN1_ENUMERATED_new	Allocate an empty ASN.1 ENUMERATED value.
ASN1_ENUMERATED_set	Set an ASN.1 ENUMERATED to a C long value.
ASN1_ENUMERATED_set_int64	Set an ASN.1 ENUMERATED to a signed 64-bit value.
ASN1_ENUMERATED_to_BN	Convert an ASN.1 ENUMERATED value to a BIGNUM.
ASN1_GENERALIZEDTIME_adj	Set an ASN.1 GeneralizedTime to t plus a day/second offset.
ASN1_GENERALIZEDTIME_check	Check that an ASN1_GENERALIZEDTIME value has valid GeneralizedTime syntax.
ASN1_GENERALIZEDTIME_dup	Deep-copy an ASN1_GENERALIZEDTIME value.
ASN1_GENERALIZEDTIME_free	Free an ASN.1 GeneralizedTime and its contents.
ASN1_GENERALIZEDTIME_it	Return the ASN.1 item descriptor for ASN1_GENERALIZEDTIME.
ASN1_GENERALIZEDTIME_new	Allocate an empty ASN.1 GeneralizedTime.
ASN1_GENERALIZEDTIME_print	Print an ASN.1 GeneralizedTime to a BIO in a human-readable form.
ASN1_GENERALIZEDTIME_set	Set an ASN1_GENERALIZEDTIME to the calendar time t (allocating when s is NULL).
ASN1_GENERALIZEDTIME_set_string	Set an ASN1_GENERALIZEDTIME from an ASN.1 GeneralizedTime string (or only validate when s is NULL).
ASN1_GENERALSTRING_free	Free an ASN.1 GeneralString and its contents.
ASN1_GENERALSTRING_it	Return the ASN.1 item descriptor for ASN1_GENERALSTRING.
ASN1_GENERALSTRING_new	Allocate an empty ASN.1 GeneralString.
ASN1_IA5STRING_free	Free an ASN.1 IA5String and its contents.
ASN1_IA5STRING_it	Return the ASN.1 item descriptor for ASN1_IA5STRING.
ASN1_IA5STRING_new	Allocate an empty ASN.1 IA5String.
ASN1_INTEGER_cmp	Compare two ASN.1 INTEGER values numerically (including sign).
ASN1_INTEGER_dup	Deep-copy an ASN.1 INTEGER.
ASN1_INTEGER_free	Free an ASN.1 INTEGER and its contents.
ASN1_INTEGER_get	Return the value of an ASN.1 INTEGER as a C long.
ASN1_INTEGER_get_int64	Convert an ASN.1 INTEGER to a host int64_t.
ASN1_INTEGER_get_uint64	Convert an ASN.1 INTEGER to a host uint64_t (must be non-negative and in range).
ASN1_INTEGER_it	Return the ASN.1 item descriptor for ASN1_INTEGER.
ASN1_INTEGER_new	Allocate an empty ASN.1 INTEGER.
ASN1_INTEGER_set	Set an ASN.1 INTEGER to a C long value.
ASN1_INTEGER_set_int64	Set an ASN.1 INTEGER to a signed 64-bit value.
ASN1_INTEGER_set_uint64	Set an ASN.1 INTEGER to an unsigned 64-bit value.
ASN1_INTEGER_to_BN	Convert an ASN.1 INTEGER to a BIGNUM (allocating or reusing bn).
ASN1_ITEM_get	Return the built-in ASN1_ITEM at index i.
ASN1_ITEM_lookup	Look up a built-in ASN1_ITEM by its structure name.
ASN1_NULL_free	Free an ASN.1 NULL value.
ASN1_NULL_it	Return the ASN.1 item descriptor for ASN1_NULL.
ASN1_NULL_new	Allocate an ASN.1 NULL value.
ASN1_OBJECT_create	Allocate a dynamically owned ASN1_OBJECT from DER content and optional names.
ASN1_OBJECT_free	Free an ASN.1 OBJECT identifier and its contents.
ASN1_OBJECT_it	Return the ASN.1 item descriptor for ASN1_OBJECT.
ASN1_OBJECT_new	Allocate an empty ASN.1 OBJECT identifier.
ASN1_OCTET_STRING_NDEF_it	Return the ASN.1 item descriptor for indefinite-length OCTET STRING (NDEF).
ASN1_OCTET_STRING_cmp	Compare two ASN.1 OCTET STRING values lexicographically by content.
ASN1_OCTET_STRING_dup	Deep-copy an ASN.1 OCTET STRING.
ASN1_OCTET_STRING_free	Free an ASN.1 OCTET STRING and its contents.
ASN1_OCTET_STRING_it	Return the ASN.1 item descriptor for ASN1_OCTET_STRING.
ASN1_OCTET_STRING_new	Allocate an empty ASN.1 OCTET STRING.
ASN1_OCTET_STRING_set	Copy data of length len into an ASN.1 OCTET STRING.
ASN1_PCTX_free	Free an ASN1_PCTX allocated by ASN1_PCTX_new().
ASN1_PCTX_get_cert_flags	Return the certificate-field print flags stored in a print context.
ASN1_PCTX_get_flags	Return the general ASN1_PCTX_FLAGS_* print-control flags from a print context.
ASN1_PCTX_get_nm_flags	Return the name-printing flags from an ASN.1 print context.
ASN1_PCTX_get_oid_flags	Return the OID print flags currently set on an ASN.1 print context.
ASN1_PCTX_get_str_flags	Return the ASN1_STRFLGS_* flags controlling how string fields are printed.
ASN1_PCTX_new	Allocate a new ASN.1 print context with default formatting flags.
ASN1_PCTX_set_cert_flags	Set certificate-field print flags on an ASN.1 print context.
ASN1_PCTX_set_flags	Set the general ASN1_PCTX_FLAGS_* print-control flags on a print context.
ASN1_PCTX_set_nm_flags	Set name-printing flags for an ASN.1 print context.
ASN1_PCTX_set_oid_flags	Set ASN1_STRFLGS_* flags controlling how object identifiers are printed.
ASN1_PCTX_set_str_flags	Set ASN1_STRFLGS_* flags controlling how string fields are printed.
ASN1_PRINTABLESTRING_free	Free an ASN.1 PrintableString and its contents.
ASN1_PRINTABLESTRING_it	Return the ASN.1 item descriptor for ASN1_PRINTABLESTRING.
ASN1_PRINTABLESTRING_new	Allocate an empty ASN.1 PrintableString.
ASN1_PRINTABLE_free	Free an ASN1_PRINTABLE string and its contents.
ASN1_PRINTABLE_it	Return the ASN.1 item descriptor for ASN1_PRINTABLE.
ASN1_PRINTABLE_new	Allocate an empty ASN1_PRINTABLE string (PrintableString CHOICE wrapper).
ASN1_PRINTABLE_type	Choose a PrintableString / IA5String / T61String type that can hold s.
ASN1_SCTX_free	Free an ASN.1 scan context previously created with ASN1_SCTX_new().
ASN1_SCTX_get_app_data	Return the application pointer previously stored on an ASN.1 scan context.
ASN1_SCTX_get_flags	Return scan flags for the current field in an ASN.1 scan context.
ASN1_SCTX_get_item	Return the ASN1_ITEM currently being scanned by an ASN.1 scan context.
ASN1_SCTX_get_template	Return the ASN1_TEMPLATE currently being scanned by an ASN.1 scan context.
ASN1_SCTX_new	Allocate an ASN.1 scan context with the given per-field scan callback.
ASN1_SCTX_set_app_data	Store an application pointer on an ASN.1 scan context for use by the scan callback.
ASN1_SEQUENCE_ANY_it	Return the ASN.1 item descriptor for ASN1_SEQUENCE_ANY.
ASN1_SET_ANY_it	Return the ASN.1 item descriptor for ASN1_SET_ANY.
ASN1_STRING_TABLE_add	Add or update a local ASN1_STRING_TABLE entry for nid.
ASN1_STRING_TABLE_cleanup	Free dynamically registered ASN1_STRING_TABLE entries added at run time.
ASN1_STRING_TABLE_get	Look up the ASN1_STRING_TABLE entry for a string-valued NID.
ASN1_STRING_clear_free	Zero the content octets then free an ASN.1 string.
ASN1_STRING_cmp	Compare two ASN1_STRING values by type and content octets.
ASN1_STRING_copy	Copy type, data, and flags from str into dst.
ASN1_STRING_data [deprecated]	Return a mutable pointer to the raw octets stored in an ASN1_STRING (deprecated).
ASN1_STRING_dup	Deep-copy an ASN.1 string (type, data, and flags).
ASN1_STRING_free	Free an ASN.1 string and its contents.
ASN1_STRING_get0_data	Return a const pointer to the raw content octets of an ASN.1 string.
ASN1_STRING_get_default_mask	Return the process-wide default ASN.1 string type mask.
ASN1_STRING_length	Return the content length of an ASN.1 string in bytes.
ASN1_STRING_length_set [deprecated]	Set the reported content length of an ASN.1 string without resizing its buffer (deprecated).
ASN1_STRING_new	Allocate an empty ASN1_STRING with default type V_ASN1_OCTET_STRING.
ASN1_STRING_print	Print an ASN.1 string to a BIO, replacing unprintable bytes with '.'.
ASN1_STRING_print_ex	Print an ASN.1 string to a BIO using ASN1_STRFLGS_* formatting options.
ASN1_STRING_print_ex_fp	Print an ASN.1 string to a FILE with ASN1_STRING_print_ex() formatting flags.
ASN1_STRING_set	Copy data of length len into an ASN.1 string.
ASN1_STRING_set0	Assign an ASN.1 string ownership of an existing data buffer.
ASN1_STRING_set_by_NID	Create or update an ASN.1 string from multibyte input using the string table for nid.
ASN1_STRING_set_default_mask	Set the process-wide default B_ASN1_* mask used when selecting ASN.1 string types.
ASN1_STRING_set_default_mask_asc	Set the default ASN.1 string type mask from an ASCII name or mask expression.
ASN1_STRING_to_UTF8	Convert an ASN.1 string to a newly allocated UTF-8 byte sequence.
ASN1_STRING_type	Return the ASN.1 type tag stored in an ASN.1 string.
ASN1_STRING_type_new	Allocate an empty ASN1_STRING with the given ASN.1 string type.
ASN1_T61STRING_free	Free a ASN.1 TeletexString (T61String) and its contents.
ASN1_T61STRING_it	Return the ASN.1 item descriptor for ASN1_T61STRING.
ASN1_T61STRING_new	Allocate an empty ASN.1 TeletexString (T61String).
ASN1_TIME_adj	Set an ASN.1 Time to t plus a day/second offset (UTCTime or GeneralizedTime).
ASN1_TIME_check	Check that an ASN1_TIME value has valid UTCTime or GeneralizedTime syntax.
ASN1_TIME_cmp_time_t	Compare an ASN.1 time value with a calendar time_t.
ASN1_TIME_compare	Compare two ASN.1 time values chronologically.
ASN1_TIME_diff	Compute the day and second difference between two ASN.1 time values.
ASN1_TIME_dup	Duplicate an ASN1_TIME value (UTCTime or GeneralizedTime).
ASN1_TIME_free	Free a ASN.1 time value (UTCTime or GeneralizedTime) and its contents.
ASN1_TIME_it	Return the ASN.1 item descriptor for ASN1_TIME.
ASN1_TIME_new	Allocate an empty ASN.1 time value (UTCTime or GeneralizedTime).
ASN1_TIME_normalize	Normalize an ASN1_TIME so it is suitable for certificates and consistent printing.
ASN1_TIME_print	Print an ASN.1 Time (UTCTime or GeneralizedTime) to a BIO in a human-readable form.
ASN1_TIME_print_ex	Print an ASN.1 Time to a BIO with ASN1_DTFLGS_* formatting flags.
ASN1_TIME_set	Set an ASN.1 Time to the given POSIX time (UTCTime or GeneralizedTime).
ASN1_TIME_set_string	Set an ASN.1 time from an ASN.1 time string (UTCTime or GeneralizedTime form).
ASN1_TIME_set_string_X509	Set an ASN1_TIME from a string, preferring the X.509 UTCTime/GeneralizedTime rules.
ASN1_TIME_to_generalizedtime	Convert an ASN1_TIME to GeneralizedTime form.
ASN1_TIME_to_tm	Convert an ASN.1 time value to a broken-down UTC struct tm.
ASN1_TYPE_cmp	Compare two ASN1_TYPE values for identical type and content.
ASN1_TYPE_free	Free an ASN.1 ANY / ASN1_TYPE value and its contents.
ASN1_TYPE_get	Return the type tag stored in an ASN1_TYPE, or 0 if unset or empty.
ASN1_TYPE_get_int_octetstring	Extract the INTEGER and OCTET STRING from an ASN1_TYPE holding that SEQUENCE pair.
ASN1_TYPE_get_octetstring	Copy the OCTET STRING contents of an ASN1_TYPE into data.
ASN1_TYPE_new	Allocate an empty ASN.1 ANY / ASN1_TYPE container.
ASN1_TYPE_pack_sequence	Encode a typed structure as a SEQUENCE and store it in an ASN1_TYPE.
ASN1_TYPE_set	Set an ASN1_TYPE to type, taking ownership of value (no copy).
ASN1_TYPE_set1	Set an ASN1_TYPE to type, storing a copy of value (unlike ASN1_TYPE_set).
ASN1_TYPE_set_int_octetstring	Set an ASN1_TYPE to the SEQUENCE { INTEGER, OCTET STRING } pair used by some algorithm parameters.
ASN1_TYPE_set_octetstring	Set an ASN1_TYPE to an OCTET STRING containing a copy of data.
ASN1_TYPE_unpack_sequence	Decode the SEQUENCE contents of an ASN1_TYPE into a typed structure.
ASN1_UNIVERSALSTRING_free	Free an ASN.1 UniversalString and its contents.
ASN1_UNIVERSALSTRING_it	Return the ASN.1 item descriptor for ASN1_UNIVERSALSTRING.
ASN1_UNIVERSALSTRING_new	Allocate an empty ASN.1 UniversalString.
ASN1_UNIVERSALSTRING_to_string	Convert a UniversalString that holds only Latin-1 code points into a Printable/IA5/T61 string in place.
ASN1_UTCTIME_adj	Set an ASN1_UTCTIME from t adjusted by a day/second offset.
ASN1_UTCTIME_check	Check that an ASN1_UTCTIME value has valid UTCTime syntax.
ASN1_UTCTIME_cmp_time_t	Compare an ASN.1 UTCTime value with a calendar time_t.
ASN1_UTCTIME_dup	Deep-copy an ASN1_UTCTIME value.
ASN1_UTCTIME_free	Free an ASN.1 UTCTime and its contents.
ASN1_UTCTIME_it	Return the ASN.1 item descriptor for ASN1_UTCTIME.
ASN1_UTCTIME_new	Allocate an empty ASN.1 UTCTime.
ASN1_UTCTIME_print	Print an ASN.1 UTCTime to a BIO in human-readable form.
ASN1_UTCTIME_set	Set an ASN1_UTCTIME to the calendar time t (allocating when s is NULL).
ASN1_UTCTIME_set_string	Set an ASN1_UTCTIME from an ASN.1 UTCTime string (or only validate when s is NULL).
ASN1_UTF8STRING_free	Free an ASN.1 UTF8String and its contents.
ASN1_UTF8STRING_it	Return the ASN.1 item descriptor for ASN1_UTF8STRING.
ASN1_UTF8STRING_new	Allocate an empty ASN.1 UTF8String.
ASN1_VISIBLESTRING_free	Free an ASN.1 VisibleString and its contents.
ASN1_VISIBLESTRING_it	Return the ASN.1 item descriptor for ASN1_VISIBLESTRING.
ASN1_VISIBLESTRING_new	Allocate an empty ASN.1 VisibleString.
ASN1_add_oid_module	Register the built-in CONF module that loads OID name mappings from an "oid_section".
ASN1_add_stable_module	Register the built-in ASN.1 string-table (STABLE) configuration module.
ASN1_bn_print	Print a labeled BIGNUM to a BIO in hex, with indentation.
ASN1_buf_print	Print a byte buffer as colon-separated hex to a BIO with indentation.
ASN1_check_infinite_end	Check for an indefinite-length end-of-contents (EOC) marker without consuming it.
ASN1_const_check_infinite_end	Consume an indefinite-length end-of-contents (EOC) marker of two zero octets.
ASN1_d2i_bio	Decode an ASN.1 value from a BIO using allocator and d2i callbacks.
ASN1_d2i_fp	Decode an ASN.1 value from a FILE using allocator and d2i callbacks.
ASN1_digest [deprecated]	Digest the DER encoding of an ASN.1 structure using a supplied i2d encoder (deprecated).
ASN1_dup	Deep-copy an ASN.1 value by encoding with i2d then decoding with d2i.
ASN1_generate_nconf	Build an ASN1_TYPE from an ASN.1 generation string, resolving CONF macros.
ASN1_generate_v3	Build an ASN1_TYPE from an ASN.1 generation string, resolving extras via an X509V3_CTX.
ASN1_get_object	Parse the ASN.1 identifier and length octets at *pp.
ASN1_i2d_bio	Encode an ASN.1 value to a BIO using a type-specific i2d function.
ASN1_i2d_fp	Encode an ASN.1 value to a FILE using a type-specific i2d function.
ASN1_item_d2i	Decode a DER-encoded ASN.1 value using an item descriptor (default library context).
ASN1_item_d2i_bio	Decode an ASN.1 value described by it from a BIO (default library context).
ASN1_item_d2i_bio_ex	Decode an ASN.1 value described by it from a BIO, with library context.
ASN1_item_d2i_ex	Decode a DER-encoded ASN.1 value using an item descriptor and library context.
ASN1_item_d2i_fp	Decode an ASN.1 value described by it from a FILE (default library context).
ASN1_item_d2i_fp_ex	Decode an ASN.1 value described by it from a FILE, with library context.
ASN1_item_digest	Digest the ASN.1 encoding of data as described by it.
ASN1_item_dup	Deep-copy an ASN.1 value described by it.
ASN1_item_free	Free an ASN.1 value described by an ASN1_ITEM.
ASN1_item_i2d	Encode an ASN.1 value described by it to DER.
ASN1_item_i2d_bio	Encode an ASN.1 value to DER and write it to a BIO using an ASN1_ITEM.
ASN1_item_i2d_fp	Encode an ASN.1 item to DER and write the encoding to a FILE stream.
ASN1_item_i2d_mem_bio	Encode an ASN.1 value described by it into a newly allocated memory BIO.
ASN1_item_ndef_i2d	Encode an ASN.1 value to DER/BER using indefinite-length (NDEF) constructed form where applicable.
ASN1_item_new	Allocate a new ASN.1 value described by it using the default library context.
ASN1_item_new_ex	Allocate a new ASN.1 value described by it, with library context for algorithm fetches.
ASN1_item_pack	Encode obj with it and store the DER result in an OCTET STRING.
ASN1_item_print	Pretty-print an ASN.1 value described by it to a BIO.
ASN1_item_sign	Sign the DER encoding of an ASN.1 value described by it.
ASN1_item_sign_ctx	Sign the DER encoding of data using an already-initialized digest/signing context.
ASN1_item_sign_ex	Sign the DER encoding of data using it and write AlgorithmIdentifier(s) plus the signature.
ASN1_item_unpack	Decode the DER content of an OCTET STRING / ASN1_STRING using item it.
ASN1_item_unpack_ex	Decode DER from an ASN1_STRING using it, with library context for algorithm fetches.
ASN1_item_verify	Verify signature over the ASN.1 encoding of data described by it.
ASN1_item_verify_ctx	Verify signature over the ASN.1 encoding of data using digest context ctx.
ASN1_item_verify_ex	Verify signature over the DER encoding of data described by it.
ASN1_mbstring_copy	Convert multibyte input into an ASN.1 string, choosing a type allowed by mask.
ASN1_mbstring_ncopy	Like ASN1_mbstring_copy(), also enforcing minimum and maximum character counts.
ASN1_object_size	Compute the total DER size of a tagged ASN.1 value given its content length.
ASN1_parse	Recursively dump a DER ASN.1 structure to a BIO as indented text.
ASN1_parse_dump	Recursively dump a DER ASN.1 structure to a BIO, optionally hex-dumping string contents.
ASN1_put_eoc	Write a two-octet ASN.1 end-of-contents (0x00 0x00) marker and advance pp.
ASN1_put_object	Write an ASN.1 identifier and length octet(s) at *pp and advance the pointer.
ASN1_sign [deprecated]	Sign ASN.1 data described by an i2d encoder using pkey (deprecated).
ASN1_str2mask	Parse a pipe-separated list of ASN1_STRFLGS_* flag names into a mask.
ASN1_tag2bit	Map an ASN.1 universal tag number to the corresponding B_ASN1_* bit mask.
ASN1_tag2str	Return a human-readable name for an ASN.1 universal tag number.
ASN1_verify [deprecated]	Verify a signature over the DER encoding produced by i2d (deprecated).
ASRange_free	Free an AS number range value and its contents.
ASRange_it	Return the ASN.1 item descriptor for ASRange.
ASRange_new	Allocate a new AS number range value.
ASYNC_WAIT_CTX_clear_fd	Remove the wait file descriptor associated with key from a wait context.
ASYNC_WAIT_CTX_free	Free an asynchronous wait context and its associated resources.
ASYNC_WAIT_CTX_get_all_fds	Collect every wait file descriptor currently registered on ctx.
ASYNC_WAIT_CTX_get_callback	Retrieve the completion callback previously set on an async wait context.
ASYNC_WAIT_CTX_get_changed_fds	Retrieve file descriptors added to or removed from a wait context since the last poll.
ASYNC_WAIT_CTX_get_fd	Look up the wait file descriptor registered under key.
ASYNC_WAIT_CTX_get_status	Get the current status of an asynchronous wait context.
ASYNC_WAIT_CTX_new	Allocate a new asynchronous wait context.
ASYNC_WAIT_CTX_set_callback	Register a callback notified when an engine completes an async operation.
ASYNC_WAIT_CTX_set_status	Set the engine-reported status of an asynchronous wait context.
ASYNC_WAIT_CTX_set_wait_fd	Associate a waitable file descriptor with a key in the wait context.
ASYNC_block_pause	Temporarily ignore ASYNC_pause_job() on the current thread.
ASYNC_cleanup_thread	Release per-thread asynchronous job resources allocated by ASYNC_init_thread().
ASYNC_get_current_job	Return the ASYNC_JOB currently executing on this thread, if any.
ASYNC_get_mem_functions	Retrieve the current custom ASYNC stack allocator callbacks.
ASYNC_get_wait_ctx	Return the wait context associated with an asynchronous job.
ASYNC_init_thread	Initialise per-thread asynchronous job support for the current thread.
ASYNC_is_capable	Report whether the current platform supports asynchronous jobs.
ASYNC_pause_job	Pause the current ASYNC_JOB and return control to ASYNC_start_job().
ASYNC_set_mem_functions	Install custom stack allocators used for ASYNC jobs on POSIX.
ASYNC_start_job	Start or resume an asynchronous job.
ASYNC_unblock_pause	Allow ASYNC_pause_job() again after a matching ASYNC_block_pause().
AUTHORITY_INFO_ACCESS_free	Free an Authority Information Access extension value and its contents.
AUTHORITY_INFO_ACCESS_it	Return the ASN.1 item descriptor for AUTHORITY_INFO_ACCESS.
AUTHORITY_INFO_ACCESS_new	Allocate a new Authority Information Access extension value.
AUTHORITY_KEYID_free	Free an AUTHORITY_KEYID structure and its contents.
AUTHORITY_KEYID_it	Return the ASN.1 item descriptor for AUTHORITY_KEYID.
AUTHORITY_KEYID_new	Allocate a new Authority Key Identifier extension value.
BASIC_CONSTRAINTS_free	Free a BASIC_CONSTRAINTS structure and its contents.
BASIC_CONSTRAINTS_it	Return the ASN.1 item descriptor for BASIC_CONSTRAINTS.
BASIC_CONSTRAINTS_new	Allocate a new Basic Constraints extension value.
BF_cbc_encrypt [deprecated]	Encrypt or decrypt data with Blowfish in CBC mode (deprecated).
BF_cfb64_encrypt [deprecated]	Encrypt or decrypt with Blowfish in 64-bit CFB mode (deprecated; prefer EVP_EncryptInit_ex and related EVP APIs).
BF_decrypt [deprecated]	Decrypt one Blowfish block in place (deprecated low-level primitive).
BF_ecb_encrypt [deprecated]	Encrypt or decrypt one 8-byte Blowfish block in ECB mode (deprecated).
BF_encrypt [deprecated]	Encrypt one Blowfish block in place (deprecated low-level primitive).
BF_ofb64_encrypt [deprecated]	Encrypt or decrypt with Blowfish in 64-bit OFB mode (deprecated).
BF_options [deprecated]	Return a short string describing the compiled Blowfish implementation (deprecated).
BF_set_key [deprecated]	Expand a raw Blowfish key into a BF_KEY schedule (deprecated).
BIO_ADDRINFO_address	Return the BIO_ADDR carried by an address-info list node.
BIO_ADDRINFO_family	Return the address family of a BIO_ADDRINFO node (for example AF_INET).
BIO_ADDRINFO_free	Free a BIO_ADDRINFO list allocated by BIO_lookup() / BIO_lookup_ex().
BIO_ADDRINFO_next	Advance to the next node in a BIO_ADDRINFO linked list.
BIO_ADDRINFO_protocol	Return the protocol number from an address-info element (for example IPPROTO_TCP).
BIO_ADDRINFO_socktype	Return the socket type of a BIO_ADDRINFO node (for example SOCK_STREAM).
BIO_ADDR_clear	Reset a BIO_ADDR to an empty/uninitialized state.
BIO_ADDR_copy	Copy a BIO_ADDR value from src into dst.
BIO_ADDR_dup	Duplicate a BIO_ADDR, copying its family and address bytes.
BIO_ADDR_family	Return the address family stored in a BIO_ADDR (for example AF_INET).
BIO_ADDR_free	Free a BIO_ADDR allocated with BIO_ADDR_new() or BIO_ADDR_dup().
BIO_ADDR_hostname_string	Format the host portion of a BIO_ADDR as an allocated string.
BIO_ADDR_new	Allocate a zero-initialized BIO_ADDR for socket address APIs.
BIO_ADDR_path_string	Return a newly allocated string for the filesystem path in a Unix-domain BIO_ADDR.
BIO_ADDR_rawaddress	Extract the raw network address bytes from a BIO_ADDR.
BIO_ADDR_rawmake	Populate a BIO_ADDR from a raw address family, bytes, and port.
BIO_ADDR_rawport	Return the port number from a BIO_ADDR in host byte order.
BIO_ADDR_service_string	Format the service/port portion of a BIO_ADDR as an allocated string.
BIO_accept [deprecated]	Accept a connection on a listening socket and return peer host:port text (deprecated).
BIO_accept_ex	Accept a connection on accept_sock, optionally capturing the peer address.
BIO_asn1_get_prefix	Retrieve the ASN.1 prefix producer and optional free callback from a BIO.
BIO_asn1_get_suffix	Retrieve the ASN.1 suffix producer and optional free callback from a BIO.
BIO_asn1_set_prefix	Install prefix encode/free callbacks on a BIO_f_asn1() filter BIO.
BIO_asn1_set_suffix	Install suffix encode/free callbacks on a BIO_f_asn1() filter BIO.
BIO_bind	Bind socket sock to addr, applying BIO_SOCK_* options.
BIO_callback_ctrl	Invoke a BIO ctrl that takes a BIO_info_cb callback pointer.
BIO_clear_flags	Clear the given BIO_FLAGS_* bits from a BIO.
BIO_closesocket	Close a socket descriptor with OpenSSL error reporting.
BIO_connect	Connect socket sock to addr, applying BIO_SOCK_* options.
BIO_copy_next_retry	Copy retry reason/flags from the next BIO in the chain onto b.
BIO_ctrl	Invoke a type-specific control operation on a BIO.
BIO_ctrl_get_read_request	Return how many bytes the peer half of a BIO pair last tried to read while the buffer was empty.
BIO_ctrl_get_write_guarantee	Return how many bytes can currently be written without blocking or growing buffers.
BIO_ctrl_pending	Return the number of bytes buffered for reading in a BIO (ctrl pending read count).
BIO_ctrl_reset_read_request	Clear the pending read-request size tracked by a buffering BIO.
BIO_ctrl_wpending	Return the number of bytes buffered for writing in a BIO (ctrl pending write count).
BIO_debug_callback [deprecated]	Default legacy BIO debug logger writing to the BIO's callback-argument BIO (deprecated).
BIO_debug_callback_ex	Default BIO info callback that logs operations to the BIO's callback argument BIO.
BIO_dgram_non_fatal_error	Report whether a datagram socket errno / WSA error is a non-fatal retryable condition.
BIO_do_connect_retry	Drive BIO_do_connect() with retries until connected, failed, or timeout elapses.
BIO_dump	Hex-dump len bytes at bytes to a BIO (no leading indent).
BIO_dump_cb	Hex-dump len bytes at s by invoking cb for each formatted chunk.
BIO_dump_fp	Hex-dump len bytes at s to a stdio FILE.
BIO_dump_indent	Hex-dump len bytes at bytes to a BIO with leading indent.
BIO_dump_indent_cb	Hex-dump len bytes at s with leading indent, via callback output.
BIO_dump_indent_fp	Hex-dump len bytes at s to a stdio FILE with leading indent.
BIO_dup_chain	Duplicate an entire BIO chain, copying type-specific state where supported.
BIO_err_is_non_fatal	Report whether a system or socket error code is a non-fatal retryable I/O condition.
BIO_f_asn1	Return the filter BIO_METHOD that encodes ASN.1 values to a downstream BIO.
BIO_f_base64	Return the BIO filter method that Base64-encodes or decodes data.
BIO_f_buffer	Return the BIO filter method that buffers reads and writes to the next BIO.
BIO_f_cipher	Return the filter BIO_METHOD that encrypts or decrypts data with an EVP_CIPHER.
BIO_f_linebuffer	Return the BIO_METHOD for a line-buffering filter BIO.
BIO_f_md	Return the message-digest filter BIO method.
BIO_f_nbio_test	Return the BIO filter method that randomly injects non-blocking retry conditions (test aid).
BIO_f_null	Return the BIO_METHOD for a null filter that discards writes and yields EOF on reads.
BIO_f_prefix	Return the BIO filter method that prefixes each output line with a configurable string.
BIO_f_readbuffer	Return the BIO filter method that read-ahead buffers data from the next BIO.
BIO_f_reliable	Return the BIO filter method that adds a digest-protected reliable stream.
BIO_f_ssl	Return the SSL filter BIO method that wraps TLS I/O in a BIO.
BIO_fd_non_fatal_error	Report whether a file-descriptor errno is a non-fatal retryable I/O condition.
BIO_fd_should_retry	Decide whether a file-descriptor BIO I/O result should be retried.
BIO_find_type	Walk a BIO chain and return the first BIO whose method type matches bio_type.
BIO_free	Free a single BIO (does not free BIOs linked after it in a chain).
BIO_free_all	Free a and every BIO linked after it in the chain (alias for BIO_vfree()).
BIO_get_accept_socket [deprecated]	Create a listening TCP socket for host_port (deprecated; prefer BIO_new_accept).
BIO_get_callback [deprecated]	Return the legacy BIO callback previously set with BIO_set_callback() (deprecated).
BIO_get_callback_arg	Return the opaque callback-argument pointer stored on a BIO.
BIO_get_callback_ex	Return the extended BIO callback installed with BIO_set_callback_ex().
BIO_get_data	Return the implementation-specific pointer stored on a BIO.
BIO_get_ex_data	Retrieve application data previously stored on a BIO with BIO_set_ex_data().
BIO_get_host_ip [deprecated]	Resolve a hostname to four IPv4 octets (deprecated; prefer BIO_lookup()).
BIO_get_init	Test whether a custom BIO has been initialized by its create() callback.
BIO_get_line	Read bytes until a newline or EOF, without requiring a trailing NUL in the source.
BIO_get_new_index	Allocate a new unique BIO type index for a custom BIO_METHOD.
BIO_get_port [deprecated]	Parse a service name or numeric port string (deprecated; prefer modern address APIs).
BIO_get_retry_BIO	Walk a BIO chain after BIO_should_io_special() and locate the BIO requesting a retry.
BIO_get_retry_reason	Return the BIO_RR_* retry reason stored on a BIO.
BIO_get_rpoll_descriptor	Fill desc with the pollable read-side target for a BIO (if any).
BIO_get_shutdown	Return whether BIO_free() will close the underlying I/O resource.
BIO_get_wpoll_descriptor	Fill desc with the pollable write-side target for a BIO (if any).
BIO_gethostbyname [deprecated]	Resolve name with gethostbyname(3) (deprecated; prefer BIO_lookup_ex()).
BIO_gets	Read a line from a BIO into buf (NUL-terminated; strips trailing newline when present).
BIO_hex_string	Write datalen bytes from data as a colon-separated hex string to a BIO.
BIO_indent	Write up to max spaces of indentation to a BIO.
BIO_int_ctrl	Invoke a BIO ctrl that takes an integer argument in the low word.
BIO_listen	Bind and listen on a socket using addr and BIO_SOCK_* options.
BIO_lookup	Resolve host / service into a BIO_ADDRINFO list.
BIO_lookup_ex	Resolve host / service into a BIO_ADDRINFO list with protocol selection.
BIO_meth_free	Free a BIO_METHOD allocated with BIO_meth_new().
BIO_meth_get_callback_ctrl	Return the callback-ctrl function installed on a BIO_METHOD.
BIO_meth_get_create	Return the create callback installed on a BIO_METHOD.
BIO_meth_get_ctrl	Return the ctrl function installed on a BIO_METHOD.
BIO_meth_get_destroy	Return the destroy callback installed on a BIO_METHOD.
BIO_meth_get_gets	Return the gets function installed on a BIO_METHOD.
BIO_meth_get_puts	Return the puts callback installed on a BIO_METHOD.
BIO_meth_get_read	Return the legacy read function installed on a BIO_METHOD.
BIO_meth_get_read_ex	Return the extended read function installed on a BIO_METHOD.
BIO_meth_get_recvmmsg	Return the multi-message receive callback installed on a BIO_METHOD.
BIO_meth_get_sendmmsg	Return the multi-message send callback installed on a BIO_METHOD.
BIO_meth_get_write	Return the legacy write function installed on a BIO_METHOD.
BIO_meth_get_write_ex	Return the extended write function installed on a BIO_METHOD.
BIO_meth_new	Allocate a new custom BIO_METHOD with the given type index and name.
BIO_meth_set_callback_ctrl	Install the callback-ctrl function on a custom BIO_METHOD.
BIO_meth_set_create	Install the create callback invoked when a BIO of this method is allocated.
BIO_meth_set_ctrl	Install the ctrl callback on a BIO_METHOD.
BIO_meth_set_destroy	Install the destroy callback invoked when a BIO of this method is freed.
BIO_meth_set_gets	Install the gets callback on a BIO_METHOD.
BIO_meth_set_puts	Install the puts callback on a BIO_METHOD.
BIO_meth_set_read	Install the legacy read callback on a BIO_METHOD.
BIO_meth_set_read_ex	Install the extended read callback on a BIO_METHOD.
BIO_meth_set_recvmmsg	Install the multi-message receive callback on a BIO_METHOD.
BIO_meth_set_sendmmsg	Install the multi-message send callback used by BIO_sendmmsg() on a BIO_METHOD.
BIO_meth_set_write	Install the legacy write callback on a BIO_METHOD.
BIO_meth_set_write_ex	Install the size_t-based write callback on a BIO_METHOD.
BIO_method_name	Return the human-readable name of the BIO_METHOD attached to b.
BIO_method_type	Return the BIO type code of the method used by b (BIO_TYPE_*).
BIO_new	Allocate a new BIO using type and the default library context.
BIO_new_CMS	Wrap a CMS ContentInfo in a filter BIO that writes indefinite-length BER to out.
BIO_new_NDEF	Create a streaming BIO that encodes val in indefinite-length (NDEF) DER form.
BIO_new_PKCS7	Create a filter BIO that finalises and writes streaming PKCS#7 ASN.1 to out.
BIO_new_accept	Create an accept BIO bound to host_port (host:port or port-only form).
BIO_new_bio_dgram_pair	Create a connected pair of in-memory datagram BIOs.
BIO_new_bio_pair	Create two connected memory BIOs that form a reliable in-memory byte pipe.
BIO_new_buffer_ssl_connect	Create a BIO chain of buffering BIO, SSL BIO, and connect BIO.
BIO_new_connect	Create a BIO_s_connect() BIO configured for host_port.
BIO_new_dgram	Create a datagram (UDP-style) BIO wrapping an existing socket descriptor.
BIO_new_ex	Allocate a new BIO for method using the given library context.
BIO_new_fd	Create a file-descriptor BIO wrapping an existing OS descriptor.
BIO_new_file	Open filename and wrap it in a BIO_s_file() BIO.
BIO_new_fp	Wrap a stdio FILE* in a BIO_s_file() BIO.
BIO_new_from_core_bio	Wrap a provider OSSL_CORE_BIO in a library BIO_s_core() BIO.
BIO_new_mem_buf	Create a read-only memory BIO that reads from an existing buffer.
BIO_new_socket	Wrap an existing socket descriptor in a BIO_s_socket() BIO.
BIO_new_ssl	Allocate an SSL filter BIO using the given context.
BIO_new_ssl_connect	Create a BIO chain of an SSL BIO and a connect BIO.
BIO_next	Return the next BIO in a filter chain after b.
BIO_nread	Consume up to num bytes from a memory BIO, returning an internal pointer.
BIO_nread0	Peek at readable bytes in a memory BIO without consuming them.
BIO_number_read	Return the cumulative number of bytes successfully read through a BIO.
BIO_number_written	Return the cumulative number of bytes successfully written through a BIO.
BIO_nwrite	Obtain a writable buffer from a memory BIO and advance its write pointer.
BIO_nwrite0	Obtain a writable buffer from a memory BIO without advancing the write pointer.
BIO_parse_hostserv	Split a host:service string into separately allocated host and service names.
BIO_pop	Remove the first BIO from a chain and return the new head.
BIO_printf	Formatted print to a BIO, analogous to fprintf().
BIO_ptr_ctrl	Invoke a BIO ctrl that returns a pointer result.
BIO_push	Append append to the filter chain rooted at b and return the new head.
BIO_puts	Write the NUL-terminated string buf to BIO bp.
BIO_read	Read up to dlen bytes from BIO b into data.
BIO_read_ex	Attempt to read up to dlen bytes from BIO b into data.
BIO_recvmmsg	Receive multiple datagram messages through a BIO (recvmmsg-style).
BIO_s_accept	Return the BIO_METHOD for a passive TCP accept socket BIO.
BIO_s_bio	Return the BIO_METHOD for a BIO-pair endpoint (in-memory pipe half).
BIO_s_connect	Return the BIO_METHOD for a TCP connect (client) socket BIO.
BIO_s_core	Return the BIO_METHOD for a core BIO that reads/writes via an OSSL_CORE_BIO.
BIO_s_datagram	Return the BIO_METHOD for a datagram (UDP) socket BIO.
BIO_s_dgram_mem	Return the BIO_METHOD for an in-memory datagram BIO.
BIO_s_dgram_pair	Return the BIO_METHOD for a datagram BIO-pair endpoint (in-memory UDP-style pipe half).
BIO_s_fd	Return the BIO_METHOD for a file-descriptor source/sink BIO.
BIO_s_file	Return the BIO_METHOD for stdio FILE-backed source/sink BIOs.
BIO_s_log	Return the BIO_METHOD for a logging sink BIO (writes to the system log).
BIO_s_mem	Return the BIO_METHOD for a memory (RAM buffer) source/sink BIO.
BIO_s_null	Return the BIO_METHOD for a null source/sink that discards writes and returns EOF on reads.
BIO_s_secmem	Return the BIO_METHOD for a secure-heap memory BIO.
BIO_s_socket	Return the BIO_METHOD for a socket source/sink BIO.
BIO_sendmmsg	Send multiple messages through a BIO (sendmmsg-style interface).
BIO_set_callback [deprecated]	Install a legacy pre/post I/O callback on a BIO (deprecated; prefer BIO_set_callback_ex).
BIO_set_callback_arg	Store an opaque pointer passed to BIO callbacks as the callback argument.
BIO_set_callback_ex	Install an extended pre/post I/O callback on a BIO.
BIO_set_cipher	Configure a cipher filter BIO with algorithm, key, IV, and encrypt/decrypt mode.
BIO_set_data	Store an implementation-specific pointer on a BIO (used by custom BIO methods).
BIO_set_ex_data	Store application-specific data on a BIO at the given ex_data index.
BIO_set_flags	Set the given flag bits on a BIO (bitwise OR into the BIO's flags).
BIO_set_init	Mark whether a custom BIO method has completed its create() initialization.
BIO_set_next	Set the next BIO in a filter chain after b.
BIO_set_retry_reason	Store a BIO_RR_* retry reason on a BIO (used by BIO methods after special I/O).
BIO_set_shutdown	Set whether BIO_free() should close the underlying I/O resource.
BIO_set_tcp_ndelay	Enable or disable TCP_NODELAY on a socket.
BIO_snprintf	Bounded snprintf-style formatting into buf (NUL-terminated when n > 0).
BIO_sock_error	Return the pending socket error for sock (clears SO_ERROR).
BIO_sock_info	Query socket metadata into a BIO_sock_info_u union.
BIO_sock_init	Initialize platform socket support used by BIO socket helpers (Winsock on Windows).
BIO_sock_non_fatal_error	Report whether a socket errno / WSA error is a non-fatal retryable condition.
BIO_sock_should_retry	Decide whether a socket BIO operation should be retried after return value i.
BIO_socket	Create a socket with optional BIO_SOCK_* behaviour flags applied.
BIO_socket_ioctl	Perform an ioctl on a socket descriptor with BIO error reporting.
BIO_socket_nbio	Set or clear non-blocking mode on a socket file descriptor.
BIO_socket_wait	Wait on a socket until it is ready for I/O or until max_time elapses.
BIO_ssl_copy_session_id	Copy the SSL session ID between two BIO chains that contain SSL BIOs.
BIO_ssl_shutdown	Shut down the SSL session on an SSL BIO chain.
BIO_test_flags	Test whether any of the given flag bits are set on a BIO.
BIO_up_ref	Increment the reference count of a BIO.
BIO_vfree	Free a BIO and every BIO linked after it in the chain.
BIO_vprintf	printf-style formatted write to a BIO using a va_list.
BIO_vsnprintf	Format a string into buf like vsnprintf, using OpenSSL's portable formatter.
BIO_wait	Wait until a BIO is ready for I/O or until max_time elapses.
BIO_write	Write dlen bytes from data to a BIO.
BIO_write_ex	Write up to dlen bytes from data to a BIO.
BN_BLINDING_convert	Blind n for a private modular operation using b (equivalent to BN_BLINDING_convert_ex with no saved inverse).
BN_BLINDING_convert_ex	Blind n using b, optionally storing the inverse factor in r.
BN_BLINDING_create_param	Create or refresh RSA blinding factors A and A^-1 mod m.
BN_BLINDING_free	Free a BN_BLINDING object and its associated factors.
BN_BLINDING_get_flags	Return the behavioural flag mask stored on a BN_BLINDING object.
BN_BLINDING_invert	Unblind n after a private modular operation using b (BN_BLINDING_invert_ex with no saved r).
BN_BLINDING_invert_ex	Unblind n using b, optionally multiplying by a caller-supplied inverse factor r.
BN_BLINDING_is_current_thread	Report whether b is marked as owned by the calling thread.
BN_BLINDING_lock	Acquire the mutex associated with a BN_BLINDING object.
BN_BLINDING_new	Allocate a BN_BLINDING object from blinding factors A and A^-1 mod mod.
BN_BLINDING_set_current_thread	Record the calling thread as the owner of blinding context b.
BN_BLINDING_set_flags	Set behavioural flags on a BN_BLINDING object.
BN_BLINDING_unlock	Release the mutex associated with a BN_BLINDING object.
BN_BLINDING_update	Refresh a BN_BLINDING object by squaring its blinding factors.
BN_CTX_end	End a BN_CTX temporary frame started with BN_CTX_start(), releasing its BN_CTX_get() values.
BN_CTX_free	Free a BN_CTX and any BIGNUMs still owned by its stack frames.
BN_CTX_get	Obtain a temporary BIGNUM from the current BN_CTX frame started by BN_CTX_start().
BN_CTX_new	Allocate a BN_CTX using the default library context.
BN_CTX_new_ex	Allocate a BN_CTX associated with library context ctx.
BN_CTX_secure_new	Allocate a BN_CTX whose temporary BIGNUMs use the secure heap.
BN_CTX_secure_new_ex	Allocate a BN_CTX whose temporary BIGNUMs use secure heap storage.
BN_CTX_start	Begin a temporary BIGNUM frame on a BN_CTX.
BN_GENCB_call	Invoke a BN_GENCB progress callback with event codes a and b.
BN_GENCB_free	Free a BN_GENCB allocated by BN_GENCB_new().
BN_GENCB_get_arg	Return the user argument previously associated with a BN_GENCB.
BN_GENCB_new	Allocate a BN_GENCB used to report progress from prime generation.
BN_GENCB_set	Populate a BN_GENCB with a new-style progress callback that returns success/failure.
BN_GENCB_set_old	Populate a BN_GENCB with a legacy void-returning progress callback.
BN_GF2m_add	Add binary polynomials over GF(2): r = a XOR b (addition without carry).
BN_GF2m_arr2poly	Build a GF(2^m) irreducible polynomial BIGNUM from an exponent index array.
BN_GF2m_mod	Reduce a modulo irreducible polynomial p in GF(2^m): r = a mod p.
BN_GF2m_mod_arr	Reduce a modulo an irreducible GF(2^m) polynomial given as an int array: r = a mod p.
BN_GF2m_mod_div	Compute r = (a / b) mod p for binary polynomial-field (GF(2^m)) values.
BN_GF2m_mod_div_arr	Compute r = (a / b) in GF(2^m) with reduction polynomial p[].
BN_GF2m_mod_exp	Compute r = (a ^ b) mod p for binary polynomial-field (GF(2^m)) values.
BN_GF2m_mod_exp_arr	Exponentiate in GF(2^m) with the modulus given as an int array: r = (a ^ b) mod p.
BN_GF2m_mod_inv	Compute the multiplicative inverse in GF(2^m): r = (1 / b) mod p.
BN_GF2m_mod_inv_arr	Compute the inverse of b modulo an irreducible GF(2^m) polynomial given as an int array.
BN_GF2m_mod_mul	Multiply then reduce in GF(2^m): r = (a * b) mod p.
BN_GF2m_mod_mul_arr	Multiply then reduce in GF(2^m) with the modulus given as an int array: r = (a * b) mod p.
BN_GF2m_mod_solve_quad	Solve the quadratic r^2 + r = a mod p over GF(2^m).
BN_GF2m_mod_solve_quad_arr	Solve the quadratic r^2 + r = a mod p over GF(2^m) with the modulus given as an int array.
BN_GF2m_mod_sqr	Square then reduce in GF(2^m): r = (a * a) mod p.
BN_GF2m_mod_sqr_arr	Square then reduce in GF(2^m) with the modulus given as an int array: r = (a * a) mod p.
BN_GF2m_mod_sqrt	Compute a square root in GF(2^m): r = sqrt(a) mod p.
BN_GF2m_mod_sqrt_arr	Compute a square root in GF(2^m) with the modulus given as an int array: r = sqrt(a) mod p.
BN_GF2m_poly2arr	Convert a GF(2^m) polynomial BIGNUM into a descending exponent index array.
BN_MONT_CTX_copy	Copy Montgomery context from into to.
BN_MONT_CTX_free	Free a BN_MONT_CTX allocated by BN_MONT_CTX_new().
BN_MONT_CTX_new	Allocate an empty Montgomery multiplication context.
BN_MONT_CTX_set	Initialize a Montgomery context for modulus mod.
BN_MONT_CTX_set_locked	Lazily initialize a shared Montgomery context under a lock.
BN_RECP_CTX_free	Free a BN_RECP_CTX allocated by BN_RECP_CTX_new().
BN_RECP_CTX_new	Allocate a BN_RECP_CTX used to accelerate repeated modular reduction.
BN_RECP_CTX_set	Configure a reciprocal context for repeated division by modulus rdiv.
BN_X931_derive_prime_ex [deprecated]	Derive an X9.31 prime p from Xp/Xp1/Xp2 parameters (deprecated).
BN_X931_generate_Xpq [deprecated]	Generate random X9.31 parameters Xp and Xq of half the requested RSA bit length (deprecated).
BN_X931_generate_prime_ex [deprecated]	Generate an X9.31-style probable prime derived from parameters Xp/e (deprecated).
BN_abs_is_word	Test whether the absolute value of a equals word w.
BN_add	Add signed BIGNUMs: r = a + b.
BN_add_word	Add word w to BIGNUM a in place.
BN_are_coprime	Test whether a and b are coprime (gcd == 1), possibly mutating a.
BN_asc2bn	Parse an ASCII decimal or hexadecimal integer into a BIGNUM.
BN_bin2bn	Convert len big-endian unsigned bytes at s into a BIGNUM.
BN_bn2bin	Encode the absolute value of a as a minimal big-endian unsigned byte string.
BN_bn2binpad	Encode a BIGNUM as a fixed-length big-endian unsigned byte string.
BN_bn2dec	Convert a BIGNUM to a newly allocated decimal string.
BN_bn2hex	Convert a BIGNUM to a newly allocated hexadecimal string.
BN_bn2lebinpad	Encode a BIGNUM as fixed-length little-endian unsigned bytes with zero padding.
BN_bn2mpi	Encode a in MPI format (4-byte length prefix plus big-endian content).
BN_bn2nativepad	Encode a BIGNUM as a fixed-length native-endian unsigned byte string.
BN_bntest_rand	Generate a non-cryptographic test random BIGNUM for BN self-tests.
BN_check_prime	Test whether p is prime using the library's default primality checks.
BN_clear	Set a BIGNUM to zero and scrub its limb storage.
BN_clear_bit	Clear bit n of BIGNUM a.
BN_clear_free	Clear sensitive digits of a BIGNUM and free it.
BN_cmp	Compare two BIGNUMs considering sign.
BN_consttime_swap	Conditionally swap the top nwords limbs (and top/neg) of two BIGNUMs in constant time.
BN_copy	Copy BIGNUM b into a, resizing a as needed.
BN_dec2bn	Parse a decimal ASCII string into a BIGNUM.
BN_div	Divide m by d, writing quotient and/or remainder.
BN_div_recp	Divide m by the reciprocal modulus in recp, producing quotient and remainder.
BN_div_word	Divide a by word w in place and return the remainder.
BN_dup	Allocate a new BIGNUM that is a deep copy of a.
BN_exp	Compute r = a^p (non-modular exponentiation).
BN_free	Free a BIGNUM and its limbs (no-op for static BIGNUMs flagged BN_FLG_STATIC_DATA).
BN_from_montgomery	Convert a from Montgomery representation to a normal residue modulo mont->N.
BN_gcd	Compute the greatest common divisor of a and b.
BN_generate_dsa_nonce	Generate a DSA/ECDSA per-signature nonce in [0, ]range).
BN_generate_prime [deprecated]	Generate a prime of approximately bits (deprecated; prefer BN_generate_prime_ex).
BN_generate_prime_ex	Generate a probable prime of the requested size and congruence constraints.
BN_generate_prime_ex2	Generate a probable prime into ret using caller-supplied BN_CTX scratch space.
BN_get0_nist_prime_192	Return the NIST P-192 prime as a shared BIGNUM.
BN_get0_nist_prime_224	Return the NIST P-224 prime as a shared BIGNUM.
BN_get0_nist_prime_256	Return the NIST P-256 prime as a shared BIGNUM.
BN_get0_nist_prime_384	Return the NIST P-384 prime as a shared BIGNUM.
BN_get0_nist_prime_521	Return the NIST P-521 prime (2^521 - 1) as a shared BIGNUM.
BN_get_flags	Test whether the given BN_FLG_* bits are set on a BIGNUM.
BN_get_params [deprecated]	Return a legacy BN library tuning parameter (deprecated no-op on modern OpenSSL).
BN_get_rfc2409_prime_1024	Return the 1024-bit MODP group prime from RFC 2409.
BN_get_rfc2409_prime_768	Return the 768-bit MODP group prime from RFC 2409.
BN_get_rfc3526_prime_1536	Return the 1536-bit MODP group prime from RFC 3526.
BN_get_rfc3526_prime_2048	Return the 2048-bit MODP group prime from RFC 3526.
BN_get_rfc3526_prime_3072	Return the 3072-bit MODP group prime from RFC 3526.
BN_get_rfc3526_prime_4096	Return the 4096-bit MODP group prime from RFC 3526.
BN_get_rfc3526_prime_6144	Return the 6144-bit MODP group prime from RFC 3526.
BN_get_rfc3526_prime_8192	Return the 8192-bit MODP group prime from RFC 3526.
BN_get_word	Return a as a BN_ULONG when it fits in a single word.
BN_hex2bn	Parse a hexadecimal ASCII string into a BIGNUM.
BN_is_bit_set	Test whether bit n of a BIGNUM is set.
BN_is_negative	BN_is_negative returns 1 if the BIGNUM is negative
BN_is_odd	Test whether a BIGNUM is odd.
BN_is_one	Test whether a BIGNUM equals one.
BN_is_prime [deprecated]	Probable-primality test without trial division (deprecated; prefer BN_check_prime()).
BN_is_prime_ex [deprecated]	Test whether p is prime using Miller-Rabin (deprecated; prefer BN_check_prime).
BN_is_prime_fasttest [deprecated]	Probable-primality test with optional trial division (deprecated).
BN_is_prime_fasttest_ex [deprecated]	Probable-primality test with optional trial division (deprecated; prefer BN_check_prime).
BN_is_word	Test whether a BIGNUM equals the single word w (including sign of zero).
BN_is_zero	Test whether a BIGNUM is zero.
BN_kronecker	Compute the Kronecker symbol (a/b), a generalization of the Jacobi symbol.
BN_lebin2bn	Convert a little-endian unsigned byte array to a BIGNUM.
BN_lshift	Compute r = a << n (left shift by n bits).
BN_lshift1	Compute r = a << 1 (left shift by one bit), i.e. r = 2 * a.
BN_mask_bits	Truncate a in place so that only the least-significant n bits remain.
BN_mod_add	Modular addition: r = (a + b) mod m with non-negative result.
BN_mod_add_quick	Compute r = (a + b) mod m assuming 0 <= a,b < m.
BN_mod_exp	Compute modular exponentiation: r = (a ^ p) mod m.
BN_mod_exp2_mont	Montgomery modular dual exponentiation: r = a1^p1 * a2^p2 mod m.
BN_mod_exp_mont	Compute modular exponentiation using Montgomery reduction: r = (a ^ p) mod m.
BN_mod_exp_mont_consttime	Compute modular exponentiation in constant time: rr = (a ^ p) mod m.
BN_mod_exp_mont_consttime_x2	Compute two constant-time Montgomery modular exponentiations together.
BN_mod_exp_mont_word	Montgomery modular exponentiation with a single-word base: r = (a ^ p) mod m.
BN_mod_exp_recp	Compute modular exponentiation using reciprocal reduction: r = (a ^ p) mod m.
BN_mod_exp_simple	Compute modular exponentiation with a simple sliding-window algorithm: r = (a ^ p) mod m.
BN_mod_inverse	Compute the modular inverse of a modulo n.
BN_mod_lshift	Compute r = (a << n) mod m (left-shift then reduce).
BN_mod_lshift1	Compute r = (a << 1) mod m.
BN_mod_lshift1_quick	Compute r = (a << 1) mod m, assuming 0 <= a < m.
BN_mod_lshift_quick	Left-shift then reduce quickly: r = (a << n) mod m (assumes 0 <= a < m).
BN_mod_mul	Compute r = (a * b) mod m.
BN_mod_mul_montgomery	Montgomery multiply a and b modulo mont's modulus into r.
BN_mod_mul_reciprocal	Multiply then reduce using a reciprocal context: r = (x * y) mod m (m from recp).
BN_mod_sqr	Compute r = (a * a) mod m.
BN_mod_sqrt	Compute a modular square root: ret^2 ≡ a (mod n) when a quadratic residue.
BN_mod_sub	Compute r = (a - b) mod m.
BN_mod_sub_quick	Compute r = (a - b) mod m assuming 0 <= a,b < m.
BN_mod_word	Return a modulo word w.
BN_mpi2bn	Decode an MPI-format integer (4-byte length prefix plus big-endian content).
BN_mul	Multiply two BIGNUMs: r = a * b.
BN_mul_word	Multiply BIGNUM a by word w in place: a := a * w.
BN_native2bn	Decode a native-endian unsigned byte string into a BIGNUM.
BN_new	Allocate a new BIGNUM initialized to zero.
BN_nist_mod_192	Fast reduction of a modulo the NIST P-192 prime (0 <= a < p^2).
BN_nist_mod_224	Fast reduction of a modulo the NIST P-224 prime (0 <= a < p^2).
BN_nist_mod_256	Fast reduction of a modulo the NIST P-256 prime (0 <= a < p^2).
BN_nist_mod_384	Fast reduction of a modulo the NIST P-384 prime (0 <= a < p^2).
BN_nist_mod_521	Fast reduction of a modulo the NIST P-521 prime.
BN_nist_mod_func	Return a fast modular-reduction function for a known NIST prime.
BN_nnmod	Compute a non-negative remainder r = m mod d (0 <= r < |d|).
BN_num_bits	Return the size of a in bits (index of the highest set bit plus one).
BN_num_bits_word	Return the number of significant bits in a single BN_ULONG word.
BN_options	Return a short string describing compiled BIGNUM word size / options.
BN_print	Write the hexadecimal encoding of a BIGNUM to a BIO.
BN_print_fp	Write the hexadecimal encoding of a BIGNUM to a FILE stream.
BN_priv_rand	Generate a cryptographically strong private random BIGNUM of bits bits.
BN_priv_rand_ex	Generate a cryptographically strong private random BIGNUM with strength.
BN_priv_rand_range	Generate a cryptographically strong uniform private random BIGNUM in [0, ]range).
BN_priv_rand_range_ex	Generate a private random BIGNUM uniformly in [0, ]range) with strength bits.
BN_pseudo_rand [deprecated]	Generate a pseudo-random BIGNUM (deprecated; prefer BN_rand / BN_priv_rand).
BN_pseudo_rand_range [deprecated]	Generate a pseudo-random BIGNUM in [0, ]range) (deprecated; prefer BN_rand_range).
BN_rand	Generate a cryptographically strong public random BIGNUM of bits bits.
BN_rand_ex	Generate a cryptographically strong public random BIGNUM with explicit strength.
BN_rand_range	Generate a cryptographically strong uniform public random BIGNUM in [0, ]range).
BN_rand_range_ex	Generate a cryptographically strong uniform random BIGNUM in [0, range).]
BN_reciprocal	Compute a reciprocal r = 2^len / m for BN_div-style quotient estimation.
BN_rshift	Compute r = a >> n (right shift by n bits).
BN_rshift1	Compute r = a >> 1 (right shift by one bit).
BN_secure_new	Allocate a BIGNUM whose limb storage is allocated from the secure heap.
BN_security_bits	Estimate the security strength in bits for asymmetric parameters of sizes L and N.
BN_set_bit	Set bit n of BIGNUM a (expanding the value if needed).
BN_set_flags	Set selected BIGNUM flag bits on b (bitwise OR with n).
BN_set_negative	BN_set_negative sets sign of a BIGNUM
BN_set_params [deprecated]	Set legacy BIGNUM tuning parameters (deprecated no-op on modern builds).
BN_set_word	Set BIGNUM a to the single-word value w.
BN_signed_bin2bn	Convert a big-endian two's-complement byte array to a signed BIGNUM.
BN_signed_bn2bin	Encode a signed BIGNUM as big-endian two's-complement of fixed width.
BN_signed_bn2lebin	Encode a signed BIGNUM as little-endian two's-complement of fixed width.
BN_signed_bn2native	Encode a BIGNUM as a fixed-length native-endian two's-complement byte string.
BN_signed_lebin2bn	Convert a little-endian two's-complement byte array to a signed BIGNUM.
BN_signed_native2bn	Convert a native-endian two's-complement byte array to a signed BIGNUM.
BN_sqr	Square a BIGNUM: r = a * a.
BN_sub	Subtract signed BIGNUMs: r = a - b.
BN_sub_word	Subtract word w from BIGNUM a in place: a := a - w.
BN_swap	Exchange the values of two BIGNUMs in constant time relative to their limb counts.
BN_to_ASN1_ENUMERATED	Convert a BIGNUM to an ASN.1 ENUMERATED value.
BN_to_ASN1_INTEGER	Convert a BIGNUM to an ASN.1 INTEGER (allocating or reusing ai).
BN_to_montgomery	Convert a into the Montgomery domain for modulus mont.
BN_uadd	Add unsigned BIGNUMs: r = a + b (ignores signs; result non-negative).
BN_ucmp	Compare absolute values of two BIGNUMs (ignores signs).
BN_usub	Subtract unsigned BIGNUMs: r = a - b (requires a >= b).
BN_value_one	Return a shared BIGNUM constant equal to 1.
BN_with_flags	Make dest a temporary read-only clone of b with flags replaced by flags.
BN_zero_ex	Set a BIGNUM to zero without allocating or freeing limbs.
BUF_MEM_free	Free a BUF_MEM and its data buffer.
BUF_MEM_grow	Grow or shrink a BUF_MEM so its valid length is len.
BUF_MEM_grow_clean	Grow or shrink a BUF_MEM buffer, zeroing any released or newly unused bytes.
BUF_MEM_new	Allocate an empty BUF_MEM with default (non-secure) allocation flags.
BUF_MEM_new_ex	Allocate a new BUF_MEM with the given allocation flags.
BUF_reverse	Reverse siz bytes from in into out (or in place if in is NULL).
CAST_cbc_encrypt [deprecated]	Encrypt or decrypt data with CAST in CBC mode (deprecated; prefer EVP).
CAST_cfb64_encrypt [deprecated]	Encrypt or decrypt data with CAST in 64-bit CFB mode (deprecated; prefer EVP).
CAST_decrypt [deprecated]	Decrypt one CAST block in place as two CAST_LONG words (deprecated low-level).
CAST_ecb_encrypt [deprecated]	Encrypt or decrypt one 8-byte CAST block in ECB mode (deprecated; prefer EVP).
CAST_encrypt [deprecated]	Encrypt one CAST block in place as two CAST_LONG words (deprecated low-level).
CAST_ofb64_encrypt [deprecated]	Encrypt or decrypt data with CAST in 64-bit OFB mode (deprecated; prefer EVP).
CAST_set_key [deprecated]	Expand a CAST user key into a CAST_KEY schedule (deprecated; prefer EVP).
CERTIFICATEPOLICIES_free	Free a Certificate Policies extension value and its contents.
CERTIFICATEPOLICIES_it	Return the ASN.1 item descriptor for CERTIFICATEPOLICIES.
CERTIFICATEPOLICIES_new	Allocate an empty Certificate Policies extension value.
CMAC_CTX_cleanup [deprecated]	Clear sensitive CMAC state while keeping the context allocated (deprecated).
CMAC_CTX_copy [deprecated]	Copy CMAC state from in into out (deprecated).
CMAC_CTX_free [deprecated]	Free a CMAC context and its resources.
CMAC_CTX_get0_cipher_ctx [deprecated]	Return the internal EVP_CIPHER_CTX used by a CMAC context (deprecated).
CMAC_CTX_new [deprecated]	Allocate a new CMAC context (deprecated; prefer EVP_MAC).
CMAC_Final [deprecated]	Finish a CMAC and write the authentication tag (deprecated).
CMAC_Init [deprecated]	Initialize a CMAC context with a key and block cipher (deprecated; prefer EVP_MAC).
CMAC_Update [deprecated]	Absorb more message bytes into a CMAC computation (deprecated).
CMAC_resume [deprecated]	Reinitialize a CMAC context after CMAC_Final() so more data can be absorbed (deprecated).
CMS_AuthEnvelopedData_create	Create an empty CMS AuthEnvelopedData ContentInfo for an AEAD cipher.
CMS_AuthEnvelopedData_create_ex	Create an empty CMS AuthEnvelopedData ContentInfo using a library context.
CMS_ContentInfo_free	Free a CMS ContentInfo structure and its contents.
CMS_ContentInfo_it	Return the ASN.1 item descriptor for CMS_ContentInfo.
CMS_ContentInfo_new	Allocate an empty CMS ContentInfo structure.
CMS_ContentInfo_new_ex	Allocate a CMS ContentInfo associated with a library context and property query.
CMS_ContentInfo_print_ctx	Print a CMS_ContentInfo structure to a BIO.
CMS_EncryptedData_decrypt	Decrypt a CMS EncryptedData ContentInfo with a symmetric key.
CMS_EncryptedData_encrypt	Create a CMS EncryptedData ContentInfo by encrypting data from a BIO.
CMS_EncryptedData_encrypt_ex	Create a CMS EncryptedData ContentInfo by encrypting data from a BIO (with libctx).
CMS_EncryptedData_set1_key	Set the content-encryption cipher and copy the symmetric key into a CMS EncryptedData.
CMS_EnvelopedData_create	Create an empty CMS EnvelopedData ContentInfo for cipher (default library context).
CMS_EnvelopedData_create_ex	Create an empty CMS EnvelopedData ContentInfo using a library context.
CMS_EnvelopedData_decrypt	Decrypt a CMS EnvelopedData structure and return a BIO of the plaintext.
CMS_EnvelopedData_it	Return the ASN.1 item descriptor for CMS_EnvelopedData.
CMS_ReceiptRequest_create0	Allocate a CMS signed-receipt request with the given identifiers and recipient lists.
CMS_ReceiptRequest_create0_ex	Allocate a CMS signed-receipt request using a library context for RNG.
CMS_ReceiptRequest_free	Free a CMS ReceiptRequest structure and its contents.
CMS_ReceiptRequest_get0_values	Read the fields of a CMS ReceiptRequest without transferring ownership.
CMS_ReceiptRequest_it	Return the ASN.1 item descriptor for CMS_ReceiptRequest.
CMS_ReceiptRequest_new	Allocate an empty CMS ReceiptRequest structure.
CMS_RecipientEncryptedKey_cert_cmp	Compare a certificate against the recipient identifier of a RecipientEncryptedKey.
CMS_RecipientEncryptedKey_get0_id	Extract KeyAgreeRecipientIdentifier fields from a RecipientEncryptedKey.
CMS_RecipientInfo_decrypt	Decrypt one CMS RecipientInfo after associating the recipient key with it.
CMS_RecipientInfo_encrypt	Encrypt the content-encryption key into one CMS RecipientInfo.
CMS_RecipientInfo_get0_pkey_ctx	Return the EVP_PKEY_CTX used for key transport or key agreement on a recipient info.
CMS_RecipientInfo_kari_decrypt	Unwrap the content-encryption key from one KARI RecipientEncryptedKey into cms.
CMS_RecipientInfo_kari_get0_alg	Get the key-encryption algorithm and optional UKM from a key-agreement recipient info.
CMS_RecipientInfo_kari_get0_ctx	Return the key-wrap cipher context associated with a key-agreement RecipientInfo.
CMS_RecipientInfo_kari_get0_orig_id	Get the originator identifier from a key-agreement RecipientInfo.
CMS_RecipientInfo_kari_get0_reks	Return the stack of RecipientEncryptedKey values from a key-agreement RecipientInfo.
CMS_RecipientInfo_kari_orig_id_cmp	Compare a certificate against the originator identifier of a KARI RecipientInfo.
CMS_RecipientInfo_kari_set0_pkey	Associate a private key with a key-agreement (KARI) CMS RecipientInfo.
CMS_RecipientInfo_kari_set0_pkey_and_peer	Associate a private key and optional peer certificate with a key-agreement CMS RecipientInfo.
CMS_RecipientInfo_kekri_get0_id	Return non-owning pointers to the key-encryption key identifier fields of a KEKRI.
CMS_RecipientInfo_kekri_id_cmp	Compare a key identifier against the keyIdentifier of a KEK RecipientInfo.
CMS_RecipientInfo_ktri_cert_cmp	Compare a certificate against the recipient identifier in a key-transport RecipientInfo.
CMS_RecipientInfo_ktri_get0_algs	Retrieve key-transport algorithms and related objects from a RecipientInfo.
CMS_RecipientInfo_ktri_get0_signer_id	Get the certificate recipient identifier from a key-transport RecipientInfo.
CMS_RecipientInfo_set0_key	Attach a symmetric key-encryption key to a KEK RecipientInfo (transfers ownership of key).
CMS_RecipientInfo_set0_password	Supply the password used to derive the KEK for a PasswordRecipientInfo.
CMS_RecipientInfo_set0_pkey	Transfer ownership of a private key into a key-transport RecipientInfo.
CMS_RecipientInfo_type	Return the CMS RecipientInfo type of ri.
CMS_SharedInfo_encode	DER-encode a CMS SharedInfo structure used in key-encryption key derivation.
CMS_SignedData_free	Free a CMS SignedData structure and its contents.
CMS_SignedData_init	Initialize cms as an empty CMS SignedData (for example for certificates-only).
CMS_SignedData_new	Allocate an empty CMS SignedData structure.
CMS_SignedData_verify	Verify a CMS SignedData structure and return a BIO of the signed content on success.
CMS_SignerInfo_cert_cmp	Compare a certificate against the signer identifier of a CMS SignerInfo.
CMS_SignerInfo_get0_algs	Retrieve algorithm and key pointers from a CMS SignerInfo.
CMS_SignerInfo_get0_md_ctx	Return the message-digest context used while signing or verifying a CMS SignerInfo.
CMS_SignerInfo_get0_pkey_ctx	Return the EVP_PKEY_CTX used while signing or verifying a CMS SignerInfo.
CMS_SignerInfo_get0_signature	Return a pointer to the signature OCTET STRING inside a CMS SignerInfo.
CMS_SignerInfo_get0_signer_id	Get the signer identifier from a CMS SignerInfo (key id, or issuer and serial).
CMS_SignerInfo_set1_signer_cert	Associate a signer certificate with a CMS SignerInfo (increments the cert reference).
CMS_SignerInfo_sign	Explicitly finalize and sign a CMS SignerInfo (for CMS_PARTIAL with CMS_REUSE_DIGEST).
CMS_SignerInfo_verify	Verify the signature on a CMS SignerInfo's signed attributes.
CMS_SignerInfo_verify_content	Verify that the content digest matches a CMS SignerInfo (messageDigest or signature).
CMS_add0_CertificateChoices	Append an empty CertificateChoices slot to a CMS SignedData certificates set.
CMS_add0_RevocationInfoChoice	Append an empty RevocationInfoChoice to a CMS ContentInfo's CRL set.
CMS_add0_cert	Add a certificate to a SignedData or EnvelopedData CMS ContentInfo (transfers ownership).
CMS_add0_crl	Add a CRL to a SignedData or EnvelopedData CMS ContentInfo (transfers ownership).
CMS_add0_recipient_key	Add a KEKRecipientInfo that wraps the content-encryption key with a symmetric KEK.
CMS_add0_recipient_password	Add a PasswordRecipientInfo that derives a KEK from a password.
CMS_add1_ReceiptRequest	Add a CMS signed receipt request to a SignerInfo.
CMS_add1_cert	Add a certificate to a CMS ContentInfo, taking a reference on cert.
CMS_add1_crl	Add a CRL to a SignedData or EnvelopedData CMS ContentInfo (up-refs the CRL).
CMS_add1_recipient	Add a recipient certificate and optional originator key material to enveloped CMS.
CMS_add1_recipient_cert	Add a KeyTransRecipientInfo for recip to a partial CMS enveloped ContentInfo.
CMS_add1_signer	Add a signer certificate and private key to a CMS SignedData ContentInfo.
CMS_add_simple_smimecap	Append one S/MIME capability AlgorithmIdentifier to a stack.
CMS_add_smimecap	Encode a stack of algorithms as an SMIMECapabilities signed attribute on a SignerInfo.
CMS_add_standard_smimecap	Populate smcap with a standard set of S/MIME capability AlgorithmIdentifiers.
CMS_compress	Create a CMS CompressedData ContentInfo from content read from a BIO.
CMS_data	Write the payload of a CMS Data ContentInfo to a BIO.
CMS_dataFinal	Finalize CMS content processing after streaming through the BIO from CMS_dataInit().
CMS_dataInit	Build a BIO chain that reads or writes the CMS content for cms.
CMS_data_create	Create a CMS Data ContentInfo from bytes read from in.
CMS_data_create_ex	Create a CMS Data contentInfo wrapping the octets read from in.
CMS_decrypt	Decrypt a CMS EnvelopedData or AuthEnvelopedData and write the content.
CMS_decrypt_set1_key	Install a KEKRecipientInfo key on a CMS ContentInfo so CMS_decrypt can use it.
CMS_decrypt_set1_password	Decrypt CMS PasswordRecipientInfo key material and store it for a later CMS_decrypt().
CMS_decrypt_set1_pkey	Decrypt CMS recipient key material using a private key, then store it for CMS_decrypt().
CMS_decrypt_set1_pkey_and_peer	Decrypt CMS EnvelopedData/AuthEnvelopedData recipient key material using a private key and optional peer certificate.
CMS_digest_create	Create a CMS DigestedData ContentInfo from content read from a BIO.
CMS_digest_create_ex	Create a CMS DigestedData ContentInfo using a library context and property query.
CMS_digest_verify	Verify a CMS DigestedData ContentInfo and optionally write the content.
CMS_encrypt	Create a CMS EnvelopedData or AuthEnvelopedData encrypting content for recipient certificates.
CMS_encrypt_ex	Create a CMS EnvelopedData or AuthEnvelopedData encrypting content for recipient certificates.
CMS_final	Finalise a partially built CMS_ContentInfo (for example digest computation and field fill-in).
CMS_final_digest	Finalize a partially built CMS SignedData using a precomputed content digest.
CMS_get0_RecipientInfos	Return the RecipientInfo structures from a CMS EnvelopedData message.
CMS_get0_SignerInfos	Return all CMS_SignerInfo structures from a SignedData ContentInfo.
CMS_get0_content	Return a pointer to the embedded content octet string of a CMS ContentInfo.
CMS_get0_eContentType	Return the embedded eContentType OID of a CMS ContentInfo.
CMS_get0_signers	Return the signer certificates collected during a successful CMS_verify().
CMS_get0_type	Return the ASN.1 content-type OID of a CMS ContentInfo.
CMS_get1_ReceiptRequest	Extract a CMS ReceiptRequest attribute from a SignerInfo.
CMS_get1_certs	Return a new stack of all certificates carried in a CMS ContentInfo.
CMS_get1_crls	Return a newly allocated stack of CRLs embedded in a CMS ContentInfo.
CMS_is_detached	Test whether a CMS ContentInfo carries detached (absent) embedded content.
CMS_set1_eContentType	Set the embedded eContentType OID of a CMS ContentInfo (copied).
CMS_set1_signers_certs	Attach signer certificates from certs to matching CMS SignerInfos.
CMS_set_detached	Mark CMS content as detached (external) or embedded.
CMS_sign	Create a CMS SignedData structure with the default library context.
CMS_sign_ex	Create a CMS SignedData structure using a library context.
CMS_sign_receipt	Create a CMS signed receipt ContentInfo for a SignerInfo that requested a receipt.
CMS_signed_add1_attr	Append a copy of an X509_ATTRIBUTE to a CMS SignerInfo's signed attributes.
CMS_signed_add1_attr_by_NID	Append a signed attribute identified by NID to a CMS SignerInfo.
CMS_signed_add1_attr_by_OBJ	Append a signed attribute identified by ASN.1 object to a CMS SignerInfo.
CMS_signed_add1_attr_by_txt	Append a signed attribute identified by short name to a CMS SignerInfo.
CMS_signed_delete_attr	Remove and return the signed attribute at index loc from a CMS SignerInfo.
CMS_signed_get0_data_by_OBJ	Return the first matching signed-attribute value of a given ASN.1 type.
CMS_signed_get_attr	Return the signed attribute at index loc from a CMS SignerInfo.
CMS_signed_get_attr_by_NID	Find a signed attribute in si by NID, searching after lastpos.
CMS_signed_get_attr_by_OBJ	Find the next signed attribute matching an OID in a CMS SignerInfo.
CMS_signed_get_attr_count	Return the number of signed attributes on a CMS SignerInfo.
CMS_stream	Prepare a CMS ContentInfo for indefinite-length (streaming) ASN.1 encoding.
CMS_uncompress	Decompress a CMS CompressedData ContentInfo to out.
CMS_unsigned_add1_attr	Append a copy of an X509_ATTRIBUTE to a CMS SignerInfo's unsigned attributes.
CMS_unsigned_add1_attr_by_NID	Append an unsigned attribute identified by NID to a CMS SignerInfo.
CMS_unsigned_add1_attr_by_OBJ	Append an unsigned attribute identified by ASN.1 object to a CMS SignerInfo.
CMS_unsigned_add1_attr_by_txt	Append an unsigned attribute identified by name to a CMS SignerInfo.
CMS_unsigned_delete_attr	Remove and return the unsigned attribute at an index in a CMS SignerInfo.
CMS_unsigned_get0_data_by_OBJ	Find an unsigned attribute by OID and return its first ASN.1 value data pointer.
CMS_unsigned_get_attr	Return the unsigned attribute at an index in a CMS SignerInfo.
CMS_unsigned_get_attr_by_NID	Find an unsigned attribute by NID in a CMS SignerInfo.
CMS_unsigned_get_attr_by_OBJ	Find an unsigned attribute by ASN.1 object in a CMS SignerInfo.
CMS_unsigned_get_attr_count	Return how many unsigned attributes are present on a CMS SignerInfo.
CMS_verify	Verify CMS SignedData signatures and write the content to out when requested.
CMS_verify_receipt	Verify a CMS signed receipt against the original SignedData that requested it.
COMP_CTX_free	Free a compression context.
COMP_CTX_get_method	Return the compression method associated with a context.
COMP_CTX_get_type	Get the numeric type identifier of a compression context's method.
COMP_CTX_new	Create a compression context for the given method.
COMP_brotli	Return the stream-based brotli compression method.
COMP_brotli_oneshot	Return the one-shot brotli compression method.
COMP_compress_block	Compress a block of data.
COMP_expand_block	Decompress ilen bytes from in into out using a COMP_CTX.
COMP_get_name	Return the human-readable name of a compression method.
COMP_get_type	Get the numeric type identifier of a compression method.
COMP_zlib	Return the zlib compression method.
COMP_zlib_oneshot	Return the one-shot zlib compression method.
COMP_zstd	Return the Zstandard compression method.
COMP_zstd_oneshot	Return the one-shot Zstandard COMP_METHOD (compresses each BIO_write as a complete frame).
CONF_dump_bio	Dump a legacy CONF hash table to a BIO in name=value form.
CONF_dump_fp	Dump a legacy CONF LHASH to a FILE in a human-readable form.
CONF_free	Free a legacy CONF LHASH and all contained CONF_VALUE entries.
CONF_get1_default_config_file	Return a newly allocated path to the default OpenSSL configuration file.
CONF_get_number	Look up a numeric value in a legacy CONF LHASH.
CONF_get_section	Return all CONF_VALUE entries belonging to section (legacy API).
CONF_get_string	Look up a string value in a legacy CONF LHASH.
CONF_imodule_get_flags	Return the CONF_MFLAGS_* control flags stored on a loaded module instance.
CONF_imodule_get_module	Return the CONF_MODULE registration object for an initialized module instance.
CONF_imodule_get_name	Return the configured name of an initialized CONF module instance.
CONF_imodule_get_usr_data	Return the opaque application pointer stored on a CONF module instance.
CONF_imodule_get_value	Return the value string associated with an initialized CONF module instance.
CONF_imodule_set_flags	Set control flags on a loaded configuration module instance.
CONF_imodule_set_usr_data	Store an opaque application pointer on a loaded configuration module instance.
CONF_load	Load a CONF file into an LHASH of CONF_VALUE (legacy CONF API).
CONF_load_bio	Load configuration name/value pairs from a BIO into an LHASH (legacy API).
CONF_load_fp	Load a CONF file from an open FILE into an LHASH of CONF_VALUE (legacy API).
CONF_module_add	Register a built-in configuration module under name.
CONF_module_get_usr_data	Return the application pointer previously stored on a CONF_MODULE.
CONF_module_set_usr_data	Store an opaque application pointer on a registered CONF DSO module.
CONF_modules_finish	Finish and tear down all currently loaded CONF modules.
CONF_modules_load	Initialize configured OpenSSL modules listed in cnf for appname.
CONF_modules_load_file	Load and initialize CONF modules from a file using the default library context.
CONF_modules_load_file_ex	Load and initialize CONF modules from a file using library context libctx.
CONF_modules_unload	Unload CONF modules previously loaded into the process.
CONF_parse_list	Split list on separator sep and invoke list_cb for each element.
CONF_set_default_method	Set the default CONF_METHOD used by the legacy CONF_load family.
CONF_set_nconf	Attach a legacy LHASH of CONF_VALUE entries as the data store of a CONF object.
CRL_DIST_POINTS_free	Free a CRL Distribution Points extension value and its contents.
CRL_DIST_POINTS_it	Return the ASN.1 item descriptor for CRL_DIST_POINTS.
CRL_DIST_POINTS_new	Allocate a new CRL Distribution Points extension value.
CRYPTO_128_unwrap	Unwrap a key with AES Key Wrap (RFC 3394) using block.
CRYPTO_128_unwrap_pad	Unwrap a key with AES Key Wrap with Padding (RFC 5649) using block.
CRYPTO_128_wrap	Wrap a key with AES Key Wrap (RFC 3394) using block.
CRYPTO_128_wrap_pad	Wrap a key with AES Key Wrap with Padding (RFC 5649) using block.
CRYPTO_THREAD_cleanup_local	Destroy a thread-local key previously created with CRYPTO_THREAD_init_local().
CRYPTO_THREAD_compare_id	Compare two CRYPTO_THREAD_ID values for equality.
CRYPTO_THREAD_get_current_id	Return an identifier for the calling thread.
CRYPTO_THREAD_get_local	Return the calling thread's value for thread-local key key.
CRYPTO_THREAD_init_local	Allocate a thread-local storage key for use with CRYPTO_THREAD_get/set_local().
CRYPTO_THREAD_lock_free	Free a CRYPTO_RWLOCK allocated by CRYPTO_THREAD_lock_new().
CRYPTO_THREAD_lock_new	Allocate a new read/write lock for CRYPTO_THREAD_* locking helpers.
CRYPTO_THREAD_read_lock	Acquire a shared (read) lock on a CRYPTO_RWLOCK.
CRYPTO_THREAD_run_once	Run init exactly once across threads using a CRYPTO_ONCE control.
CRYPTO_THREAD_set_local	Store val in the thread-local slot identified by key.
CRYPTO_THREAD_unlock	Release a previously acquired read or write lock on a CRYPTO_RWLOCK.
CRYPTO_THREAD_write_lock	Acquire a CRYPTO_RWLOCK for exclusive (write) access.
CRYPTO_alloc_ex_data	Allocate ex_data at index idx by invoking the registered new callback if unset.
CRYPTO_atomic_add	Atomically add amount to *val, optionally under lock.
CRYPTO_atomic_load	Atomically load a 64-bit value, optionally under lock.
CRYPTO_atomic_load_int	Atomically load an int value, optionally under lock.
CRYPTO_atomic_or	Atomically bitwise-OR op into *val, optionally under lock.
CRYPTO_cbc128_decrypt	Decrypt with a 128-bit block cipher in CBC mode.
CRYPTO_cbc128_encrypt	Encrypt with a 128-bit block cipher in CBC mode.
CRYPTO_ccm128_aad	Absorb additional authenticated data into a CCM context.
CRYPTO_ccm128_decrypt	Decrypt ciphertext and update the CCM authentication state.
CRYPTO_ccm128_decrypt_ccm64	Decrypt ciphertext in CCM using a ccm128_f acceleration callback.
CRYPTO_ccm128_encrypt	Encrypt plaintext and update the CCM authentication state.
CRYPTO_ccm128_encrypt_ccm64	Encrypt plaintext in CCM using a ccm128_f acceleration callback.
CRYPTO_ccm128_init	Initialise a CCM128_CONTEXT with tag length, length-field size, and block cipher.
CRYPTO_ccm128_setiv	Set the CCM nonce and message length for a subsequent encrypt or decrypt.
CRYPTO_ccm128_tag	Write the computed CCM authentication tag into tag.
CRYPTO_cfb128_1_encrypt	Encrypt or decrypt with a 128-bit block cipher in 1-bit CFB mode.
CRYPTO_cfb128_8_encrypt	Encrypt or decrypt with a 128-bit block cipher in 8-bit CFB mode.
CRYPTO_cfb128_encrypt	Encrypt or decrypt with a 128-bit block cipher in full-block CFB mode.
CRYPTO_clear_free	Securely clear num bytes at ptr and free the allocation.
CRYPTO_clear_realloc	Reallocate a buffer, securely clearing any released trailing bytes.
CRYPTO_ctr128_encrypt	Encrypt or decrypt with a 128-bit block cipher in CTR mode.
CRYPTO_ctr128_encrypt_ctr32	Encrypt or decrypt in CTR mode using a 32-bit counter stream function.
CRYPTO_cts128_decrypt	Decrypt CS1 ciphertext stealing using a CBC decrypt function.
CRYPTO_cts128_decrypt_block	Decrypt CS1 ciphertext stealing using a single-block decrypt/encrypt pair via block.
CRYPTO_cts128_encrypt	Encrypt with CS1 ciphertext stealing using a CBC encrypt function.
CRYPTO_cts128_encrypt_block	Encrypt with CS1 ciphertext stealing using a single-block encrypt function.
CRYPTO_dup_ex_data	Duplicate CRYPTO_EX_DATA entries from from into to for a class.
CRYPTO_free	Free memory previously allocated by CRYPTO_malloc() / OPENSSL_malloc().
CRYPTO_free_ex_data	Free all ex_data attached to ad for the given class, invoking free callbacks.
CRYPTO_free_ex_index	Release an application ex_data index previously allocated for a class (historically a no-op cleanup).
CRYPTO_gcm128_aad	Absorb additional authenticated data into a GCM context before ciphertext.
CRYPTO_gcm128_decrypt	Decrypt ciphertext and update the GCM authentication state.
CRYPTO_gcm128_decrypt_ctr32	Decrypt ciphertext in GCM using a 32-bit CTR stream acceleration callback.
CRYPTO_gcm128_encrypt	Encrypt plaintext and update the GCM authentication state.
CRYPTO_gcm128_encrypt_ctr32	Encrypt plaintext in GCM using a 32-bit CTR stream acceleration callback.
CRYPTO_gcm128_finish	Finalise GCM and optionally verify a received authentication tag.
CRYPTO_gcm128_init	Initialise (or reinitialise) a caller-owned GCM128_CONTEXT.
CRYPTO_gcm128_new	Allocate and initialise a GCM128_CONTEXT for key and block.
CRYPTO_gcm128_release	Free a GCM128_CONTEXT allocated by CRYPTO_gcm128_new().
CRYPTO_gcm128_setiv	Set the GCM IV / nonce for a subsequent encrypt or decrypt operation.
CRYPTO_gcm128_tag	Write the computed GCM authentication tag into tag.
CRYPTO_get_ex_data	Retrieve the pointer stored at ex_data index idx.
CRYPTO_get_ex_new_index	Allocate a new application-specific ex_data index for a CRYPTO_EX_INDEX_* class.
CRYPTO_get_mem_functions	Retrieve the process-wide CRYPTO memory allocator callbacks currently installed.
CRYPTO_malloc	Allocate num bytes using the installed CRYPTO malloc callback.
CRYPTO_memcmp	Compare two memory regions in constant time with respect to their contents.
CRYPTO_memdup	Duplicate siz bytes from str using the OpenSSL allocator.
CRYPTO_new_ex_data	Initialise ad for object obj of CRYPTO_EX_INDEX class class_index.
CRYPTO_nistcts128_decrypt	Decrypt NIST CS2/CS3-style ciphertext stealing using a CBC decrypt function.
CRYPTO_nistcts128_decrypt_block	Decrypt NIST CS2/CS3-style ciphertext stealing using a block decrypt function.
CRYPTO_nistcts128_encrypt	Encrypt with NIST CS2/CS3-style ciphertext stealing using a CBC encrypt function.
CRYPTO_nistcts128_encrypt_block	Encrypt with NIST CS2/CS3-style ciphertext stealing using a block encrypt function.
CRYPTO_ocb128_aad	Absorb additional authenticated data into an OCB context.
CRYPTO_ocb128_cleanup	Release internal OCB tables and cleanse the context (does not free ctx itself).
CRYPTO_ocb128_copy_ctx	Copy an OCB context, optionally replacing the encrypt/decrypt key pointers.
CRYPTO_ocb128_decrypt	Decrypt ciphertext and update the OCB authentication state.
CRYPTO_ocb128_encrypt	Encrypt plaintext and update the OCB authentication state.
CRYPTO_ocb128_finish	Finalise OCB and verify a received authentication tag.
CRYPTO_ocb128_init	Initialise an existing OCB128_CONTEXT for the given keys and block functions.
CRYPTO_ocb128_new	Allocate and initialise an OCB128_CONTEXT for the given keys and block functions.
CRYPTO_ocb128_setiv	Set the OCB IV / nonce and authentication tag length for an operation.
CRYPTO_ocb128_tag	Write the computed OCB authentication tag into tag.
CRYPTO_ofb128_encrypt	Encrypt or decrypt with a 128-bit block cipher in OFB mode.
CRYPTO_realloc	Resize an OpenSSL allocation to num bytes (file/line for debugging).
CRYPTO_secure_actual_size	Return the actual secure-heap block size reserved for ptr.
CRYPTO_secure_allocated	Report whether ptr was allocated from the OpenSSL secure heap.
CRYPTO_secure_clear_free	Clear num bytes at ptr then free a secure-heap allocation.
CRYPTO_secure_free	Free memory previously allocated from the secure heap.
CRYPTO_secure_malloc	Allocate num bytes from the secure heap (after CRYPTO_secure_malloc_init()).
CRYPTO_secure_malloc_done	Tear down the secure heap after CRYPTO_secure_malloc_init() (when unused).
CRYPTO_secure_malloc_init	Initialize the secure heap used by CRYPTO_secure_malloc().
CRYPTO_secure_malloc_initialized	Report whether the secure heap has been successfully initialised.
CRYPTO_secure_used	Return how many bytes are currently allocated from the secure heap.
CRYPTO_secure_zalloc	Allocate num bytes from the secure heap and zero them.
CRYPTO_set_ex_data	Store val at ex_data index idx, replacing any previous pointer.
CRYPTO_set_mem_functions	Install process-wide CRYPTO memory allocator callbacks (before first allocation).
CRYPTO_strdup	Duplicate a NUL-terminated string using the OpenSSL allocator.
CRYPTO_strndup	Duplicate at most s characters of str using the OpenSSL allocator.
CRYPTO_xts128_encrypt	Encrypt or decrypt data with a 128-bit block cipher in XTS mode.
CRYPTO_zalloc	Allocate num bytes of zero-initialized memory (file/line for debugging).
CTLOG_STORE_free	Free a CT log store and the CT log instances it holds.
CTLOG_STORE_get0_log_by_id	Find a CT log in a store by log ID.
CTLOG_STORE_load_default_file	Load the default CT log list into a store.
CTLOG_STORE_load_file	Load a CT log list into a store from a file.
CTLOG_STORE_new	Allocate an empty CT log store.
CTLOG_STORE_new_ex	Create a new CT log store associated with libctx / propq. Free with CTLOG_STORE_free().
CTLOG_free	Free a Certificate Transparency log entry and its owned fields.
CTLOG_get0_log_id	Get the ID of a CT log.
CTLOG_get0_name	Get the name of a CT log.
CTLOG_get0_public_key	Get the public key of a CT log.
CTLOG_new	Create a CT log with a public key and name using the default library context.
CTLOG_new_ex	Create a CT log for public_key and name using libctx / propq. Takes ownership of public_key and copies name. Free with CTLOG_free().
CTLOG_new_from_base64	Create a CT log from a base64-encoded key using the default library context.
CTLOG_new_from_base64_ex	Create a CT log from a base64-encoded SubjectPublicKeyInfo DER key.
CT_POLICY_EVAL_CTX_free	Delete a policy evaluation context and anything it owns.
CT_POLICY_EVAL_CTX_get0_cert	Return the peer certificate associated with SCTs in a policy context.
CT_POLICY_EVAL_CTX_get0_issuer	Get the issuer of the certificate associated with the received SCTs.
CT_POLICY_EVAL_CTX_get0_log_store	Return the CT log store used when evaluating SCTs in this context.
CT_POLICY_EVAL_CTX_get_time	Get the evaluation time used when checking whether an SCT is in the future.
CT_POLICY_EVAL_CTX_new	Create an empty CT policy evaluation context with the default library context.
CT_POLICY_EVAL_CTX_new_ex	Create a new, empty CT policy evaluation context for libctx / propq. The caller must free it with CT_POLICY_EVAL_CTX_free().
CT_POLICY_EVAL_CTX_set1_cert	Set the certificate that the SCTs in a policy context were issued for.
CT_POLICY_EVAL_CTX_set1_issuer	Set the issuer certificate used when validating precertificate SCTs.
CT_POLICY_EVAL_CTX_set_shared_CTLOG_STORE	Set the shared CT log store used when evaluating SCTs.
CT_POLICY_EVAL_CTX_set_time	Set the time used when evaluating SCT timestamps in a policy context.
Camellia_cbc_encrypt [deprecated]	Encrypt or decrypt data with Camellia in CBC mode (deprecated).
Camellia_cfb128_encrypt [deprecated]	Encrypt or decrypt data with Camellia in 128-bit CFB mode (deprecated).
Camellia_cfb1_encrypt [deprecated]	Encrypt or decrypt data with Camellia in 1-bit CFB mode (deprecated).
Camellia_cfb8_encrypt [deprecated]	Encrypt or decrypt data with Camellia in 8-bit CFB mode (deprecated).
Camellia_ctr128_encrypt [deprecated]	Encrypt or decrypt data with Camellia in 128-bit CTR mode (deprecated).
Camellia_decrypt [deprecated]	Decrypt one 16-byte Camellia block (deprecated; prefer EVP_DecryptInit_ex and related EVP APIs).
Camellia_ecb_encrypt [deprecated]	Encrypt or decrypt one 16-byte Camellia block in ECB mode (deprecated).
Camellia_encrypt [deprecated]	Encrypt one 16-byte Camellia block (deprecated; prefer EVP_EncryptInit_ex and related EVP APIs).
Camellia_ofb128_encrypt [deprecated]	Encrypt or decrypt data with Camellia in 128-bit OFB mode (deprecated).
Camellia_set_key [deprecated]	Expand a raw Camellia key into a CAMELLIA_KEY schedule (deprecated; prefer EVP).
DES_cbc_cksum [deprecated]	Compute a DES CBC checksum of input and return the last DES_LONG of the MAC (deprecated).
DES_cbc_encrypt [deprecated]	Encrypt or decrypt with DES in CBC mode without updating the IV (deprecated; prefer DES_ncbc_encrypt or EVP).
DES_cfb64_encrypt [deprecated]	Encrypt or decrypt with DES in 64-bit CFB mode (deprecated; prefer EVP).
DES_cfb_encrypt [deprecated]	Encrypt or decrypt with DES in CFB mode with a configurable bit width (deprecated; prefer EVP).
DES_check_key_parity [deprecated]	Test whether each byte of a DES key has odd parity (deprecated).
DES_crypt [deprecated]	Compute a traditional Unix DES-based password hash using a static result buffer (deprecated).
DES_decrypt3 [deprecated]	Decrypt one block with triple-DES EDE using three schedules (deprecated low-level).
DES_ecb3_encrypt [deprecated]	Encrypt or decrypt one 8-byte block with triple-DES EDE in ECB mode (deprecated; prefer EVP).
DES_ecb_encrypt [deprecated]	Encrypt or decrypt one 8-byte DES block in ECB mode (deprecated; prefer EVP).
DES_ede3_cbc_encrypt [deprecated]	Encrypt or decrypt with triple-DES EDE in CBC mode (deprecated; prefer EVP).
DES_ede3_cfb64_encrypt [deprecated]	Encrypt or decrypt with triple-DES EDE in 64-bit CFB mode (deprecated; prefer EVP).
DES_ede3_cfb_encrypt [deprecated]	Encrypt or decrypt with triple-DES EDE in CFB mode with a configurable bit width (deprecated; prefer EVP).
DES_ede3_ofb64_encrypt [deprecated]	Encrypt or decrypt with triple-DES EDE in 64-bit OFB mode (deprecated; prefer EVP).
DES_encrypt1 [deprecated]	Encrypt or decrypt one DES block in place with IP and FP (deprecated low-level core).
DES_encrypt2 [deprecated]	Encrypt or decrypt one DES block without IP/FP (used internally for 3DES; deprecated).
DES_encrypt3 [deprecated]	Encrypt one block with triple-DES EDE using three schedules (deprecated low-level).
DES_fcrypt [deprecated]	Compute a traditional Unix DES-based password hash into a caller buffer (deprecated).
DES_is_weak_key [deprecated]	Test whether a DES key is one of the known weak or semi-weak keys (deprecated).
DES_key_sched [deprecated]	Expand a DES key into a key schedule (alias of DES_set_key; deprecated).
DES_ncbc_encrypt [deprecated]	Encrypt or decrypt with DES in CBC mode, updating the IV (deprecated; prefer EVP).
DES_ofb64_encrypt [deprecated]	Encrypt or decrypt with DES in 64-bit OFB mode (deprecated; prefer EVP).
DES_ofb_encrypt [deprecated]	Encrypt or decrypt with DES in OFB mode with a configurable bit width (deprecated; prefer EVP).
DES_options [deprecated]	Return a short string describing compiled DES implementation options (deprecated).
DES_pcbc_encrypt [deprecated]	Encrypt or decrypt with DES in PCBC mode (deprecated; prefer EVP).
DES_quad_cksum [deprecated]	Compute a DES-based quadratic checksum over input (deprecated).
DES_random_key [deprecated]	Generate a random DES key with odd parity that is not a weak key (deprecated).
DES_set_key [deprecated]	Expand a DES key into a key schedule (checked or unchecked per DES_check_key; deprecated).
DES_set_key_checked [deprecated]	Expand a DES key into a key schedule after checking parity and weak keys (deprecated).
DES_set_key_unchecked [deprecated]	Expand a DES key into a key schedule without parity or weak-key checks (deprecated).
DES_set_odd_parity [deprecated]	Set odd parity bits on each byte of a DES key block (deprecated).
DES_string_to_2keys [deprecated]	Derive two DES keys from a NUL-terminated ASCII string (deprecated).
DES_string_to_key [deprecated]	Derive a single DES key from a NUL-terminated ASCII string (deprecated).
DES_xcbc_encrypt [deprecated]	Encrypt or decrypt with DES in RSA DESX-CBC (XCBC) mode (deprecated; prefer EVP).
DH_KDF_X9_42 [deprecated]	Derive keying material with the ANSI X9.42 / RFC 2631 KDF (deprecated).
DH_OpenSSL [deprecated]	Return the built-in OpenSSL software DH_METHOD (deprecated).
DH_bits [deprecated]	Return the bit length of the Diffie-Hellman prime modulus p (deprecated).
DH_check [deprecated]	Validate Diffie-Hellman parameters and return a bitmask of problems (deprecated).
DH_check_ex [deprecated]	Validate Diffie-Hellman parameters and report problems via the error queue (deprecated).
DH_check_params [deprecated]	Perform a lightweight check that DH parameters p and g look plausible (deprecated).
DH_check_params_ex [deprecated]	Validate Diffie-Hellman p/g (and q if present) and report problems via the error queue (deprecated).
DH_check_pub_key [deprecated]	Validate a Diffie-Hellman public key and return a bitmask of problems (deprecated).
DH_check_pub_key_ex [deprecated]	Validate a Diffie-Hellman public key and report problems via the error queue (deprecated).
DH_clear_flags [deprecated]	Clear selected flag bits on a DH object (deprecated).
DH_compute_key [deprecated]	Derive the DH shared secret from a peer public key (deprecated).
DH_compute_key_padded [deprecated]	Derive the DH shared secret with NIST SP 800-56A leading-zero padding (deprecated).
DH_free [deprecated]	Free a DH object and decrement its reference count (deprecated).
DH_generate_key [deprecated]	Generate a Diffie-Hellman private/public key pair on dh (deprecated).
DH_generate_parameters [deprecated]	Generate Diffie-Hellman parameters with a legacy progress callback (deprecated).
DH_generate_parameters_ex [deprecated]	Generate Diffie-Hellman domain parameters into dh (deprecated).
DH_get0_engine [deprecated]	Return the ENGINE bound to a DH object, if any (deprecated).
DH_get0_g [deprecated]	Return the generator g stored in a DH object (deprecated).
DH_get0_key [deprecated]	Borrow pointers to the public and private key BIGNUMs of a DH object (deprecated).
DH_get0_p [deprecated]	Return the prime modulus p stored in a DH object (deprecated).
DH_get0_pqg [deprecated]	Borrow pointers to the prime, optional subprime, and generator of a DH object (deprecated).
DH_get0_priv_key [deprecated]	Return the private key BIGNUM stored in a DH object, if any.
DH_get0_pub_key [deprecated]	Return the public key component of a DH object without duplicating it (deprecated).
DH_get0_q [deprecated]	Return the optional subprime q stored in a DH object (deprecated).
DH_get_1024_160 [deprecated]	Allocate a DH object with the RFC 5114 1024-bit MODP group using a 160-bit subgroup (deprecated).
DH_get_2048_224 [deprecated]	Allocate a DH object with the RFC 5114 2048-bit MODP group using a 224-bit subgroup (deprecated).
DH_get_2048_256 [deprecated]	Allocate a DH object with the RFC 5114 2048-bit MODP group using a 256-bit subgroup (deprecated).
DH_get_default_method [deprecated]	Return the process-wide default DH_METHOD (deprecated).
DH_get_ex_data [deprecated]	Return application data previously stored on a DH object (deprecated).
DH_get_length [deprecated]	Return the optional private-value length hint stored on a DH object (deprecated).
DH_get_nid [deprecated]	Return the named-group NID for a DH object if its parameters match a known group (deprecated).
DH_meth_dup [deprecated]	Duplicate a DH_METHOD, copying its name and callbacks (deprecated).
DH_meth_free [deprecated]	Free a DH_METHOD structure and any associated memory (deprecated).
DH_meth_get0_app_data [deprecated]	Return the opaque application data pointer stored on a DH_METHOD (deprecated).
DH_meth_get0_name [deprecated]	Return the display name stored on a DH_METHOD (deprecated).
DH_meth_get_bn_mod_exp [deprecated]	Return the modular-exponentiation callback from a DH_METHOD (deprecated).
DH_meth_get_compute_key [deprecated]	Return the shared-secret compute_key callback from a DH_METHOD (deprecated).
DH_meth_get_finish [deprecated]	Return the finish/cleanup callback installed on a custom DH_METHOD (deprecated).
DH_meth_get_flags [deprecated]	Return the flag mask stored on a DH_METHOD (deprecated).
DH_meth_get_generate_key [deprecated]	Return the key-generation callback from a DH_METHOD (deprecated).
DH_meth_get_generate_params [deprecated]	Return the parameter-generation callback from a DH_METHOD (deprecated).
DH_meth_get_init [deprecated]	Return the DH object-initialization callback from a DH_METHOD (deprecated).
DH_meth_new [deprecated]	Allocate a custom DH_METHOD with a duplicated name (deprecated).
DH_meth_set0_app_data [deprecated]	Attach opaque application data to a DH_METHOD, transferring ownership of the pointer (deprecated).
DH_meth_set1_name [deprecated]	Replace the display name stored on a DH_METHOD (deprecated).
DH_meth_set_bn_mod_exp [deprecated]	Set the modular-exponentiation callback on a DH_METHOD (deprecated).
DH_meth_set_compute_key [deprecated]	Set the shared-secret compute_key callback on a DH_METHOD (deprecated).
DH_meth_set_finish [deprecated]	Set the DH object teardown callback on a DH_METHOD (deprecated).
DH_meth_set_flags [deprecated]	Replace the flag mask stored on a DH_METHOD (deprecated).
DH_meth_set_generate_key [deprecated]	Set the key-generation callback on a DH_METHOD (deprecated).
DH_meth_set_generate_params [deprecated]	Set the parameter-generation callback on a DH_METHOD (deprecated).
DH_meth_set_init [deprecated]	Set the DH object-initialization callback on a DH_METHOD (deprecated).
DH_new [deprecated]	Allocate and initialize an empty DH object (deprecated).
DH_new_by_nid [deprecated]	Allocate a DH object preloaded with named safe-prime parameters.
DH_new_method [deprecated]	Allocate a DH object that uses engine for DH operations (deprecated).
DH_security_bits [deprecated]	Estimate the security strength in bits of a DH key's parameters (deprecated).
DH_set0_key [deprecated]	Set the public and/or private key BIGNUMs on a DH object, transferring ownership (deprecated).
DH_set0_pqg [deprecated]	Set the prime, optional subprime, and generator on a DH object, transferring ownership (deprecated).
DH_set_default_method [deprecated]	Set the process-wide default DH_METHOD (deprecated).
DH_set_ex_data [deprecated]	Store application data on a DH object at a CRYPTO_EX index (deprecated).
DH_set_flags [deprecated]	Set flag bits on a DH object without clearing existing flags (deprecated).
DH_set_length [deprecated]	Set the optional private-value length hint on a DH object (deprecated).
DH_set_method [deprecated]	Select the DH_METHOD used for operations on dh (deprecated).
DH_size [deprecated]	Return the Diffie-Hellman shared-secret size in bytes (deprecated).
DH_test_flags [deprecated]	Return which of the requested flag bits are currently set on a DH object (deprecated).
DH_up_ref [deprecated]	Increment the reference count of a DH object (deprecated).
DHparams_dup [deprecated]	Duplicate Diffie-Hellman domain parameters (DHparams_dup) (deprecated).
DHparams_it	Return the ASN.1 item descriptor for Diffie-Hellman domain parameters.
DHparams_print [deprecated]	Print Diffie-Hellman parameters to a BIO in human-readable form (deprecated).
DHparams_print_fp [deprecated]	Print DH parameters to a FILE in human-readable form (deprecated).
DIRECTORYSTRING_free	Free a DirectoryString and its contents.
DIRECTORYSTRING_it	Return the ASN.1 item descriptor for DirectoryString.
DIRECTORYSTRING_new	Allocate an empty DirectoryString (ASN.1 string CHOICE wrapper).
DISPLAYTEXT_free	Free a DisplayText (ASN.1 string CHOICE) and its contents.
DISPLAYTEXT_it	Return the ASN.1 item descriptor for DISPLAYTEXT.
DISPLAYTEXT_new	Allocate an empty DisplayText (ASN.1 string CHOICE).
DIST_POINT_NAME_free	Free a distribution point name value and its contents.
DIST_POINT_NAME_it	Return the ASN.1 item descriptor for DIST_POINT_NAME.
DIST_POINT_NAME_new	Allocate a new distribution point name value.
DIST_POINT_free	Free a CRL distribution point value and its contents.
DIST_POINT_it	Return the ASN.1 item descriptor for DIST_POINT.
DIST_POINT_new	Allocate a new CRL distribution point value.
DIST_POINT_set_dpname	Fill a relative distribution-point name using an issuer X509_NAME.
DSA_OpenSSL [deprecated]	Return the built-in OpenSSL software DSA_METHOD (deprecated).
DSA_SIG_free	Free a DSA_SIG and its r and s BIGNUM components.
DSA_SIG_get0	Borrow pointers to the r and s components of a DSA signature.
DSA_SIG_new	Allocate an empty DSA signature structure holding r and s.
DSA_SIG_set0	Set the r and s components of a DSA signature, transferring ownership.
DSA_bits [deprecated]	Return the bit length of the DSA prime modulus p (deprecated).
DSA_clear_flags [deprecated]	Clear selected flag bits on a DSA object (deprecated).
DSA_do_sign [deprecated]	Sign a digest with a DSA private key, returning a DSA_SIG structure (deprecated).
DSA_do_verify [deprecated]	Verify a DSA signature against a digest using a DSA_SIG structure (deprecated).
DSA_dup_DH [deprecated]	Duplicate DSA parameters (and key material when present) into a new DH object (deprecated).
DSA_free [deprecated]	Free a DSA object and its associated resources (deprecated).
DSA_generate_key [deprecated]	Generate a DSA public/private key pair from parameters already in a.
DSA_generate_parameters [deprecated]	Generate DSA domain parameters with a legacy progress callback (deprecated).
DSA_generate_parameters_ex [deprecated]	Generate DSA domain parameters into an existing DSA object (deprecated).
DSA_get0_engine [deprecated]	Return the ENGINE associated with a DSA key, if any.
DSA_get0_g [deprecated]	Return the DSA generator g without duplicating it (deprecated).
DSA_get0_key [deprecated]	Return pointers to the DSA public and private key components without transferring ownership (deprecated).
DSA_get0_p [deprecated]	Return the DSA prime modulus p without duplicating it (deprecated).
DSA_get0_pqg [deprecated]	Return pointers to the DSA domain parameters p, q, and g without transferring ownership (deprecated).
DSA_get0_priv_key [deprecated]	Return the private key component of a DSA object without duplicating it (deprecated).
DSA_get0_pub_key [deprecated]	Return the public key component of a DSA object without duplicating it (deprecated).
DSA_get0_q [deprecated]	Return the DSA subgroup order q without duplicating it (deprecated).
DSA_get_default_method [deprecated]	Return the current default DSA_METHOD (deprecated).
DSA_get_ex_data [deprecated]	Retrieve application data previously stored on a DSA object (deprecated).
DSA_get_method [deprecated]	Return the DSA_METHOD currently bound to d (deprecated).
DSA_meth_dup [deprecated]	Duplicate a DSA_METHOD object (deprecated).
DSA_meth_free [deprecated]	Free a DSA_METHOD structure and any associated memory (deprecated).
DSA_meth_get0_app_data [deprecated]	Return the opaque application data pointer stored on a DSA_METHOD (deprecated).
DSA_meth_get0_name [deprecated]	Return the descriptive name stored on a DSA_METHOD (deprecated).
DSA_meth_get_bn_mod_exp [deprecated]	Return the modular-exponentiation callback from a DSA_METHOD (deprecated).
DSA_meth_get_finish [deprecated]	Return the DSA object-finalization callback from a DSA_METHOD (deprecated).
DSA_meth_get_flags [deprecated]	Return the flag mask stored on a DSA_METHOD (deprecated).
DSA_meth_get_init [deprecated]	Return the DSA object-initialization callback from a DSA_METHOD (deprecated).
DSA_meth_get_keygen [deprecated]	Return the key-generation callback from a DSA_METHOD (deprecated).
DSA_meth_get_mod_exp [deprecated]	Return the modular-exponentiation callback from a DSA_METHOD (deprecated).
DSA_meth_get_paramgen [deprecated]	Return the parameter-generation callback from a DSA_METHOD (deprecated).
DSA_meth_get_sign [deprecated]	Return the signing callback installed on a DSA_METHOD.
DSA_meth_get_sign_setup [deprecated]	Return the sign-setup callback installed on a DSA_METHOD (deprecated).
DSA_meth_get_verify [deprecated]	Return the signature-verification callback from a DSA_METHOD (deprecated).
DSA_meth_new [deprecated]	Allocate a new DSA_METHOD with the given name and default flags (deprecated).
DSA_meth_set0_app_data [deprecated]	Store an opaque application pointer on a DSA_METHOD (deprecated).
DSA_meth_set1_name [deprecated]	Set the descriptive name of a DSA_METHOD (deprecated).
DSA_meth_set_bn_mod_exp [deprecated]	Set the modular-exponentiation callback on a custom DSA_METHOD (deprecated).
DSA_meth_set_finish [deprecated]	Set the DSA object-finalization callback on a DSA_METHOD (deprecated).
DSA_meth_set_flags [deprecated]	Set the flag mask on a DSA_METHOD (deprecated).
DSA_meth_set_init [deprecated]	Set the DSA object-initialization callback on a custom DSA_METHOD (deprecated).
DSA_meth_set_keygen [deprecated]	Set the key-generation callback on a custom DSA_METHOD (deprecated).
DSA_meth_set_mod_exp [deprecated]	Set the modular-exponentiation callback on a DSA_METHOD (deprecated).
DSA_meth_set_paramgen [deprecated]	Set the parameter-generation callback on a custom DSA_METHOD (deprecated).
DSA_meth_set_sign [deprecated]	Install the DSA signing callback on a DSA_METHOD (deprecated).
DSA_meth_set_sign_setup [deprecated]	Set the signature precomputation callback on a DSA_METHOD (deprecated).
DSA_meth_set_verify [deprecated]	Set the DSA signature-verification callback on a custom DSA_METHOD (deprecated).
DSA_new [deprecated]	Allocate an empty DSA object using the default method (deprecated).
DSA_new_method [deprecated]	Allocate a DSA object that uses methods from engine (deprecated).
DSA_print [deprecated]	Print a human-readable representation of a DSA key to a BIO (deprecated).
DSA_print_fp [deprecated]	Print a human-readable representation of a DSA key to a FILE (deprecated).
DSA_security_bits [deprecated]	Estimate the security strength in bits of a DSA key from its parameters (deprecated).
DSA_set0_key [deprecated]	Set the public and optional private key components of a DSA object (deprecated).
DSA_set0_pqg [deprecated]	Set the DSA domain parameters p, q, and g, transferring ownership (deprecated).
DSA_set_default_method [deprecated]	Set the process-wide default DSA_METHOD (deprecated).
DSA_set_ex_data [deprecated]	Store application-specific data on a DSA object at a CRYPTO ex_data index (deprecated).
DSA_set_flags [deprecated]	Set flag bits on a DSA object without clearing existing flags (deprecated).
DSA_set_method [deprecated]	Select the DSA_METHOD used for operations on dsa (deprecated).
DSA_sign [deprecated]	Create a DER-encoded DSA signature over a message digest (deprecated).
DSA_sign_setup [deprecated]	Legacy DSA precomputation stub retained for ABI compatibility (deprecated; do not use).
DSA_size [deprecated]	Return the maximum ASN.1 encoded DSA signature size for dsa in bytes (deprecated).
DSA_test_flags [deprecated]	Test whether all bits in flags are set on a DSA object (deprecated).
DSA_up_ref [deprecated]	Increment the reference count of a DSA object (deprecated).
DSA_verify [deprecated]	Verify a DSA signature over a message digest (deprecated).
DSAparams_dup [deprecated]	Deep-copy DSA domain parameters into a new DSA object (deprecated).
DSAparams_print [deprecated]	Print DSA domain parameters (p, q, g) to a BIO in human-readable form (deprecated).
DSAparams_print_fp [deprecated]	Print DSA domain parameters to a FILE (deprecated).
DTLS_client_method	Return a client-only SSL_METHOD negotiating DTLSv1.0 or DTLSv1.2.
DTLS_get_data_mtu	Return the maximum application-data payload size for a DTLS connection.
DTLS_method	Return a client-or-server SSL_METHOD that negotiates DTLS 1.0 or 1.2.
DTLS_server_method	Return a server-only SSL_METHOD that negotiates DTLS 1.0 or 1.2.
DTLS_set_timer_cb	Set a callback that controls DTLS retransmission timer duration.
DTLSv1_2_client_method [deprecated]	Return a client-only SSL_METHOD for DTLSv1.2 (deprecated).
DTLSv1_2_method [deprecated]	Return an SSL_METHOD for DTLSv1.2 only (client and server; deprecated).
DTLSv1_2_server_method [deprecated]	Return a server-only SSL_METHOD for DTLSv1.2 (deprecated).
DTLSv1_client_method [deprecated]	Return a client-only SSL_METHOD for DTLSv1.0 (deprecated).
DTLSv1_listen	Statelessly listen for a new DTLS ClientHello and verify the cookie exchange.
DTLSv1_method [deprecated]	Return a client-or-server SSL_METHOD restricted to DTLS 1.0 (deprecated).
DTLSv1_server_method [deprecated]	Return a server-only SSL_METHOD for DTLSv1.0 (deprecated).
ECDH_KDF_X9_62 [deprecated]	Derive key material from an ECDH shared secret using the X9.63 KDF (deprecated).
ECDH_compute_key [deprecated]	Perform ECDH and optionally apply a KDF to the shared secret (deprecated).
ECDSA_SIG_free	frees a ECDSA_SIG structure
ECDSA_SIG_get0	Borrow pointers to the r and s components of an ECDSA signature.
ECDSA_SIG_get0_r	Return a borrowed pointer to the r component of an ECDSA signature.
ECDSA_SIG_get0_s	Return a borrowed pointer to the s component of an ECDSA signature.
ECDSA_SIG_new	Allocates and initialize a ECDSA_SIG structure
ECDSA_SIG_set0	Set the r and s components of an ECDSA signature, transferring ownership.
ECDSA_do_sign [deprecated]	Computes the ECDSA signature of the given hash value using the supplied private key and returns the created signature.
ECDSA_do_sign_ex [deprecated]	Computes ECDSA signature of a given hash value using the supplied private key (note: sig must point to ECDSA_size(eckey) bytes of memory).
ECDSA_do_verify [deprecated]	Verifies that the supplied signature is a valid ECDSA signature of the supplied hash value using the supplied public key.
ECDSA_sign [deprecated]	Computes ECDSA signature of a given hash value using the supplied private key (note: sig must point to ECDSA_size(eckey) bytes of memory).
ECDSA_sign_ex [deprecated]	Computes ECDSA signature of a given hash value using the supplied private key (note: sig must point to ECDSA_size(eckey) bytes of memory).
ECDSA_sign_setup [deprecated]	Precompute parts of the signing operation
ECDSA_size [deprecated]	Returns the maximum length of the DER encoded signature
ECDSA_verify [deprecated]	Verifies that the given signature is valid ECDSA signature of the supplied hash value using the specified public key.
ECPARAMETERS_free	Free an ECPARAMETERS object.
ECPARAMETERS_it	Return the ASN.1 item descriptor for ECPARAMETERS.
ECPARAMETERS_new	Allocate a new ECPARAMETERS object.
ECPKPARAMETERS_free	Free an ECPKPARAMETERS object.
ECPKPARAMETERS_it	Return the ASN.1 item descriptor for ECPKPARAMETERS.
ECPKPARAMETERS_new	Allocate a new ECPKPARAMETERS object.
ECPKParameters_print [deprecated]	Print EC domain parameters from an EC_GROUP to a BIO (deprecated).
ECPKParameters_print_fp [deprecated]	Print EC public-key parameters from x to a FILE (deprecated).
ECParameters_print [deprecated]	Prints out the ec parameters on human readable form.
ECParameters_print_fp [deprecated]	Prints out the ec parameters on human readable form.
EC_GF2m_simple_method [deprecated]	Returns the basic GF2m ec method
EC_GFp_mont_method [deprecated]	Returns GFp methods using montgomery multiplication.
EC_GFp_nist_method [deprecated]	Returns GFp methods using optimized methods for NIST recommended curves
EC_GFp_simple_method [deprecated]	Returns the basic GFp ec methods which provides the basis for the optimized methods.
EC_GROUP_check	Checks whether the parameter in the EC_GROUP define a valid ec group
EC_GROUP_check_discriminant	Checks whether the discriminant of the elliptic curve is zero or not
EC_GROUP_check_named_curve	Identify whether group matches a built-in named curve and return its NID.
EC_GROUP_clear_free [deprecated]	Clears and frees a EC_GROUP object
EC_GROUP_cmp	Compares two EC_GROUP objects
EC_GROUP_copy	Copies EC_GROUP objects. Note: both EC_GROUPs must use the same EC_METHOD.
EC_GROUP_dup	Creates a new EC_GROUP object and copies the content form src to the newly created EC_KEY object
EC_GROUP_free	Frees a EC_GROUP object
EC_GROUP_get0_cofactor	Gets the cofactor of an EC_GROUP
EC_GROUP_get0_field	Gets the field of an EC_GROUP
EC_GROUP_get0_generator	Returns the generator of a EC_GROUP object.
EC_GROUP_get0_order	Gets the order of an EC_GROUP
EC_GROUP_get0_seed	Return a pointer to the optional seed associated with an EC_GROUP.
EC_GROUP_get_asn1_flag	Return whether an EC_GROUP encodes as a named curve or with explicit parameters.
EC_GROUP_get_basis_type	Return the NID of the basis type used to represent field elements of group (characteristic-2 curves).
EC_GROUP_get_cofactor	Gets the cofactor of a EC_GROUP
EC_GROUP_get_curve	Gets the parameters of the ec curve defined by y^2 = x^3 + a*x + b (for GFp) or y^2 + xy = x^3 + ax^2 + b (for GF2m)
EC_GROUP_get_curve_GF2m [deprecated]	Gets the parameters of an ec curve. Synonym for EC_GROUP_get_curve
EC_GROUP_get_curve_GFp [deprecated]	Gets the parameters of an ec curve. Synonym for EC_GROUP_get_curve
EC_GROUP_get_curve_name	Returns the curve name of a EC_GROUP object
EC_GROUP_get_degree	Returns the number of bits needed to represent a field element
EC_GROUP_get_ecparameters	Creates an ECPARAMETERS object for the given EC_GROUP object.
EC_GROUP_get_ecpkparameters	Creates an ECPKPARAMETERS object for the given EC_GROUP object.
EC_GROUP_get_field_type	Returns the field type of the EC_GROUP.
EC_GROUP_get_mont_data	Returns the montgomery data for order(Generator)
EC_GROUP_get_order	Gets the order of a EC_GROUP
EC_GROUP_get_pentanomial_basis	Return the pentanomial basis degrees k1, k2, k3 for a characteristic-2 curve group.
EC_GROUP_get_point_conversion_form	Return how EC points in this group are encoded by default.
EC_GROUP_get_seed_len	Return the length of the optional seed associated with an EC_GROUP.
EC_GROUP_get_trinomial_basis	Return the trinomial basis degree k for a characteristic-2 curve group.
EC_GROUP_have_precompute_mult [deprecated]	Reports whether a precomputation has been done
EC_GROUP_method_of [deprecated]	Returns the EC_METHOD of the EC_GROUP object.
EC_GROUP_new [deprecated]	Creates a new EC_GROUP object
EC_GROUP_new_by_curve_name	Creates a EC_GROUP object with a curve specified by a NID. Same as EC_GROUP_new_by_curve_name_ex but the libctx and propq are always NULL.
EC_GROUP_new_by_curve_name_ex	Creates a EC_GROUP object with a curve specified by a NID
EC_GROUP_new_curve_GF2m	Creates a new EC_GROUP object with the specified parameters defined over GF2m (defined by the equation y^2 + xy = x^3 + ax^2 + b)
EC_GROUP_new_curve_GFp	Creates a new EC_GROUP object with the specified parameters defined over GFp (defined by the equation y^2 = x^3 + a*x + b)
EC_GROUP_new_from_ecparameters	Creates a new EC_GROUP object from an ECPARAMETERS object
EC_GROUP_new_from_ecpkparameters	Creates a new EC_GROUP object from an ECPKPARAMETERS object
EC_GROUP_new_from_params	Creates a EC_GROUP object with a curve specified by parameters. The parameters may be explicit or a named curve,
EC_GROUP_order_bits	Gets the number of bits of the order of an EC_GROUP
EC_GROUP_precompute_mult [deprecated]	Stores multiples of generator for faster point multiplication
EC_GROUP_set_asn1_flag	Select whether an EC_GROUP encodes as a named curve or with explicit parameters.
EC_GROUP_set_curve	Sets the parameters of an ec curve defined by y^2 = x^3 + a*x + b (for GFp) or y^2 + xy = x^3 + ax^2 + b (for GF2m)
EC_GROUP_set_curve_GF2m [deprecated]	Sets the parameter of an ec curve. Synonym for EC_GROUP_set_curve
EC_GROUP_set_curve_GFp [deprecated]	Sets the parameters of an ec curve. Synonym for EC_GROUP_set_curve
EC_GROUP_set_curve_name	Sets the name of a EC_GROUP object
EC_GROUP_set_generator	Sets the generator and its order/cofactor of a EC_GROUP object.
EC_GROUP_set_point_conversion_form	Select how EC points in this group are encoded (compressed, uncompressed, or hybrid).
EC_GROUP_set_seed	Set the optional seed bytes associated with an EC_GROUP.
EC_GROUP_to_params	Creates an OSSL_PARAM array with the parameters describing the given EC_GROUP. The resulting parameters may contain an explicit or a named curve depending on the EC_GROUP.
EC_KEY_METHOD_free [deprecated]	Free an EC_KEY_METHOD.
EC_KEY_METHOD_get_compute_key [deprecated]	Retrieve the ECDH shared-secret callback from an EC_KEY_METHOD (deprecated).
EC_KEY_METHOD_get_init [deprecated]	Retrieve init/finish/copy/set_* callbacks from an EC_KEY_METHOD (deprecated).
EC_KEY_METHOD_get_keygen [deprecated]	Retrieve the key-generation callback from an EC_KEY_METHOD (deprecated).
EC_KEY_METHOD_get_sign [deprecated]	Retrieve ECDSA signing callbacks from an EC_KEY_METHOD (deprecated).
EC_KEY_METHOD_get_verify [deprecated]	Retrieve ECDSA verify callbacks from an EC_KEY_METHOD (deprecated).
EC_KEY_METHOD_new [deprecated]	Allocate a new EC_KEY_METHOD, optionally copying meth.
EC_KEY_METHOD_set_compute_key [deprecated]	Set the ECDH shared-secret callback on an EC_KEY_METHOD (deprecated).
EC_KEY_METHOD_set_init [deprecated]	Install lifecycle and field-assignment callbacks on an EC_KEY_METHOD (deprecated).
EC_KEY_METHOD_set_keygen [deprecated]	Set the key-generation callback on an EC_KEY_METHOD (deprecated).
EC_KEY_METHOD_set_sign [deprecated]	Install ECDSA signing callbacks on an EC_KEY_METHOD.
EC_KEY_METHOD_set_verify [deprecated]	Set ECDSA verify callbacks on an EC_KEY_METHOD (deprecated).
EC_KEY_OpenSSL [deprecated]	Return the built-in OpenSSL EC_KEY_METHOD (deprecated).
EC_KEY_can_sign [deprecated]	Indicates if an EC_KEY can be used for signing.
EC_KEY_check_key [deprecated]	Verifies that a private and/or public key is valid.
EC_KEY_clear_flags [deprecated]	Clear the given flag bits on an EC_KEY (deprecated).
EC_KEY_copy [deprecated]	Copies a EC_KEY object.
EC_KEY_decoded_from_explicit_params [deprecated]	Report whether key's group was decoded from explicit curve parameters (deprecated).
EC_KEY_dup [deprecated]	Creates a new EC_KEY object and copies the content from src to it.
EC_KEY_free [deprecated]	Frees a EC_KEY object.
EC_KEY_generate_key [deprecated]	Creates a new ec private (and optional a new public) key.
EC_KEY_get0_engine [deprecated]	Returns the ENGINE object of a EC_KEY object
EC_KEY_get0_group [deprecated]	Returns the EC_GROUP object of a EC_KEY object
EC_KEY_get0_private_key [deprecated]	Returns the private key of a EC_KEY object.
EC_KEY_get0_public_key [deprecated]	Returns the public key of a EC_KEY object.
EC_KEY_get_conv_form [deprecated]	Return the point-conversion form used when encoding an EC_KEY public point (deprecated).
EC_KEY_get_default_method [deprecated]	Return the current default EC_KEY_METHOD (deprecated).
EC_KEY_get_enc_flags [deprecated]	Return encoding-control flags from an EC_KEY (deprecated).
EC_KEY_get_ex_data [deprecated]	Retrieve application data previously stored on an EC_KEY (deprecated).
EC_KEY_get_flags [deprecated]	Return the flag bits currently set on an EC_KEY (deprecated).
EC_KEY_get_method [deprecated]	Return the EC_KEY_METHOD currently used by key (deprecated).
EC_KEY_key2buf [deprecated]	Encodes an EC_KEY public key to an allocated octet string
EC_KEY_new [deprecated]	Creates a new EC_KEY object. Same as calling EC_KEY_new_ex with a NULL library context
EC_KEY_new_by_curve_name [deprecated]	Creates a new EC_KEY object using a named curve as underlying EC_GROUP object. Same as calling EC_KEY_new_by_curve_name_ex with a NULL library context and property query string.
EC_KEY_new_by_curve_name_ex [deprecated]	Creates a new EC_KEY object using a named curve as underlying EC_GROUP object.
EC_KEY_new_ex [deprecated]	Create a new empty EC_KEY using a library context (deprecated).
EC_KEY_new_method [deprecated]	Allocate an EC_KEY using the EC method from engine (deprecated).
EC_KEY_oct2key [deprecated]	Decodes a EC_KEY public key from a octet string
EC_KEY_oct2priv [deprecated]	Decodes an EC_KEY private key from an octet string
EC_KEY_precompute_mult [deprecated]	Creates a table of pre-computed multiples of the generator to accelerate further EC_KEY operations.
EC_KEY_print [deprecated]	Prints out the contents of a EC_KEY object
EC_KEY_print_fp [deprecated]	Prints out the contents of a EC_KEY object
EC_KEY_priv2buf [deprecated]	Encodes an EC_KEY private key to an allocated octet string
EC_KEY_priv2oct [deprecated]	Encodes a EC_KEY private key to an octet string
EC_KEY_set_asn1_flag [deprecated]	Set ASN.1 encoding flags on the EC_GROUP inside eckey (deprecated).
EC_KEY_set_conv_form [deprecated]	Set the point-conversion form used when encoding an EC_KEY public point (deprecated).
EC_KEY_set_default_method [deprecated]	Set the process-wide default EC_KEY_METHOD used by newly created EC keys (deprecated).
EC_KEY_set_enc_flags [deprecated]	Set encoding-control flags on an EC_KEY (deprecated).
EC_KEY_set_ex_data [deprecated]	Store application data on an EC_KEY at CRYPTO_EX index idx (deprecated).
EC_KEY_set_flags [deprecated]	Set the given flag bits on an EC_KEY (deprecated; OR'd with existing flags).
EC_KEY_set_group [deprecated]	Sets the EC_GROUP of a EC_KEY object.
EC_KEY_set_method [deprecated]	Attach an EC_KEY_METHOD to key (deprecated).
EC_KEY_set_private_key [deprecated]	Sets the private key of a EC_KEY object.
EC_KEY_set_public_key [deprecated]	Sets the public key of a EC_KEY object.
EC_KEY_set_public_key_affine_coordinates [deprecated]	Sets a public key from affine coordinates performing necessary NIST PKV tests.
EC_KEY_up_ref [deprecated]	Increases the internal reference count of a EC_KEY object.
EC_METHOD_get_field_type [deprecated]	Returns the field type of the EC_METHOD.
EC_POINT_add	Computes the sum of two EC_POINT
EC_POINT_bn2point [deprecated]	Decode an EC point from a BIGNUM holding the SEC1 octet form (deprecated).
EC_POINT_clear_free	Clears and frees a EC_POINT object
EC_POINT_cmp	Compares two EC_POINTs
EC_POINT_copy	Copies EC_POINT object
EC_POINT_dbl	Computes the double of a EC_POINT
EC_POINT_dup	Creates a new EC_POINT object and copies the content of the supplied EC_POINT
EC_POINT_free	Frees a EC_POINT object
EC_POINT_get_Jprojective_coordinates_GFp [deprecated]	Gets the jacobian projective coordinates of a EC_POINT over GFp
EC_POINT_get_affine_coordinates	Gets the affine coordinates of an EC_POINT.
EC_POINT_get_affine_coordinates_GF2m [deprecated]	Gets the affine coordinates of an EC_POINT. A synonym of EC_POINT_get_affine_coordinates
EC_POINT_get_affine_coordinates_GFp [deprecated]	Gets the affine coordinates of an EC_POINT. A synonym of EC_POINT_get_affine_coordinates
EC_POINT_hex2point	Decode an EC point from a hex-encoded octet string.
EC_POINT_invert	Computes the inverse of a EC_POINT
EC_POINT_is_at_infinity	Checks whether the point is the neutral element of the group
EC_POINT_is_on_curve	Checks whether the point is on the curve
EC_POINT_make_affine [deprecated]	Convert point to affine coordinates in group (deprecated).
EC_POINT_method_of [deprecated]	Returns the EC_METHOD used in EC_POINT object
EC_POINT_mul	Computes r = generator * n + q * m
EC_POINT_new	Creates a new EC_POINT object for the specified EC_GROUP
EC_POINT_oct2point	Decodes a EC_POINT from a octet string
EC_POINT_point2bn [deprecated]	Encode an EC point as a BIGNUM holding the SEC1 octet form (deprecated).
EC_POINT_point2buf	Encodes an EC_POINT object to an allocated octet string
EC_POINT_point2hex	Encode an EC point as a newly allocated hexadecimal octet string.
EC_POINT_point2oct	Encodes a EC_POINT object to a octet string
EC_POINT_set_Jprojective_coordinates_GFp [deprecated]	Sets the jacobian projective coordinates of a EC_POINT over GFp
EC_POINT_set_affine_coordinates	Sets the affine coordinates of an EC_POINT
EC_POINT_set_affine_coordinates_GF2m [deprecated]	Sets the affine coordinates of an EC_POINT. A synonym of EC_POINT_set_affine_coordinates
EC_POINT_set_affine_coordinates_GFp [deprecated]	Sets the affine coordinates of an EC_POINT. A synonym of EC_POINT_set_affine_coordinates
EC_POINT_set_compressed_coordinates	Sets the x9.62 compressed coordinates of a EC_POINT
EC_POINT_set_compressed_coordinates_GF2m [deprecated]	Sets the x9.62 compressed coordinates of a EC_POINT. A synonym of EC_POINT_set_compressed_coordinates
EC_POINT_set_compressed_coordinates_GFp [deprecated]	Sets the x9.62 compressed coordinates of a EC_POINT. A synonym of EC_POINT_set_compressed_coordinates
EC_POINT_set_to_infinity	Sets a point to infinity (neutral element)
EC_POINTs_make_affine [deprecated]	Convert an array of EC_POINT objects to affine coordinates (deprecated).
EC_POINTs_mul [deprecated]	Computes r = generator * n + sum_{i=0}^{num-1} p[i]* m[i]
EC_curve_nid2nist	Map an OpenSSL curve NID to its NIST curve name string.
EC_curve_nist2nid	Map a NIST curve name such as "P-256" to the corresponding OpenSSL NID.
EC_get_builtin_curves	Copy built-in elliptic-curve descriptors into r.
EDIPARTYNAME_free	Free an EDIPARTYNAME structure and its contents.
EDIPARTYNAME_it	Return the ASN.1 item descriptor for EDIPARTYNAME.
EDIPARTYNAME_new	Allocate a new EDI party name GeneralName payload.
ENGINE_add [deprecated]	Add e to OpenSSL's internal list of loaded ENGINEs.
ENGINE_add_conf_module [deprecated]	Register the built-in OpenSSL CONF module that loads ENGINE sections.
ENGINE_by_id [deprecated]	Look up a registered ENGINE by its unique id string (deprecated).
ENGINE_cmd_is_executable [deprecated]	Test whether an ENGINE control command may be used as a config/setting command (deprecated).
ENGINE_ctrl [deprecated]	Dispatch a control command to an ENGINE (deprecated).
ENGINE_ctrl_cmd [deprecated]	Invoke an ENGINE control command looked up by name rather than number.
ENGINE_ctrl_cmd_string [deprecated]	Run a named ENGINE control command whose argument is a string (deprecated).
ENGINE_finish [deprecated]	Release a functional reference obtained from ENGINE_init() or a get-default call.
ENGINE_free [deprecated]	Release one structural reference to an ENGINE.
ENGINE_get_DH [deprecated]	Return the DH_METHOD currently attached to an ENGINE.
ENGINE_get_DSA [deprecated]	Return the DSA_METHOD currently attached to an ENGINE.
ENGINE_get_EC [deprecated]	Return the EC_KEY_METHOD currently attached to an ENGINE (deprecated).
ENGINE_get_RAND [deprecated]	Return the RAND_METHOD implemented by an ENGINE (deprecated).
ENGINE_get_RSA [deprecated]	Return the RSA_METHOD currently attached to an ENGINE (deprecated).
ENGINE_get_cipher [deprecated]	Return the EVP_CIPHER that e provides for algorithm nid.
ENGINE_get_cipher_engine [deprecated]	Obtain a functional reference to the default ENGINE implementing cipher nid.
ENGINE_get_ciphers [deprecated]	Return the ciphers enumeration/lookup callback registered on an ENGINE.
ENGINE_get_cmd_defns [deprecated]	Return the control-command definition table registered on an ENGINE.
ENGINE_get_ctrl_function [deprecated]	Return the ctrl callback registered on an ENGINE (deprecated).
ENGINE_get_default_DH [deprecated]	Obtain a functional reference to the default ENGINE for DH operations.
ENGINE_get_default_DSA [deprecated]	Obtain a functional reference to the default ENGINE for DSA operations.
ENGINE_get_default_EC [deprecated]	Obtain a functional reference to the default ENGINE for EC operations.
ENGINE_get_default_RAND [deprecated]	Obtain a functional reference to the default ENGINE for RAND operations.
ENGINE_get_default_RSA [deprecated]	Obtain a functional reference to the default ENGINE for RSA operations.
ENGINE_get_destroy_function [deprecated]	Return the destroy callback registered on an ENGINE.
ENGINE_get_digest [deprecated]	Return the EVP_MD that e provides for algorithm nid.
ENGINE_get_digest_engine [deprecated]	Obtain a functional reference to the default ENGINE implementing digest nid.
ENGINE_get_digests [deprecated]	Return the digests enumeration/lookup callback registered on an ENGINE.
ENGINE_get_ex_data [deprecated]	Retrieve application data previously stored on an ENGINE.
ENGINE_get_finish_function [deprecated]	Return the finish callback registered on an ENGINE.
ENGINE_get_first [deprecated]	Return the first ENGINE in OpenSSL's loaded list.
ENGINE_get_flags [deprecated]	Return the behavioural flag mask stored on an ENGINE (deprecated).
ENGINE_get_id [deprecated]	Return the unique identifier string of an ENGINE (deprecated).
ENGINE_get_init_function [deprecated]	Return the init callback registered on an ENGINE.
ENGINE_get_last [deprecated]	Return the last ENGINE in the global ENGINE list (deprecated).
ENGINE_get_load_privkey_function [deprecated]	Return the private-key loader callback registered on an ENGINE.
ENGINE_get_load_pubkey_function [deprecated]	Return the public-key loader callback registered on an ENGINE.
ENGINE_get_name [deprecated]	Return the human-readable name string of an ENGINE.
ENGINE_get_next [deprecated]	Return the next ENGINE in OpenSSL's loaded list and release e.
ENGINE_get_pkey_asn1_meth [deprecated]	Return the EVP_PKEY_ASN1_METHOD that e provides for algorithm nid (deprecated).
ENGINE_get_pkey_asn1_meth_engine [deprecated]	Obtain a functional reference to the default ENGINE implementing ASN.1 method nid.
ENGINE_get_pkey_asn1_meth_str [deprecated]	Look up an ENGINE's EVP_PKEY_ASN1_METHOD by PEM string name.
ENGINE_get_pkey_asn1_meths [deprecated]	Return the EVP_PKEY_ASN1_METHOD enumeration/lookup callback registered on an ENGINE.
ENGINE_get_pkey_meth [deprecated]	Return the EVP_PKEY_METHOD that e provides for algorithm nid.
ENGINE_get_pkey_meth_engine [deprecated]	Obtain a functional reference to the default ENGINE implementing pkey method nid (deprecated).
ENGINE_get_pkey_meths [deprecated]	Return the EVP_PKEY_METHOD enumeration/lookup callback registered on an ENGINE.
ENGINE_get_prev [deprecated]	Return the previous ENGINE in OpenSSL's loaded list and release e.
ENGINE_get_ssl_client_cert_function [deprecated]	Return the SSL client-certificate loader registered on an ENGINE.
ENGINE_get_static_state	Return a pointer that identifies this process's OpenSSL static data for ENGINE loaders.
ENGINE_get_table_flags [deprecated]	Return the global ENGINE algorithm-table flags.
ENGINE_init [deprecated]	Initialise an ENGINE for functional use (deprecated).
ENGINE_load_builtin_engines [deprecated]	Register all compiled-in ENGINE implementations (deprecated in OpenSSL 3).
ENGINE_load_private_key [deprecated]	Load a private key from an ENGINE by key identifier (deprecated).
ENGINE_load_public_key [deprecated]	Load a public key from storage managed by an ENGINE.
ENGINE_load_ssl_client_cert [deprecated]	Load an SSL client certificate and key via an ENGINE (deprecated).
ENGINE_new [deprecated]	Allocate a new empty ENGINE with a structural reference count of one.
ENGINE_pkey_asn1_find_str [deprecated]	Find an EVP_PKEY_ASN1_METHOD by PEM/string name across ENGINEs (deprecated).
ENGINE_register_DH [deprecated]	Register e's DH method in the ENGINE DH implementation table (deprecated).
ENGINE_register_DSA [deprecated]	Register e's DSA method with the ENGINE DSA implementation table (deprecated).
ENGINE_register_EC [deprecated]	Register e's EC method in the ENGINE EC implementation table.
ENGINE_register_RAND [deprecated]	Register e's RAND implementation with the global RAND table (deprecated).
ENGINE_register_RSA [deprecated]	Register e's RSA method in the ENGINE RSA implementation table.
ENGINE_register_all_DH [deprecated]	Register every loaded ENGINE that provides a DH method.
ENGINE_register_all_DSA [deprecated]	Register every loaded ENGINE that provides a DSA method.
ENGINE_register_all_EC [deprecated]	Register every loaded ENGINE that provides an EC method.
ENGINE_register_all_RAND [deprecated]	Register every loaded ENGINE that provides a RAND method.
ENGINE_register_all_RSA [deprecated]	Register every loaded ENGINE that provides an RSA method.
ENGINE_register_all_ciphers [deprecated]	Register every loaded ENGINE that provides cipher implementations.
ENGINE_register_all_complete [deprecated]	Register all loaded ENGINEs for every algorithm they implement (deprecated).
ENGINE_register_all_digests [deprecated]	Register every loaded ENGINE that provides digest implementations (deprecated).
ENGINE_register_all_pkey_asn1_meths [deprecated]	Register every loaded ENGINE that provides EVP_PKEY ASN.1 methods (deprecated).
ENGINE_register_all_pkey_meths [deprecated]	Register every loaded ENGINE that provides EVP_PKEY_METHOD implementations.
ENGINE_register_ciphers [deprecated]	Register e's cipher implementations with the global cipher table (deprecated).
ENGINE_register_complete [deprecated]	Register every algorithm category that e implements.
ENGINE_register_digests [deprecated]	Register e's digest implementations in the ENGINE digests table.
ENGINE_register_pkey_asn1_meths [deprecated]	Register the ASN.1 public-key methods provided by e (deprecated).
ENGINE_register_pkey_meths [deprecated]	Register e's EVP_PKEY_METHOD implementations with the global table (deprecated).
ENGINE_remove [deprecated]	Remove an ENGINE from the global ENGINE list (deprecated).
ENGINE_set_DH [deprecated]	Attach a DH_METHOD implementation to an ENGINE (deprecated).
ENGINE_set_DSA [deprecated]	Attach a DSA_METHOD implementation to an ENGINE.
ENGINE_set_EC [deprecated]	Attach an EC_KEY_METHOD implementation to an ENGINE (deprecated).
ENGINE_set_RAND [deprecated]	Attach a RAND_METHOD implementation to an ENGINE.
ENGINE_set_RSA [deprecated]	Attach an RSA_METHOD to an ENGINE (deprecated).
ENGINE_set_ciphers [deprecated]	Set the cipher enumeration callback for an ENGINE (deprecated).
ENGINE_set_cmd_defns [deprecated]	Attach the ENGINE_CMD_DEFN table describing control commands for an ENGINE.
ENGINE_set_ctrl_function [deprecated]	Set the ctrl callback used by ENGINE_ctrl() for an ENGINE (deprecated).
ENGINE_set_default [deprecated]	Register e as the default ENGINE for the method flags given.
ENGINE_set_default_DH [deprecated]	Register e as the default ENGINE for Diffie-Hellman operations.
ENGINE_set_default_DSA [deprecated]	Register e as the default ENGINE for DSA operations (deprecated).
ENGINE_set_default_EC [deprecated]	Register e as the default ENGINE for EC operations (deprecated).
ENGINE_set_default_RAND [deprecated]	Register e as the default ENGINE for RAND operations (deprecated).
ENGINE_set_default_RSA [deprecated]	Register e as the default ENGINE for RSA operations (deprecated).
ENGINE_set_default_ciphers [deprecated]	Register e as the default ENGINE for all cipher NIDs it implements (deprecated).
ENGINE_set_default_digests [deprecated]	Register e as the default ENGINE for digest algorithms (deprecated).
ENGINE_set_default_pkey_asn1_meths [deprecated]	Register e as the default ENGINE for EVP_PKEY ASN.1 methods (deprecated).
ENGINE_set_default_pkey_meths [deprecated]	Register e as the default ENGINE for EVP_PKEY methods.
ENGINE_set_default_string [deprecated]	Set defaults for the method kinds named in a comma-separated list.
ENGINE_set_destroy_function [deprecated]	Set the callback invoked when the last structural reference to an ENGINE is released.
ENGINE_set_digests [deprecated]	Set the callback that enumerates or looks up EVP_MD digests provided by an ENGINE.
ENGINE_set_ex_data [deprecated]	Store application data on an ENGINE at an ex_data index.
ENGINE_set_finish_function [deprecated]	Set the callback invoked by ENGINE_finish() to shut down an ENGINE.
ENGINE_set_flags [deprecated]	Replace the behavioural flags stored on an ENGINE.
ENGINE_set_id [deprecated]	Set the unique string identifier for an ENGINE (deprecated).
ENGINE_set_init_function [deprecated]	Set the callback invoked by ENGINE_init() to bring an ENGINE to operational state.
ENGINE_set_load_privkey_function [deprecated]	Set the callback used by ENGINE_load_private_key() to load private keys.
ENGINE_set_load_pubkey_function [deprecated]	Set the callback used by ENGINE_load_public_key() to load public keys.
ENGINE_set_load_ssl_client_cert_function [deprecated]	Set the callback that loads an SSL/TLS client certificate and key from an ENGINE (deprecated).
ENGINE_set_name [deprecated]	Set the human-readable name string for an ENGINE (deprecated).
ENGINE_set_pkey_asn1_meths [deprecated]	Install the ENGINE callback that enumerates public-key ASN.1 methods (deprecated).
ENGINE_set_pkey_meths [deprecated]	Set the callback that enumerates or looks up EVP_PKEY_METHOD entries provided by an ENGINE.
ENGINE_set_table_flags [deprecated]	Set the global ENGINE algorithm-table flags (deprecated).
ENGINE_unregister_DH [deprecated]	Remove e's DH method from the ENGINE DH implementation table (deprecated).
ENGINE_unregister_DSA [deprecated]	Remove e's DSA method from the ENGINE DSA implementation table.
ENGINE_unregister_EC [deprecated]	Remove e's EC method from the ENGINE EC implementation table.
ENGINE_unregister_RAND [deprecated]	Unregister an ENGINE as a RAND implementation (deprecated).
ENGINE_unregister_RSA [deprecated]	Remove e's RSA method from the ENGINE RSA implementation table.
ENGINE_unregister_ciphers [deprecated]	Unregister all cipher implementations previously registered from e (deprecated).
ENGINE_unregister_digests [deprecated]	Unregister e's digest implementations from the ENGINE digests table (deprecated).
ENGINE_unregister_pkey_asn1_meths [deprecated]	Unregister the EVP_PKEY ASN.1 methods previously registered from e (deprecated).
ENGINE_unregister_pkey_meths [deprecated]	Unregister e's EVP_PKEY_METHOD implementations from the global table (deprecated).
ENGINE_up_ref [deprecated]	Increment the structural reference count of an ENGINE.
ERR_COMMON_ERROR	Return whether an error code is a system-independent common ERR reason.
ERR_FATAL_ERROR	Return whether a packed error code is marked fatal.
ERR_GET_LIB	Extract the library number from a packed OpenSSL error code.
ERR_GET_REASON	Extract the reason code from a packed OpenSSL or system error code.
ERR_GET_RFLAGS	Extract reason-flag bits (ERR_RFLAG_*) from a packed OpenSSL error code.
ERR_add_error_data	Append concatenated C strings as auxiliary data to the most recent error.
ERR_add_error_mem_bio	Append the contents of memory BIO bio as auxiliary data to the most recent error.
ERR_add_error_txt	Append text to the most recent error, optionally inserting a separator first.
ERR_add_error_vdata	Append additional string data to the most recent error, from a va_list.
ERR_clear_error	Clear all errors from the current thread's OpenSSL error queue.
ERR_clear_last_mark	Remove the most recently set error-stack mark without popping errors.
ERR_count_to_mark	Count error-stack entries above the most recently set mark.
ERR_error_string	Format a human-readable description of error code e into a buffer.
ERR_error_string_n	Format an OpenSSL error code into a caller-provided buffer.
ERR_func_error_string [deprecated]	Return the function name for a packed error code (deprecated; always returns NULL in 3.0).
ERR_get_error	Pop the earliest error code from the current thread's error queue.
ERR_get_error_all	Pop the earliest error and optionally return file, line, function, data, and flags.
ERR_get_error_line [deprecated]	Pop the earliest error and optionally return file and line (deprecated).
ERR_get_error_line_data [deprecated]	Pop the earliest error with file, line, data, and flags (deprecated).
ERR_get_next_error_library	Allocate a unique library number for a dynamically registered error library.
ERR_get_state [deprecated]	Return the current thread's ERR_STATE (deprecated internal accessor).
ERR_lib_error_string	Return the human-readable library name for a packed error code.
ERR_load_ASN1_strings [deprecated]	Load ASN.1 library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_ASYNC_strings [deprecated]	Load ASYNC library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_BIO_strings [deprecated]	Load BIO library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_BN_strings [deprecated]	Load BN library error strings (no-op in OpenSSL 3; deprecated).
ERR_load_BUF_strings [deprecated]	Load BUF library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_CMS_strings [deprecated]	Load CMS library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_COMP_strings [deprecated]	Load legacy COMP library error strings (deprecated; no longer needed).
ERR_load_CONF_strings [deprecated]	Load CONF library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_CRYPTO_strings [deprecated]	Load CRYPTO library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_CT_strings [deprecated]	Load Certificate Transparency library error strings (deprecated no-op in OpenSSL 3+).
ERR_load_DH_strings [deprecated]	Load Diffie-Hellman library error strings (no-op in OpenSSL 3; deprecated).
ERR_load_DSA_strings [deprecated]	Load legacy DSA error reason strings (deprecated no-op in OpenSSL 3).
ERR_load_EC_strings [deprecated]	Load EC library error strings (no-op in OpenSSL 3; deprecated).
ERR_load_ENGINE_strings [deprecated]	Load ENGINE library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_ERR_strings [deprecated]	Load core ERR library error strings (no-op in OpenSSL 3; deprecated).
ERR_load_EVP_strings [deprecated]	Load EVP library error strings (no-op in OpenSSL 3; deprecated).
ERR_load_KDF_strings [deprecated]	Load KDF library error strings (no-op in OpenSSL 3; deprecated).
ERR_load_OBJ_strings [deprecated]	Load legacy OBJ library error strings (deprecated; no longer needed).
ERR_load_OCSP_strings [deprecated]	Load legacy OCSP library error strings (deprecated; no longer needed).
ERR_load_OSSL_STORE_strings [deprecated]	Load OSSL_STORE library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_PEM_strings [deprecated]	Load PEM library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_PKCS12_strings [deprecated]	Load PKCS#12 library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_PKCS7_strings [deprecated]	Load PKCS#7 library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_RAND_strings [deprecated]	Load RAND library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_RSA_strings [deprecated]	Load RSA library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_SSL_strings [deprecated]	Load libssl reason error strings into the error queue.
ERR_load_TS_strings [deprecated]	Load legacy ERR reason strings for the TS library (deprecated no-op).
ERR_load_UI_strings [deprecated]	Load legacy UI library error strings (deprecated; no longer needed).
ERR_load_X509V3_strings [deprecated]	Load X509V3 library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_X509_strings [deprecated]	Load X509 library error strings into the error queue (deprecated no-op in OpenSSL 3+).
ERR_load_strings	Register a mutable ERR_STRING_DATA table for library lib.
ERR_load_strings_const	Register a const ERR_STRING_DATA table whose last entry has error == 0.
ERR_new	Allocate a new empty slot on the current thread's OpenSSL error queue.
ERR_peek_error	Return the earliest error code without removing it from the queue.
ERR_peek_error_all	Peek at the earliest error and optionally return file, line, function, data, and flags.
ERR_peek_error_data	Peek at the earliest error and optionally return auxiliary data and flags.
ERR_peek_error_func	Peek at the earliest error and optionally return its function name.
ERR_peek_error_line	Peek at the earliest error and optionally return its source file and line.
ERR_peek_error_line_data [deprecated]	Peek at the earliest error with file, line, data, and flags (deprecated).
ERR_peek_last_error	Return the newest error code without removing it from the queue.
ERR_peek_last_error_all	Peek at the newest error and optionally return file, line, function, data, and flags.
ERR_peek_last_error_data	Peek at the newest error and optionally return auxiliary data and flags.
ERR_peek_last_error_func	Peek at the newest error code and optionally its function name.
ERR_peek_last_error_line	Peek at the newest error code and optionally its source file/line.
ERR_peek_last_error_line_data [deprecated]	Peek at the newest error with file, line, data, and flags (deprecated).
ERR_pop	Unconditionally remove the newest error from the queue.
ERR_pop_to_mark	Pop errors until (and including) the most recent mark set by ERR_set_mark().
ERR_print_errors	Print and clear all queued OpenSSL errors to BIO bp.
ERR_print_errors_cb	Print and clear all queued errors, invoking cb for each formatted line.
ERR_print_errors_fp	Print and clear all queued OpenSSL errors to stdio stream fp.
ERR_reason_error_string	Return the registered reason-string for a packed error code.
ERR_remove_state [deprecated]	Remove the error queue for a process id (deprecated; use ERR_remove_thread_state).
ERR_remove_thread_state [deprecated]	Free the error queue for a thread identifier (deprecated; automatic since 1.1.0).
ERR_set_debug	Attach source location debug information to the current error-queue entry.
ERR_set_error	Set library, reason, and optional formatted auxiliary data on the current error entry.
ERR_set_error_data	Replace auxiliary data on the most recent error, taking ownership when flagged.
ERR_set_mark	Place a mark on the current topmost error-queue entry.
ERR_unload_strings	Remove previously registered error strings for library lib.
ERR_vset_error	Push an error onto the thread's error queue with a printf-style detail (va_list form).
ESS_CERT_ID_V2_dup	Duplicate a ESS CertIDv2.
ESS_CERT_ID_V2_free	Free a ESS CertIDv2 and its contents.
ESS_CERT_ID_V2_new	Allocate an empty ESS CertIDv2.
ESS_CERT_ID_dup	Duplicate a ESS CertID.
ESS_CERT_ID_free	Free a ESS CertID and its contents.
ESS_CERT_ID_new	Allocate an empty ESS CertID.
ESS_ISSUER_SERIAL_dup	Duplicate a ESS IssuerSerial.
ESS_ISSUER_SERIAL_free	Free a ESS IssuerSerial and its contents.
ESS_ISSUER_SERIAL_new	Allocate an empty ESS IssuerSerial.
ESS_SIGNING_CERT_V2_dup	Duplicate a ESS SigningCertificateV2 attribute.
ESS_SIGNING_CERT_V2_free	Free a ESS SigningCertificateV2 attribute and its contents.
ESS_SIGNING_CERT_V2_it	Return the ASN.1 item descriptor for ESS_SIGNING_CERT_V2.
ESS_SIGNING_CERT_V2_new	Allocate an empty ESS SigningCertificateV2 attribute.
ESS_SIGNING_CERT_dup	Duplicate a ESS SigningCertificate attribute.
ESS_SIGNING_CERT_free	Free a ESS SigningCertificate attribute and its contents.
ESS_SIGNING_CERT_it	Return the ASN.1 item descriptor for ESS_SIGNING_CERT.
ESS_SIGNING_CERT_new	Allocate an empty ESS SigningCertificate attribute.
EVP_ASYM_CIPHER_do_all_provided	Invoke fn for every asymmetric cipher algorithm available in libctx.
EVP_ASYM_CIPHER_fetch	Fetch an asymmetric cipher (encrypt/decrypt) algorithm from providers.
EVP_ASYM_CIPHER_free	Release a reference to a fetched asymmetric cipher algorithm.
EVP_ASYM_CIPHER_get0_description	Return a human-readable description of an asymmetric cipher algorithm.
EVP_ASYM_CIPHER_get0_name	Return the primary algorithm name of an asymmetric cipher.
EVP_ASYM_CIPHER_get0_provider	Return the provider that implemented an asymmetric cipher algorithm.
EVP_ASYM_CIPHER_gettable_ctx_params	Return the OSSL_PARAM descriptors gettable from an asymmetric-cipher context.
EVP_ASYM_CIPHER_is_a	Test whether an asymmetric cipher implementation matches a name.
EVP_ASYM_CIPHER_names_do_all	Call fn for each synonymous name of an asymmetric-cipher algorithm implementation.
EVP_ASYM_CIPHER_settable_ctx_params	Describe OSSL_PARAM keys settable on asymmetric-cipher contexts for ciph.
EVP_ASYM_CIPHER_up_ref	Increment the reference count on a fetched asymmetric cipher algorithm.
EVP_BytesToKey	Derive a cipher key and IV from a password using the legacy EVP_BytesToKey KDF.
EVP_CIPHER_CTX_buf_noconst [deprecated]	Return the internal partial-block buffer of a cipher context (deprecated).
EVP_CIPHER_CTX_cipher	Return the EVP_CIPHER associated with a cipher context.
EVP_CIPHER_CTX_clear_flags	Clear selected flag bits on a cipher context.
EVP_CIPHER_CTX_copy	Copy the cipher state from one context into another.
EVP_CIPHER_CTX_ctrl	Send a cipher-specific control request to an EVP_CIPHER_CTX.
EVP_CIPHER_CTX_dup	Duplicate a cipher context, including its algorithm state.
EVP_CIPHER_CTX_free	Free a cipher context and any associated resources.
EVP_CIPHER_CTX_get0_cipher	Return the cipher method currently associated with a cipher context.
EVP_CIPHER_CTX_get1_cipher	Return a new reference to the EVP_CIPHER used by a cipher context.
EVP_CIPHER_CTX_get_app_data	Return the application-specific pointer previously stored on a cipher context.
EVP_CIPHER_CTX_get_block_size	Return the block size of the cipher bound to a cipher context.
EVP_CIPHER_CTX_get_cipher_data	Return the cipher-implementation private data pointer for ctx.
EVP_CIPHER_CTX_get_iv_length	Return the IV length in bytes for the cipher currently set on ctx.
EVP_CIPHER_CTX_get_key_length	Return the key length currently configured on a cipher context.
EVP_CIPHER_CTX_get_nid	Return the NID of the cipher currently bound to a cipher context.
EVP_CIPHER_CTX_get_num	Return the cipher-specific "num" field of a cipher context.
EVP_CIPHER_CTX_get_original_iv	Copy the original IV from a cipher context into buf.
EVP_CIPHER_CTX_get_params	Retrieve algorithm parameters from a cipher context into params.
EVP_CIPHER_CTX_get_tag_length	Return the authentication tag length for an AEAD cipher context.
EVP_CIPHER_CTX_get_updated_iv	Copy the current IV state from a cipher context into a buffer.
EVP_CIPHER_CTX_gettable_params	Describe OSSL_PARAM keys gettable from the cipher currently bound to ctx.
EVP_CIPHER_CTX_is_encrypting	Test whether a cipher context is currently configured for encryption.
EVP_CIPHER_CTX_iv [deprecated]	Return a pointer to the IV stored in a cipher context (deprecated).
EVP_CIPHER_CTX_iv_noconst [deprecated]	Return a mutable pointer to the current IV in a cipher context (deprecated).
EVP_CIPHER_CTX_new	Allocate an empty cipher context.
EVP_CIPHER_CTX_original_iv [deprecated]	Return the IV originally supplied when the cipher context was initialized (deprecated).
EVP_CIPHER_CTX_rand_key	Generate a random key suitable for the cipher currently set on ctx.
EVP_CIPHER_CTX_reset	Reset a cipher context to a reusable empty state without freeing it.
EVP_CIPHER_CTX_set_app_data	Store an application pointer on a cipher context.
EVP_CIPHER_CTX_set_cipher_data	Replace the cipher-implementation private data pointer on ctx.
EVP_CIPHER_CTX_set_flags	Set flag bits on a cipher context without clearing existing flags.
EVP_CIPHER_CTX_set_key_length	Set a variable-length cipher's key length on a cipher context.
EVP_CIPHER_CTX_set_num	Set the partial-block offset counter stored in a cipher context.
EVP_CIPHER_CTX_set_padding	Enable or disable standard block-cipher padding on a cipher context.
EVP_CIPHER_CTX_set_params	Set provider parameters on an initialised cipher context.
EVP_CIPHER_CTX_settable_params	Return the OSSL_PARAM descriptors that may be set on an initialized cipher context.
EVP_CIPHER_CTX_test_flags	Test whether selected flag bits are set on a cipher context.
EVP_CIPHER_asn1_to_param	Decode cipher AlgorithmIdentifier parameters from type into cipher context c.
EVP_CIPHER_do_all	Invoke fn for every cipher name mapping in the legacy EVP cipher table.
EVP_CIPHER_do_all_provided	Invoke a callback for every cipher implementation available from providers.
EVP_CIPHER_do_all_sorted	Invoke fn for every cipher name mapping, in sorted name order.
EVP_CIPHER_fetch	Fetch a cipher implementation from providers in a library context.
EVP_CIPHER_free	Free a fetched or duplicated EVP_CIPHER method.
EVP_CIPHER_get0_description	Return a human-readable description of a cipher algorithm.
EVP_CIPHER_get0_name	Return the primary name of a cipher algorithm.
EVP_CIPHER_get0_provider	Return the provider that implements a cipher algorithm.
EVP_CIPHER_get_asn1_iv	Decode an IV from an ASN.1 OCTET STRING in type into cipher context c.
EVP_CIPHER_get_block_size	Return the block size of a cipher in bytes.
EVP_CIPHER_get_flags	Return the capability and behavior flags of a cipher.
EVP_CIPHER_get_iv_length	Return the IV length in bytes required by a cipher.
EVP_CIPHER_get_key_length	Return the default key length of a cipher in bytes.
EVP_CIPHER_get_mode	Return the cipher mode constant for a cipher method.
EVP_CIPHER_get_nid	Return the NID associated with a cipher algorithm.
EVP_CIPHER_get_params	Retrieve algorithm-level parameters from a cipher implementation.
EVP_CIPHER_get_type	Return the OBJECT IDENTIFIER NID of a cipher (ignoring parameters).
EVP_CIPHER_gettable_ctx_params	Describe OSSL_PARAM keys that may be retrieved from contexts of cipher.
EVP_CIPHER_gettable_params	Return the OSSL_PARAM descriptors gettable from an EVP_CIPHER algorithm.
EVP_CIPHER_impl_ctx_size [deprecated]	Return the size of the cipher's legacy implementation context (deprecated).
EVP_CIPHER_is_a	Test whether cipher is known under algorithm name name.
EVP_CIPHER_meth_dup [deprecated]	Duplicate a custom EVP_CIPHER method object (deprecated).
EVP_CIPHER_meth_free [deprecated]	Free a custom EVP_CIPHER created with EVP_CIPHER_meth_new() (deprecated).
EVP_CIPHER_meth_get_cleanup [deprecated]	Return the cleanup callback previously set on a custom EVP_CIPHER method.
EVP_CIPHER_meth_get_ctrl [deprecated]	Return the ctrl callback previously set on a custom EVP_CIPHER method (deprecated).
EVP_CIPHER_meth_get_do_cipher [deprecated]	Return the do_cipher callback from a custom EVP_CIPHER method (deprecated).
EVP_CIPHER_meth_get_get_asn1_params [deprecated]	Return the get_asn1_params callback previously set on a custom EVP_CIPHER method (deprecated).
EVP_CIPHER_meth_get_init [deprecated]	Return the init callback previously set on a custom EVP_CIPHER method (deprecated).
EVP_CIPHER_meth_get_set_asn1_params [deprecated]	Return the set_asn1_params callback previously set on a custom EVP_CIPHER method.
EVP_CIPHER_meth_new [deprecated]	Allocate a custom EVP_CIPHER method object (deprecated).
EVP_CIPHER_meth_set_cleanup [deprecated]	Set the context-cleanup callback on a custom EVP_CIPHER (deprecated).
EVP_CIPHER_meth_set_ctrl [deprecated]	Set the ctrl callback on a custom EVP_CIPHER (deprecated).
EVP_CIPHER_meth_set_do_cipher [deprecated]	Set the encrypt/decrypt update callback on a custom EVP_CIPHER (deprecated).
EVP_CIPHER_meth_set_flags [deprecated]	Set EVP_CIPH_* capability flags on a custom EVP_CIPHER (deprecated).
EVP_CIPHER_meth_set_get_asn1_params [deprecated]	Set the callback that exports cipher parameters into an ASN.1 type (deprecated).
EVP_CIPHER_meth_set_impl_ctx_size [deprecated]	Set how many bytes of cipher-specific context storage to allocate (deprecated).
EVP_CIPHER_meth_set_init [deprecated]	Set the key/IV initialization callback on a custom EVP_CIPHER (deprecated).
EVP_CIPHER_meth_set_iv_length [deprecated]	Set the IV length advertised by a custom EVP_CIPHER method (deprecated).
EVP_CIPHER_meth_set_set_asn1_params [deprecated]	Set the ASN.1 parameter-encoding callback on a custom EVP_CIPHER method (deprecated).
EVP_CIPHER_names_do_all	Invoke a callback for every name synonym associated with a cipher.
EVP_CIPHER_param_to_asn1	Encode cipher parameters (typically including the IV) from c into an ASN1_TYPE.
EVP_CIPHER_set_asn1_iv	Encode the cipher context IV into an ASN.1 OCTET STRING inside type.
EVP_CIPHER_settable_ctx_params	Describe OSSL_PARAM keys that may be set on contexts of cipher.
EVP_CIPHER_up_ref	Increment the reference count on a fetched EVP_CIPHER.
EVP_Cipher	Encrypt or decrypt up to inl bytes from in into out (legacy one-shot).
EVP_CipherFinal	Finalize a cipher operation and write any remaining output bytes.
EVP_CipherFinal_ex	Finalize a cipher operation (extended form) and write any remaining output.
EVP_CipherInit	Initialize ctx for encryption or decryption using the default implementation.
EVP_CipherInit_ex	Initialise ctx for encryption or decryption with cipher.
EVP_CipherInit_ex2	Initialise a cipher context with optional OSSL_PARAM settings.
EVP_CipherUpdate	Encrypt or decrypt a chunk of data using a cipher context already set for either direction.
EVP_DecodeBlock	Base64-decode n characters from f into t as a single block.
EVP_DecodeFinal	Finish a Base64 decode, flushing any remaining decoded bytes.
EVP_DecodeInit	Initialize a context for incremental Base64 decoding.
EVP_DecodeUpdate	Decode a chunk of Base64 input into out, updating the decode context.
EVP_DecryptFinal	Finish decryption and write any remaining plaintext (legacy wrapper).
EVP_DecryptFinal_ex	Finalize decryption and write any remaining plaintext (including padding removal).
EVP_DecryptInit	Initialize a cipher context for decryption (legacy ENGINE-aware form).
EVP_DecryptInit_ex	Initialize ctx for decryption with an optional ENGINE implementation.
EVP_DecryptInit_ex2	Initialize ctx for decryption with cipher, key, iv, and optional parameters.
EVP_DecryptUpdate	Decrypt a chunk of ciphertext into out, updating the cipher context.
EVP_Digest	Hash count bytes at data in one shot and write the digest to md.
EVP_DigestFinal	Finalize a digest computation and write the message digest.
EVP_DigestFinalXOF	Finalize an XOF digest and write outlen bytes of output.
EVP_DigestFinal_ex	Finalize a digest computation and write the message digest to md without resetting ownership of ctx.
EVP_DigestInit	Initialize a digest context for hashing with type (legacy ENGINE-aware form).
EVP_DigestInit_ex	Initialise digest context ctx for algorithm type.
EVP_DigestInit_ex2	Initialize a digest context with type and optional algorithm parameters.
EVP_DigestSign	Sign tbs in one call using a prepared DigestSign context.
EVP_DigestSignFinal	Finalize a DigestSign operation and write the signature.
EVP_DigestSignInit	Initialise ctx for a one-shot or streaming DigestSign with key pkey.
EVP_DigestSignInit_ex	Initialise a digest-sign operation using a digest name and library context.
EVP_DigestSignUpdate	Hash more message bytes into an initialized DigestSign context.
EVP_DigestSqueeze	Squeeze additional output from an XOF digest context (for example SHAKE).
EVP_DigestUpdate	Hash more input bytes into an initialized message-digest context.
EVP_DigestVerify	Verify sigret over tbs in one call using a prepared DigestVerify context.
EVP_DigestVerifyFinal	Finish a DigestVerify operation by checking sig against the digested data.
EVP_DigestVerifyInit	Initialise ctx for a DigestVerify operation with public key pkey.
EVP_DigestVerifyInit_ex	Initialize a digest-verify operation with an explicit digest name and library context.
EVP_DigestVerifyUpdate	Hash more message bytes into an initialized DigestVerify context.
EVP_ENCODE_CTX_copy	Copy a Base64 encode/decode context.
EVP_ENCODE_CTX_free	Free a Base64 encode/decode context.
EVP_ENCODE_CTX_new	Allocate a new Base64 encode/decode context.
EVP_ENCODE_CTX_num	Return the number of pending (unflushed) bytes in an encode/decode context.
EVP_EncodeBlock	Base64-encode n bytes from f into t as a single block (with NUL terminator).
EVP_EncodeFinal	Flush remaining Base64-encoded output from an encode context.
EVP_EncodeInit	Initialise a Base64 encode context for EVP_EncodeUpdate/Final.
EVP_EncodeUpdate	Base64-encode a chunk of input, writing complete output lines to out.
EVP_EncryptFinal	Finish encryption and write any remaining padded ciphertext bytes.
EVP_EncryptFinal_ex	Finalize encryption and write any remaining ciphertext (including padding).
EVP_EncryptInit	Initialize ctx for encryption with cipher, key, and iv.
EVP_EncryptInit_ex	Initialize ctx for encryption with an optional ENGINE implementation.
EVP_EncryptInit_ex2	Initialize a cipher context for encryption with optional OSSL_PARAM settings.
EVP_EncryptUpdate	Encrypt inl bytes from in and write ciphertext to out.
EVP_KDF_CTX_dup	Duplicate a KDF context, copying algorithm state where supported.
EVP_KDF_CTX_free	Free a KDF context and its associated state.
EVP_KDF_CTX_get_kdf_size	Return the output size produced by ctx, or SIZE_MAX if variable-length.
EVP_KDF_CTX_get_params	Retrieve gettable parameters from an EVP_KDF_CTX.
EVP_KDF_CTX_gettable_params	Return the OSSL_PARAM descriptors that can be retrieved from a KDF context.
EVP_KDF_CTX_kdf	Return the EVP_KDF method associated with a derivation context.
EVP_KDF_CTX_new	Allocate a key-derivation context for a fetched EVP_KDF.
EVP_KDF_CTX_reset	Reset a KDF context so it can be reconfigured and reused.
EVP_KDF_CTX_set_params	Apply OSSL_PARAM values (salt, key, info, digest, …) to a KDF context.
EVP_KDF_CTX_settable_params	Describe parameters currently settable on an EVP_KDF_CTX instance.
EVP_KDF_derive	Derive keying material into key using the parameters bound to ctx.
EVP_KDF_do_all_provided	Invoke fn for every KDF algorithm available from libctx providers.
EVP_KDF_fetch	Fetch a key-derivation algorithm implementation from providers.
EVP_KDF_free	Release a reference to a fetched EVP_KDF method.
EVP_KDF_get0_description	Return a human-readable description of a KDF algorithm.
EVP_KDF_get0_name	Return the algorithm name of a KDF method.
EVP_KDF_get0_provider	Return the provider that implemented a fetched EVP_KDF.
EVP_KDF_get_params	Retrieve algorithm-level OSSL_PARAM values from a fetched EVP_KDF.
EVP_KDF_gettable_ctx_params	Return OSSL_PARAM descriptors that can be retrieved from an EVP_KDF_CTX.
EVP_KDF_gettable_params	Describe the parameters that can be read from an EVP_KDF via EVP_KDF_get_params().
EVP_KDF_is_a	Test whether an EVP_KDF implementation is known by name.
EVP_KDF_names_do_all	Invoke fn for every name/alias of KDF algorithm kdf.
EVP_KDF_settable_ctx_params	Describe context parameters that can be set before deriving with kdf.
EVP_KDF_up_ref	Increment the reference count on a fetched EVP_KDF method.
EVP_KEM_do_all_provided	Call fn for every KEM algorithm available from providers in libctx.
EVP_KEM_fetch	Fetch a key-encapsulation mechanism implementation from providers.
EVP_KEM_free	Decrement the reference count of a fetched KEM and free it when it reaches zero.
EVP_KEM_get0_description	Return a human-readable description of a fetched KEM algorithm.
EVP_KEM_get0_name	Return the primary name of a fetched KEM algorithm.
EVP_KEM_get0_provider	Return the provider that implemented a fetched EVP_KEM algorithm.
EVP_KEM_gettable_ctx_params	Return the context parameters that can be read from a KEM algorithm.
EVP_KEM_is_a	Test whether a KEM implementation is known by a given name.
EVP_KEM_names_do_all	Invoke fn for each name synonym associated with a KEM algorithm.
EVP_KEM_settable_ctx_params	Return the OSSL_PARAM descriptors settable on a KEM operation context.
EVP_KEM_up_ref	Increment the reference count on a fetched KEM algorithm.
EVP_KEYEXCH_do_all_provided	Invoke a callback for every key-exchange algorithm available from providers.
EVP_KEYEXCH_fetch	Fetch a key-exchange algorithm implementation from providers.
EVP_KEYEXCH_free	Free a fetched key-exchange algorithm object.
EVP_KEYEXCH_get0_description	Return a human-readable description of a key-exchange algorithm.
EVP_KEYEXCH_get0_name	Return the primary name of a fetched key-exchange algorithm.
EVP_KEYEXCH_get0_provider	Return the provider that implements a key-exchange algorithm.
EVP_KEYEXCH_gettable_ctx_params	Return the context parameters that can be read from a key-exchange algorithm.
EVP_KEYEXCH_is_a	Test whether a key-exchange implementation is known by name.
EVP_KEYEXCH_names_do_all	Invoke a callback for every name associated with a key-exchange algorithm.
EVP_KEYEXCH_settable_ctx_params	Return the OSSL_PARAM descriptors for parameters settable on a key-exchange context.
EVP_KEYEXCH_up_ref	Increment the reference count on a key-exchange algorithm object.
EVP_KEYMGMT_do_all_provided	Invoke fn for every KEYMGMT implementation available in libctx.
EVP_KEYMGMT_fetch	Fetch a key-management implementation from providers.
EVP_KEYMGMT_free	Release a reference to a key-management algorithm implementation.
EVP_KEYMGMT_gen_settable_params	Return the OSSL_PARAM descriptors for key-generation parameters settable on this keymgmt.
EVP_KEYMGMT_get0_description	Return a human-readable description of a keymgmt implementation.
EVP_KEYMGMT_get0_name	Return the algorithm name of a key management method.
EVP_KEYMGMT_get0_provider	Return the provider that implements a key management method.
EVP_KEYMGMT_gettable_params	Describe parameters that can be read from keys managed by a keymgmt.
EVP_KEYMGMT_is_a	Test whether a key-management implementation is known under the given name.
EVP_KEYMGMT_names_do_all	Invoke a callback for every name (including aliases) associated with a keymgmt.
EVP_KEYMGMT_settable_params	Return the OSSL_PARAM descriptors settable on an existing key via this keymgmt.
EVP_KEYMGMT_up_ref	Increment the reference count on a key management method.
EVP_MAC_CTX_dup	Duplicate a MAC context, including its current state.
EVP_MAC_CTX_free	Free a MAC context and its associated resources.
EVP_MAC_CTX_get0_mac	Return the EVP_MAC associated with a MAC context.
EVP_MAC_CTX_get_block_size	Return the MAC block size for the algorithm bound to ctx.
EVP_MAC_CTX_get_mac_size	Return the MAC output size for the algorithm bound to ctx.
EVP_MAC_CTX_get_params	Get parameters from a MAC context.
EVP_MAC_CTX_gettable_params	Return the OSSL_PARAM descriptors gettable from a live MAC context.
EVP_MAC_CTX_new	Allocate a new MAC operation context for mac.
EVP_MAC_CTX_set_params	Apply an OSSL_PARAM array of parameters to a MAC context.
EVP_MAC_CTX_settable_params	Return the OSSL_PARAM descriptors settable on a live MAC context.
EVP_MAC_do_all_provided	Invoke a callback for every MAC implementation available from activated providers.
EVP_MAC_fetch	Fetch a MAC algorithm implementation from providers.
EVP_MAC_final	Finish a MAC computation and write the authentication tag to a buffer.
EVP_MAC_finalXOF	Finalize an XOF-style MAC and write outsize bytes of output.
EVP_MAC_free	Release a reference to a fetched EVP_MAC.
EVP_MAC_get0_description	Return a human-readable description of a MAC algorithm.
EVP_MAC_get0_name	Return one algorithm name for a fetched MAC implementation.
EVP_MAC_get0_provider	Return the provider that implements a MAC algorithm.
EVP_MAC_get_params	Retrieve algorithm parameters from a fetched MAC implementation.
EVP_MAC_gettable_ctx_params	Return the OSSL_PARAM descriptors gettable from an EVP_MAC context.
EVP_MAC_gettable_params	Return the OSSL_PARAM descriptors gettable from a fetched EVP_MAC algorithm.
EVP_MAC_init	Initialize a MAC context with a key and optional algorithm parameters.
EVP_MAC_is_a	Test whether a MAC implementation matches an algorithm name.
EVP_MAC_names_do_all	Invoke a callback for every name (including aliases) associated with a MAC implementation.
EVP_MAC_settable_ctx_params	Describe OSSL_PARAM keys that may be set on MAC contexts for mac.
EVP_MAC_up_ref	Increment the reference count on a fetched EVP_MAC.
EVP_MAC_update	Feed more message bytes into a MAC computation.
EVP_MD_CTX_clear_flags	Clear flag bits on a digest context.
EVP_MD_CTX_copy	Copy a digest context into a freshly allocated destination (legacy helper).
EVP_MD_CTX_copy_ex	Copy digest context state from in into an already allocated out.
EVP_MD_CTX_ctrl	Send a legacy control request to a digest context.
EVP_MD_CTX_dup	Duplicate a digest context, including algorithm state and any associated key material.
EVP_MD_CTX_free	Free a digest context and release its resources.
EVP_MD_CTX_get0_md	Return the digest method currently associated with a digest context.
EVP_MD_CTX_get0_md_data	Return the digest method's private data pointer for a context.
EVP_MD_CTX_get1_md	Return the digest method associated with ctx, transferring a reference to the caller.
EVP_MD_CTX_get_params	Retrieve algorithm parameters from a digest context into params.
EVP_MD_CTX_get_pkey_ctx	Return the EVP_PKEY_CTX currently attached to a digest context.
EVP_MD_CTX_gettable_params	Describe OSSL_PARAM keys that can be retrieved from digest context ctx.
EVP_MD_CTX_md [deprecated]	Return the EVP_MD currently associated with a digest context (deprecated).
EVP_MD_CTX_new	Allocate a new digest context.
EVP_MD_CTX_reset	Reset ctx so it can be reused with EVP_DigestInit_ex() without freeing it.
EVP_MD_CTX_set_flags	Set flag bits on a digest context without clearing existing flags.
EVP_MD_CTX_set_params	Set algorithm parameters on a digest context via an OSSL_PARAM array.
EVP_MD_CTX_set_pkey_ctx	Attach or clear the EVP_PKEY_CTX owned by a digest context (for DigestSign/DigestVerify).
EVP_MD_CTX_set_update_fn [deprecated]	Override the update function used by a digest context (deprecated).
EVP_MD_CTX_settable_params	Return the OSSL_PARAM descriptors for parameters settable on a digest context.
EVP_MD_CTX_test_flags	Test whether the given flag bits are set on a digest context.
EVP_MD_CTX_update_fn [deprecated]	Return the digest update function currently used by a digest context (deprecated).
EVP_MD_do_all	Invoke a callback for every digest name in the legacy algorithm table.
EVP_MD_do_all_provided	Invoke a callback for every message digest provided in a library context.
EVP_MD_do_all_sorted	Call fn for each built-in digest name, in sorted name order (legacy).
EVP_MD_fetch	Fetch a digest implementation from providers.
EVP_MD_free	Free a fetched EVP_MD (decrement its reference count).
EVP_MD_get0_description	Return a human-readable description of a digest algorithm.
EVP_MD_get0_name	Return the primary algorithm name of a message digest.
EVP_MD_get0_provider	Return the provider that implements a message-digest algorithm.
EVP_MD_get_block_size	Return the internal block size of a message digest in bytes.
EVP_MD_get_flags	Return the flag bits associated with a digest method.
EVP_MD_get_params	Fetch gettable algorithm parameters from a message-digest method.
EVP_MD_get_pkey_type	Return the legacy public-key NID associated with a digest method.
EVP_MD_get_size	Return the output size of a message digest in bytes.
EVP_MD_get_type	Return the NID identifying a message-digest algorithm.
EVP_MD_gettable_ctx_params	Return the OSSL_PARAM descriptors gettable from an EVP_MD context.
EVP_MD_gettable_params	Describe the parameters that can be read from a message-digest method.
EVP_MD_is_a	Test whether a digest implementation is known by name (including aliases).
EVP_MD_meth_dup [deprecated]	Duplicate a custom EVP_MD method (deprecated).
EVP_MD_meth_free [deprecated]	Free a custom EVP_MD method created with EVP_MD_meth_new (deprecated).
EVP_MD_meth_get_app_datasize [deprecated]	Return the application-data size reserved by a custom EVP_MD method (deprecated).
EVP_MD_meth_get_cleanup [deprecated]	Return the cleanup callback from a custom EVP_MD method (deprecated).
EVP_MD_meth_get_copy [deprecated]	Return the context-copy callback from a custom EVP_MD method (deprecated).
EVP_MD_meth_get_ctrl [deprecated]	Return the ctrl callback installed on a custom EVP_MD method (deprecated).
EVP_MD_meth_get_final [deprecated]	Return the final callback from a custom EVP_MD method (deprecated).
EVP_MD_meth_get_flags [deprecated]	Return the flag bits configured on a custom EVP_MD method (deprecated).
EVP_MD_meth_get_init [deprecated]	Return the init callback from a custom EVP_MD method (deprecated).
EVP_MD_meth_get_input_blocksize [deprecated]	Return the input block size previously set on a custom EVP_MD method (deprecated).
EVP_MD_meth_get_result_size [deprecated]	Return the digest output size previously set on a custom EVP_MD method (deprecated).
EVP_MD_meth_get_update [deprecated]	Return the update callback previously set on a custom EVP_MD method (deprecated).
EVP_MD_meth_new [deprecated]	Allocate a mutable EVP_MD method object for custom digests (deprecated).
EVP_MD_meth_set_app_datasize [deprecated]	Set the private context data size for a custom EVP_MD method (deprecated).
EVP_MD_meth_set_cleanup [deprecated]	Set the cleanup callback on a custom EVP_MD method (deprecated).
EVP_MD_meth_set_copy [deprecated]	Set the context-copy callback on a custom EVP_MD method (deprecated).
EVP_MD_meth_set_ctrl [deprecated]	Set the ctrl callback on a custom EVP_MD method (deprecated).
EVP_MD_meth_set_final [deprecated]	Set the final callback on a custom EVP_MD method (deprecated).
EVP_MD_meth_set_flags [deprecated]	Set behaviour flags on a custom EVP_MD method (deprecated).
EVP_MD_meth_set_init [deprecated]	Set the init callback on a custom EVP_MD method (deprecated).
EVP_MD_meth_set_input_blocksize [deprecated]	Set the input block size advertised by a custom EVP_MD method (deprecated).
EVP_MD_meth_set_result_size [deprecated]	Set the digest output size on a custom EVP_MD method (deprecated).
EVP_MD_meth_set_update [deprecated]	Set the update callback on a custom EVP_MD method (deprecated).
EVP_MD_names_do_all	Invoke a callback for every known name alias of a message digest.
EVP_MD_settable_ctx_params	Return the OSSL_PARAM descriptors for parameters settable on an MD context.
EVP_MD_up_ref	Increment the reference count on a fetched EVP_MD.
EVP_OpenFinal	Finalize an open (envelope decrypt) operation and write any remaining plaintext.
EVP_OpenInit	Initialize envelope decryption: unwrap ek with priv and set up type.
EVP_PBE_CipherInit	Initialize a cipher context for password-based encryption from a PBE OID and parameters.
EVP_PBE_CipherInit_ex	Initialize a cipher context for password-based encryption using a library context.
EVP_PBE_alg_add	Register a password-based encryption algorithm by NID with cipher, digest, and keygen.
EVP_PBE_alg_add_type	Register a password-based encryption algorithm by type and NIDs.
EVP_PBE_cleanup	Free the global password-based encryption (PBE) algorithm registry.
EVP_PBE_find	Look up a registered password-based encryption (PBE) algorithm by NID.
EVP_PBE_find_ex	Look up a registered PBE algorithm, returning both classic and extended keygen callbacks.
EVP_PBE_get	Return the PBE algorithm type and NID at index num in the registry.
EVP_PBE_scrypt	Derive a key with scrypt from a password and salt.
EVP_PBE_scrypt_ex	Derive a key from a password using scrypt with an explicit library context.
EVP_PKCS82PKEY	Convert PKCS#8 private key info into an EVP_PKEY using the default library context.
EVP_PKCS82PKEY_ex	Convert PKCS#8 private key info into an EVP_PKEY using a library context.
EVP_PKEY2PKCS8	Convert an EVP_PKEY into a PKCS#8 PrivateKeyInfo structure.
EVP_PKEY_CTX_add1_hkdf_info	Append octets to the HKDF info/context parameter on a PKEY HKDF context.
EVP_PKEY_CTX_add1_tls1_prf_seed	Append seed bytes to the TLS1-PRF seed on a key context.
EVP_PKEY_CTX_ctrl	Send an algorithm-specific control command to a key context.
EVP_PKEY_CTX_ctrl_str	Send a named string control to a key context (for example "rsa_padding").
EVP_PKEY_CTX_ctrl_uint64	Send a control command with a uint64_t argument to a key context.
EVP_PKEY_CTX_dup	Duplicate a public-key algorithm context (not supported during keygen).
EVP_PKEY_CTX_free	Free an EVP_PKEY_CTX and release associated resources.
EVP_PKEY_CTX_get0_dh_kdf_oid	Return the X9.42 KDF OID currently configured on a DH key context.
EVP_PKEY_CTX_get0_dh_kdf_ukm [deprecated]	Borrow the DH KDF User Keying Material pointer and return its length (deprecated).
EVP_PKEY_CTX_get0_ecdh_kdf_ukm [deprecated]	Get a pointer to the ECDH KDF user keying material on a key context (deprecated).
EVP_PKEY_CTX_get0_libctx	Return the library context associated with a key algorithm context.
EVP_PKEY_CTX_get0_peerkey	Return the peer key previously set on a derive context.
EVP_PKEY_CTX_get0_pkey	Return the primary EVP_PKEY associated with a key context.
EVP_PKEY_CTX_get0_propq	Return the property query string associated with a key context.
EVP_PKEY_CTX_get0_provider	Return the provider that supplies the algorithm implementation used by ctx.
EVP_PKEY_CTX_get0_rsa_oaep_label	Return a non-owning pointer to the RSA-OAEP label configured on an EVP_PKEY_CTX.
EVP_PKEY_CTX_get1_id	Copy the algorithm-specific ID bytes from ctx into id.
EVP_PKEY_CTX_get1_id_len	Return the length of an algorithm-specific ID associated with a key context.
EVP_PKEY_CTX_get_app_data	Return the opaque application pointer previously stored on a key context.
EVP_PKEY_CTX_get_cb	Return the keygen progress callback currently installed on a key context.
EVP_PKEY_CTX_get_data	Return the application-private data pointer previously set on a key context.
EVP_PKEY_CTX_get_dh_kdf_md	Get the message digest used for DH key-derivation (KDF) on a key context.
EVP_PKEY_CTX_get_dh_kdf_outlen	Return the configured DH KDF output length in bytes.
EVP_PKEY_CTX_get_dh_kdf_type	Return the DH key-derivation function type configured on ctx.
EVP_PKEY_CTX_get_ecdh_cofactor_mode	Get the ECDH cofactor mode from a key context.
EVP_PKEY_CTX_get_ecdh_kdf_md	Get the message digest used for the ECDH X9.63 KDF on a key context.
EVP_PKEY_CTX_get_ecdh_kdf_outlen	Get the ECDH key-derivation output length from a key-exchange context.
EVP_PKEY_CTX_get_ecdh_kdf_type	Return the ECDH key-derivation function type configured on a key context.
EVP_PKEY_CTX_get_group_name	Copy the elliptic-curve or DH group name from a key context into a caller buffer.
EVP_PKEY_CTX_get_keygen_info	Return a key-generation progress info value previously published on ctx.
EVP_PKEY_CTX_get_operation	Return the operation type currently configured on a key context.
EVP_PKEY_CTX_get_params	Retrieve parameters from a key context into an OSSL_PARAM array.
EVP_PKEY_CTX_get_rsa_mgf1_md	Get the MGF1 digest configured for RSA-PSS or RSA-OAEP on a key context.
EVP_PKEY_CTX_get_rsa_mgf1_md_name	Get the MGF1 digest algorithm name from an RSA EVP_PKEY_CTX.
EVP_PKEY_CTX_get_rsa_oaep_md	Get the RSA-OAEP message-digest algorithm from an EVP_PKEY_CTX.
EVP_PKEY_CTX_get_rsa_oaep_md_name	Get the RSA-OAEP message-digest algorithm name from an EVP_PKEY_CTX.
EVP_PKEY_CTX_get_rsa_padding	Get the RSA padding mode configured on an EVP_PKEY_CTX.
EVP_PKEY_CTX_get_rsa_pss_saltlen	Get the RSA-PSS salt length configured on an EVP_PKEY_CTX.
EVP_PKEY_CTX_get_signature_md	Retrieve the message digest currently configured for signing or verifying with ctx.
EVP_PKEY_CTX_gettable_params	Return the OSSL_PARAM descriptors gettable from a key context.
EVP_PKEY_CTX_hex2ctrl	Decode a hex string to bytes and pass them to EVP_PKEY_CTX_ctrl as the p2 buffer.
EVP_PKEY_CTX_is_a	Test whether a key context is for the named key type.
EVP_PKEY_CTX_md	Set a digest algorithm on a key context by name for the given operation.
EVP_PKEY_CTX_new	Allocate a key context for operations with pkey.
EVP_PKEY_CTX_new_from_name	Allocate a key context for an algorithm fetched by name from providers.
EVP_PKEY_CTX_new_from_pkey	Allocate a key context for operations on an existing EVP_PKEY.
EVP_PKEY_CTX_new_id	Allocate a key context for algorithm id, optionally using an ENGINE.
EVP_PKEY_CTX_set0_dh_kdf_oid	Set the X9.42 KDF OID for DH key derivation, transferring ownership of oid.
EVP_PKEY_CTX_set0_dh_kdf_ukm	Set the DH KDF User Keying Material, transferring ownership of ukm.
EVP_PKEY_CTX_set0_ecdh_kdf_ukm	Set the ECDH KDF user keying material, transferring ownership of ukm.
EVP_PKEY_CTX_set0_keygen_info	Attach legacy keygen progress info used by some ENGINE implementations.
EVP_PKEY_CTX_set0_rsa_oaep_label	Set the RSA-OAEP label on an EVP_PKEY_CTX, transferring ownership of label.
EVP_PKEY_CTX_set1_hkdf_key	Set the HKDF input keying material (IKM) on a PKEY KDF context.
EVP_PKEY_CTX_set1_hkdf_salt	Set the HKDF salt, replacing any previously set salt.
EVP_PKEY_CTX_set1_id	Set an algorithm-specific identity value on a key operation context (copied).
EVP_PKEY_CTX_set1_pbe_pass	Set the password for a PBE-based EVP_PKEY_CTX derivation (PKCS#5 style).
EVP_PKEY_CTX_set1_rsa_keygen_pubexp	Set the RSA public exponent for key generation, copying pubexp.
EVP_PKEY_CTX_set1_scrypt_salt	Set the scrypt salt on a KDF key context (copies salt).
EVP_PKEY_CTX_set1_tls1_prf_secret	Set the TLS1-PRF secret on a key context (copies sec).
EVP_PKEY_CTX_set_app_data	Store an opaque application pointer on a key context.
EVP_PKEY_CTX_set_cb	Install a progress callback for key/parameter generation on a context.
EVP_PKEY_CTX_set_data	Attach implementation-private data to a key context.
EVP_PKEY_CTX_set_dh_kdf_md	Set the message digest used for DH key-derivation (KDF) on a key context.
EVP_PKEY_CTX_set_dh_kdf_outlen	Set the output length in bytes of the DH key-derivation function.
EVP_PKEY_CTX_set_dh_kdf_type	Set the DH key-derivation function type on an EVP_PKEY_CTX.
EVP_PKEY_CTX_set_dh_nid	Select named Diffie-Hellman parameters (RFC 7919 / RFC 3526) by NID.
EVP_PKEY_CTX_set_dh_pad	Enable or disable leading-zero padding of the DH shared secret to the prime length.
EVP_PKEY_CTX_set_dh_paramgen_generator	Set the DH parameter-generation generator (g) on ctx.
EVP_PKEY_CTX_set_dh_paramgen_gindex	Set the FIPS 186-4 gindex used when generating DH parameters.
EVP_PKEY_CTX_set_dh_paramgen_prime_len	Set the DH parameter-generation prime (p) length in bits.
EVP_PKEY_CTX_set_dh_paramgen_seed	Set a fixed seed for DH parameter generation (testing / reproducible params).
EVP_PKEY_CTX_set_dh_paramgen_subprime_len	Set the DH parameter-generation subprime (q) length in bits.
EVP_PKEY_CTX_set_dh_paramgen_type	Select the DH parameter-generation algorithm for a keygen/paramgen context.
EVP_PKEY_CTX_set_dh_rfc5114	Select RFC 5114 DH parameters (sections 2.1–2.3) on a DHX key context.
EVP_PKEY_CTX_set_dhx_rfc5114	Select an RFC 5114 DHX (X9.42 DH) named parameter set on a keygen/paramgen context.
EVP_PKEY_CTX_set_dsa_paramgen_bits	Set the DSA prime modulus length in bits for parameter generation.
EVP_PKEY_CTX_set_dsa_paramgen_gindex	Set the DSA parameter-generation gindex (FIPS 186 verifiable g seed index).
EVP_PKEY_CTX_set_dsa_paramgen_md	Set the digest used for DSA parameter generation on an EVP_PKEY_CTX.
EVP_PKEY_CTX_set_dsa_paramgen_md_props	Select the digest for DSA parameter generation by name and property query.
EVP_PKEY_CTX_set_dsa_paramgen_q_bits	Set the DSA subprime (q) length in bits for parameter generation.
EVP_PKEY_CTX_set_dsa_paramgen_seed	Supply the seed used when generating FIPS 186-style DSA parameters.
EVP_PKEY_CTX_set_dsa_paramgen_type	Set the DSA parameter-generation algorithm type by name.
EVP_PKEY_CTX_set_ec_param_enc	Select whether EC parameters are encoded as a named curve or explicitly.
EVP_PKEY_CTX_set_ec_paramgen_curve_nid	Set the named curve NID used when generating EC parameters or keys.
EVP_PKEY_CTX_set_ecdh_cofactor_mode	Set whether ECDH key agreement multiplies by the curve cofactor.
EVP_PKEY_CTX_set_ecdh_kdf_md	Set the message digest used for the ECDH X9.63 KDF on a key context.
EVP_PKEY_CTX_set_ecdh_kdf_outlen	Set the ECDH key-derivation output length for a key-exchange context.
EVP_PKEY_CTX_set_ecdh_kdf_type	Select the ECDH key-derivation function type on a key-exchange context.
EVP_PKEY_CTX_set_group_name	Set the elliptic-curve / DH group name on a key or parameter context.
EVP_PKEY_CTX_set_hkdf_md	Set the message digest used by the HKDF extract/expand stages.
EVP_PKEY_CTX_set_hkdf_mode	Select HKDF extract/expand mode on a key-derivation EVP_PKEY_CTX.
EVP_PKEY_CTX_set_kem_op	Select the KEM operation mode on a key context (for example "encapsulate").
EVP_PKEY_CTX_set_mac_key	Set the MAC key bytes on a keygen/paramgen EVP_PKEY_CTX (for example HMAC or Poly1305).
EVP_PKEY_CTX_set_params	Set parameters on a key context via an OSSL_PARAM array.
EVP_PKEY_CTX_set_rsa_keygen_bits	Set the RSA modulus size in bits for key generation on an EVP_PKEY_CTX.
EVP_PKEY_CTX_set_rsa_keygen_primes	Set how many primes to use when generating a multi-prime RSA key.
EVP_PKEY_CTX_set_rsa_keygen_pubexp [deprecated]	Set the RSA public exponent used when generating a key (deprecated).
EVP_PKEY_CTX_set_rsa_mgf1_md	Set the MGF1 digest used for RSA-PSS or RSA-OAEP on a key context.
EVP_PKEY_CTX_set_rsa_mgf1_md_name	Set the MGF1 digest for RSA-PSS or RSA-OAEP by algorithm name.
EVP_PKEY_CTX_set_rsa_oaep_md	Set the message digest used by RSA-OAEP padding on a key context.
EVP_PKEY_CTX_set_rsa_oaep_md_name	Set the OAEP message digest by name on an RSA key context.
EVP_PKEY_CTX_set_rsa_padding	Set the RSA padding mode on an EVP_PKEY_CTX.
EVP_PKEY_CTX_set_rsa_pss_keygen_md	Set the message digest used when generating an RSA-PSS key.
EVP_PKEY_CTX_set_rsa_pss_keygen_md_name	Set the message digest used when generating an RSA-PSS key via an EVP_PKEY_CTX.
EVP_PKEY_CTX_set_rsa_pss_keygen_mgf1_md	Set the MGF1 digest used when generating an RSA-PSS key.
EVP_PKEY_CTX_set_rsa_pss_keygen_mgf1_md_name	Set the MGF1 digest name used when generating an RSA-PSS key.
EVP_PKEY_CTX_set_rsa_pss_keygen_saltlen	Set the RSA-PSS salt length used when generating an RSA-PSS key.
EVP_PKEY_CTX_set_rsa_pss_saltlen	Set the RSA-PSS salt length for sign/verify on ctx.
EVP_PKEY_CTX_set_scrypt_N	Set the scrypt CPU/memory cost parameter N on a PKEY KDF context.
EVP_PKEY_CTX_set_scrypt_maxmem_bytes	Cap the memory scrypt may use during key derivation.
EVP_PKEY_CTX_set_scrypt_p	Set the scrypt parallelization parameter p on a PKEY KDF context.
EVP_PKEY_CTX_set_scrypt_r	Set the scrypt block-size parameter r on a PKEY KDF context.
EVP_PKEY_CTX_set_signature_md	Set the message digest used when signing or verifying with ctx.
EVP_PKEY_CTX_set_tls1_prf_md	Select the digest used by a TLS1-PRF EVP_PKEY_CTX.
EVP_PKEY_CTX_settable_params	Describe OSSL_PARAM keys that may be set on key context ctx.
EVP_PKEY_CTX_str2ctrl	Pass a NUL-terminated string to EVP_PKEY_CTX_ctrl as the p2 argument.
EVP_PKEY_Q_keygen	Quickly generate a key of algorithm type using varargs size/curve parameters.
EVP_PKEY_add1_attr	Append a copy of attr to an EVP_PKEY attribute list, creating the list if needed.
EVP_PKEY_add1_attr_by_NID	Append an attribute identified by NID to an EVP_PKEY's attribute set.
EVP_PKEY_add1_attr_by_OBJ	Append an attribute identified by OID to an EVP_PKEY's attribute set.
EVP_PKEY_add1_attr_by_txt	Append an X509_ATTRIBUTE named by attrname to an EVP_PKEY attribute list.
EVP_PKEY_asn1_add0	Register an EVP_PKEY_ASN1_METHOD in the global ASN.1 method table.
EVP_PKEY_asn1_add_alias	Alias ASN.1 method NID from so it is treated as NID to.
EVP_PKEY_asn1_copy	Copy an EVP_PKEY_ASN1_METHOD from src into dst (not thread-safe).
EVP_PKEY_asn1_find	Find the ASN.1 method implementing a public-key algorithm NID.
EVP_PKEY_asn1_find_str	Find an EVP_PKEY_ASN1_METHOD by PEM type string.
EVP_PKEY_asn1_free	Free an EVP_PKEY_ASN1_METHOD allocated with EVP_PKEY_asn1_new().
EVP_PKEY_asn1_get0	Return the registered EVP_PKEY_ASN1_METHOD at index idx.
EVP_PKEY_asn1_get0_info	Extract identifying metadata from an EVP_PKEY_ASN1_METHOD.
EVP_PKEY_asn1_get_count	Return the number of registered EVP_PKEY_ASN1_METHOD implementations.
EVP_PKEY_asn1_new	Allocate a new custom EVP_PKEY_ASN1_METHOD for algorithm id.
EVP_PKEY_asn1_set_check	Install the full-key consistency check callback on an ASN.1 method.
EVP_PKEY_asn1_set_ctrl	Set the control callback on an EVP_PKEY_ASN1_METHOD.
EVP_PKEY_asn1_set_free	Set the private-key free callback on a custom EVP_PKEY_ASN1_METHOD.
EVP_PKEY_asn1_set_get_priv_key	Install the raw private-key export callback on an EVP_PKEY_ASN1_METHOD.
EVP_PKEY_asn1_set_get_pub_key	Install a callback that exports the raw public key encoding from an EVP_PKEY.
EVP_PKEY_asn1_set_item	Install ASN.1 item sign and verify callbacks on an EVP_PKEY_ASN1_METHOD.
EVP_PKEY_asn1_set_param	Install parameter encode/decode, missing, copy, compare, and print callbacks on an ASN.1 method.
EVP_PKEY_asn1_set_param_check	Install a callback that validates algorithm parameters on an EVP_PKEY.
EVP_PKEY_asn1_set_private	Install PKCS#8 private-key decode, encode, and print callbacks on an ASN.1 method.
EVP_PKEY_asn1_set_public	Install public-key decode, encode, compare, print, size, and bits callbacks on an ASN.1 method.
EVP_PKEY_asn1_set_public_check	Install the public-key consistency check callback on an ASN.1 method.
EVP_PKEY_asn1_set_security_bits	Set the security-bits callback on a custom EVP_PKEY_ASN1_METHOD.
EVP_PKEY_asn1_set_set_priv_key	Install a callback that sets raw private-key octets on an EVP_PKEY.
EVP_PKEY_asn1_set_set_pub_key	Install a callback that sets raw public-key octets on an EVP_PKEY.
EVP_PKEY_asn1_set_siginf	Install the X509_SIG_INFO setup callback on an EVP_PKEY_ASN1_METHOD.
EVP_PKEY_assign [deprecated]	Assign a low-level key object of type to an EVP_PKEY (deprecated).
EVP_PKEY_auth_decapsulate_init	Initialize authenticated decapsulation on ctx using an authentication public key.
EVP_PKEY_auth_encapsulate_init	Initialize authenticated key encapsulation using a peer public key and auth private key.
EVP_PKEY_can_sign	Test whether a key type supports signing operations.
EVP_PKEY_check	Validate the key associated with a key context (public/private consistency checks).
EVP_PKEY_cmp [deprecated]	Compare two keys for equality including parameters when present (deprecated; use EVP_PKEY_eq).
EVP_PKEY_cmp_parameters [deprecated]	Compare the algorithm parameters of two keys (deprecated; use EVP_PKEY_parameters_eq).
EVP_PKEY_copy_parameters	Copy algorithm parameters from one EVP_PKEY into another of the same type.
EVP_PKEY_decapsulate	Decapsulate a shared secret from a KEM ciphertext using a context from EVP_PKEY_decapsulate_init().
EVP_PKEY_decapsulate_init	Initialise a key context for KEM decapsulation.
EVP_PKEY_decrypt	Decrypt data using the private key bound to ctx.
EVP_PKEY_decrypt_init	Initialise ctx for private-key decryption.
EVP_PKEY_decrypt_init_ex	Initialize ctx for decryption and apply optional algorithm parameters.
EVP_PKEY_decrypt_old [deprecated]	Decrypt a session key with a private key using the legacy EVP_PKEY path (deprecated).
EVP_PKEY_delete_attr	Remove and return an attribute from an EVP_PKEY by index.
EVP_PKEY_derive	Derive a shared secret using a context initialized with EVP_PKEY_derive_init().
EVP_PKEY_derive_init	Initialize a key context for shared-secret derivation (key exchange).
EVP_PKEY_derive_init_ex	Initialize ctx for key derivation and apply optional algorithm parameters.
EVP_PKEY_derive_set_peer	Set the peer public key used by EVP_PKEY_derive() on a derivation context.
EVP_PKEY_derive_set_peer_ex	Set the peer public key for derivation, optionally validating it first.
EVP_PKEY_digestsign_supports_digest	Query whether digest name can be used for DigestSign/Verify with pkey.
EVP_PKEY_dup	Duplicate an EVP_PKEY (not supported for ENGINE-based or raw keys).
EVP_PKEY_encapsulate	Perform key encapsulation: produce a wrapped key and a shared secret.
EVP_PKEY_encapsulate_init	Initialize a key context for a key-encapsulation (KEM) encapsulate operation.
EVP_PKEY_encrypt	Encrypt data with a public key using a context from EVP_PKEY_encrypt_init().
EVP_PKEY_encrypt_init	Initialise ctx for public-key encryption.
EVP_PKEY_encrypt_init_ex	Initialize a key context for public-key encryption with optional parameters.
EVP_PKEY_encrypt_old [deprecated]	Encrypt a session key with a public key using the legacy EVP_PKEY path (deprecated).
EVP_PKEY_eq	Compare two keys for equality of type, parameters, and key material.
EVP_PKEY_export	Export selected key parameters from an EVP_PKEY via a callback.
EVP_PKEY_free	Free an EVP_PKEY, decrementing its reference count.
EVP_PKEY_fromdata	Build an EVP_PKEY (or parameters) from an OSSL_PARAM array after fromdata_init.
EVP_PKEY_fromdata_init	Prepare a key context to import key material via EVP_PKEY_fromdata().
EVP_PKEY_fromdata_settable	Return the OSSL_PARAM descriptors accepted by EVP_PKEY_fromdata() for selection.
EVP_PKEY_generate	Generate parameters or a key pair into *ppkey (unified keygen/paramgen entry).
EVP_PKEY_get0 [deprecated]	Return the legacy low-level key pointer stored in an EVP_PKEY (deprecated).
EVP_PKEY_get0_DH [deprecated]	Return the DH key referenced by pkey without incrementing its reference count (deprecated).
EVP_PKEY_get0_DSA [deprecated]	Return the DSA key referenced by pkey without incrementing its reference count (deprecated).
EVP_PKEY_get0_EC_KEY [deprecated]	Return a borrowed pointer to the EC_KEY held by pkey (deprecated).
EVP_PKEY_get0_RSA [deprecated]	Return the legacy RSA handle inside pkey without incrementing its refcount (deprecated).
EVP_PKEY_get0_asn1	Return the EVP_PKEY_ASN1_METHOD associated with a key.
EVP_PKEY_get0_description	Return a human-readable description of the key type associated with an EVP_PKEY.
EVP_PKEY_get0_engine [deprecated]	Return the ENGINE associated with pkey, if any (deprecated).
EVP_PKEY_get0_hmac [deprecated]	Return a pointer to the HMAC key material inside an EVP_PKEY (deprecated).
EVP_PKEY_get0_poly1305 [deprecated]	Return a pointer to the Poly1305 key material inside an EVP_PKEY (deprecated).
EVP_PKEY_get0_provider	Return the provider that implements key, if provider-backed.
EVP_PKEY_get0_siphash [deprecated]	Return a pointer to the SipHash key material inside an EVP_PKEY (deprecated).
EVP_PKEY_get0_type_name	Return the algorithm type name of a key (for example "RSA" or "EC").
EVP_PKEY_get1_DH [deprecated]	Return a new reference to the DH key held by pkey (deprecated).
EVP_PKEY_get1_DSA [deprecated]	Return a new reference to the DSA key held by pkey (deprecated).
EVP_PKEY_get1_EC_KEY [deprecated]	Return a new reference to the EC_KEY held by pkey (deprecated).
EVP_PKEY_get1_RSA [deprecated]	Return a new reference to the RSA key held by pkey (deprecated).
EVP_PKEY_get1_encoded_public_key	Allocate and return the encoded public-key octet string for pkey.
EVP_PKEY_get_attr	Return an attribute attached to an EVP_PKEY by index.
EVP_PKEY_get_attr_by_NID	Find the next attribute on an EVP_PKEY whose type NID equals nid.
EVP_PKEY_get_attr_by_OBJ	Find the next attribute on an EVP_PKEY matching object identifier obj.
EVP_PKEY_get_attr_count	Return how many X509_ATTRIBUTE entries are attached to a key.
EVP_PKEY_get_base_id	Return the base EVP_PKEY type id for pkey (for example EVP_PKEY_RSA).
EVP_PKEY_get_bits	Return the cryptographic size of a key in bits (for example RSA modulus length).
EVP_PKEY_get_bn_param	Fetch a named BIGNUM parameter from an EVP_PKEY.
EVP_PKEY_get_default_digest_name	Write the default digest name recommended for signing with pkey.
EVP_PKEY_get_default_digest_nid	Return the default message-digest NID associated with pkey.
EVP_PKEY_get_ec_point_conv_form	Return the EC point conversion form stored on an elliptic-curve EVP_PKEY.
EVP_PKEY_get_ex_data	Retrieve application-specific data previously stored on an EVP_PKEY.
EVP_PKEY_get_field_type	Return the EC field type NID for an elliptic-curve EVP_PKEY.
EVP_PKEY_get_group_name	Copy the elliptic-curve or DH group name from a key into a caller buffer.
EVP_PKEY_get_id	Return the numeric type identifier of a public-key object.
EVP_PKEY_get_int_param	Read an integer parameter from a key by OSSL_PKEY_PARAM name.
EVP_PKEY_get_octet_string_param	Read an octet-string parameter from a key by OSSL_PKEY_PARAM name.
EVP_PKEY_get_params	Retrieve key parameters from pkey into the caller-supplied OSSL_PARAM array.
EVP_PKEY_get_raw_private_key	Export the raw private key bytes of pkey into priv.
EVP_PKEY_get_raw_public_key	Export the raw public key bytes of pkey into pub.
EVP_PKEY_get_security_bits	Return the estimated security strength of a key in bits.
EVP_PKEY_get_size	Return the maximum signature or related output size for a key in bytes.
EVP_PKEY_get_size_t_param	Fetch a named size_t parameter from an EVP_PKEY.
EVP_PKEY_get_utf8_string_param	Read a UTF-8 string parameter from a key by OSSL_PKEY_PARAM name.
EVP_PKEY_gettable_params	Return the OSSL_PARAM descriptors for parameters retrievable from pkey.
EVP_PKEY_is_a	Test whether a public-key object is known under the given algorithm name.
EVP_PKEY_keygen	Generate a key pair into *ppkey using an initialised keygen context.
EVP_PKEY_keygen_init	Initialise a key context for key-pair generation.
EVP_PKEY_meth_add0 [deprecated]	Register an application-defined EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_copy [deprecated]	Copy all callbacks and flags from one EVP_PKEY_METHOD to another (deprecated).
EVP_PKEY_meth_find [deprecated]	Find a registered EVP_PKEY_METHOD by key type NID (deprecated).
EVP_PKEY_meth_free [deprecated]	Free an application-defined EVP_PKEY_METHOD allocated with EVP_PKEY_meth_new (deprecated).
EVP_PKEY_meth_get0 [deprecated]	Return the registered EVP_PKEY_METHOD at index idx (deprecated).
EVP_PKEY_meth_get0_info [deprecated]	Read the algorithm id and flags from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_check [deprecated]	Retrieve the full key-check callback from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_cleanup [deprecated]	Retrieve the context-cleanup callback from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_copy [deprecated]	Retrieve the context-copy callback from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_count [deprecated]	Return the number of registered EVP_PKEY_METHOD implementations (deprecated).
EVP_PKEY_meth_get_ctrl [deprecated]	Retrieve the ctrl / ctrl_str callbacks from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_decrypt [deprecated]	Return the decrypt_init and decrypt callbacks from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_derive [deprecated]	Retrieve derive_init / derive callbacks from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_digest_custom [deprecated]	Retrieve the custom digest callback from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_digestsign [deprecated]	Retrieve the one-shot digestsign callback from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_digestverify [deprecated]	Retrieve the one-shot digestverify callback from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_encrypt [deprecated]	Retrieve public-key encryption callbacks from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_init [deprecated]	Retrieve the init callback from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_keygen [deprecated]	Retrieve key-generation callbacks from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_param_check [deprecated]	Retrieve the parameter-check callback from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_paramgen [deprecated]	Retrieve parameter-generation callbacks from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_public_check [deprecated]	Retrieve the public-key check callback from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_sign [deprecated]	Retrieve the sign_init and sign callbacks from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_signctx [deprecated]	Retrieve digest-context signing callbacks from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_verify [deprecated]	Retrieve the verify-init and verify callbacks from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_verify_recover [deprecated]	Retrieve the verify-recover callbacks from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_get_verifyctx [deprecated]	Retrieve digest-context verification callbacks from an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_new [deprecated]	Allocate a new custom EVP_PKEY_METHOD for algorithm id (deprecated).
EVP_PKEY_meth_remove [deprecated]	Unregister a previously added EVP_PKEY_METHOD from the global list (deprecated).
EVP_PKEY_meth_set_check [deprecated]	Set the pairwise key-consistency check callback on a custom EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_cleanup [deprecated]	Set the context-cleanup callback on a custom EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_copy [deprecated]	Set the context-copy callback on a custom EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_ctrl [deprecated]	Set the ctrl / ctrl_str callbacks on an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_decrypt [deprecated]	Set public-key decryption callbacks on an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_derive [deprecated]	Install key-derivation init/derive callbacks on a legacy EVP_PKEY_METHOD.
EVP_PKEY_meth_set_digest_custom [deprecated]	Set the digest_custom callback on a custom EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_digestsign [deprecated]	Set the one-shot DigestSign callback on an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_digestverify [deprecated]	Set the one-shot DigestVerify callback on an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_encrypt [deprecated]	Set public-key encryption callbacks on an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_init [deprecated]	Set the context-init callback on a custom EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_keygen [deprecated]	Set key-generation callbacks on an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_param_check [deprecated]	Set the domain-parameter validation callback on an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_paramgen [deprecated]	Set parameter-generation callbacks on an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_public_check [deprecated]	Set the public-component check callback on a custom EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_sign [deprecated]	Set the signing callbacks on a custom EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_signctx [deprecated]	Set digest-context signing callbacks on an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_verify [deprecated]	Set the signature-verification callbacks on a custom EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_verify_recover [deprecated]	Set verify-recover init/operation callbacks on a custom EVP_PKEY_METHOD (deprecated).
EVP_PKEY_meth_set_verifyctx [deprecated]	Set digest-context verification callbacks on an EVP_PKEY_METHOD (deprecated).
EVP_PKEY_missing_parameters	Test whether an EVP_PKEY lacks required algorithm parameters.
EVP_PKEY_new	Allocate an empty EVP_PKEY object.
EVP_PKEY_new_CMAC_key [deprecated]	Create an EVP_PKEY wrapping a CMAC key (deprecated).
EVP_PKEY_new_mac_key	Create an EVP_PKEY holding a MAC key for HMAC, CMAC, Poly1305, or SipHash.
EVP_PKEY_new_raw_private_key	Create an EVP_PKEY from raw private-key octets (legacy NID/ENGINE form).
EVP_PKEY_new_raw_private_key_ex	Create an EVP_PKEY from raw private-key octets using a named algorithm and library context.
EVP_PKEY_new_raw_public_key	Create an EVP_PKEY from raw public key octets for algorithms that support that form.
EVP_PKEY_new_raw_public_key_ex	Create an EVP_PKEY from raw public-key octets using a named algorithm and library context.
EVP_PKEY_pairwise_check	Validate that the public and private components of a key form a consistent pair.
EVP_PKEY_param_check	Validate domain parameters associated with a key context.
EVP_PKEY_param_check_quick	Perform a fast/lightweight validation of domain parameters on a key context.
EVP_PKEY_parameters_eq	Compare the domain parameters of two keys for equality.
EVP_PKEY_paramgen	Generate algorithm parameters into *ppkey using an initialised paramgen context.
EVP_PKEY_paramgen_init	Initialise a key context for algorithm parameter generation.
EVP_PKEY_print_params	Print a key's domain parameters to a BIO in human-readable form.
EVP_PKEY_print_params_fp	Print the algorithm parameters of pkey to a FILE in human-readable form.
EVP_PKEY_print_private	Print a private key (including private components) to a BIO.
EVP_PKEY_print_private_fp	Print the private components of pkey to a FILE in human-readable form.
EVP_PKEY_print_public	Print the public components of pkey to a BIO in human-readable form.
EVP_PKEY_print_public_fp	Print the public components of pkey to a FILE.
EVP_PKEY_private_check	Validate the private key associated with a key context.
EVP_PKEY_public_check	Validate the public key associated with a key context.
EVP_PKEY_public_check_quick	Perform a fast (non-exhaustive) public-key validity check.
EVP_PKEY_save_parameters	Control whether algorithm parameters are written when serializing pkey.
EVP_PKEY_set1_DH [deprecated]	Set the DH key referenced by an EVP_PKEY, incrementing the DH reference count.
EVP_PKEY_set1_DSA [deprecated]	Set the DSA key referenced by an EVP_PKEY, incrementing the DSA reference count.
EVP_PKEY_set1_EC_KEY [deprecated]	Assign an EC_KEY to an EVP_PKEY, incrementing the EC_KEY reference count (deprecated).
EVP_PKEY_set1_RSA [deprecated]	Set the RSA key referenced by an EVP_PKEY, incrementing the RSA reference count (deprecated).
EVP_PKEY_set1_encoded_public_key	Set the public key on pkey from an encoded public-key octet string.
EVP_PKEY_set1_engine [deprecated]	Associate an ENGINE with an EVP_PKEY for subsequent low-level operations (deprecated).
EVP_PKEY_set_bn_param	Set a named BIGNUM parameter on an EVP_PKEY.
EVP_PKEY_set_ex_data	Store application-specific data on an EVP_PKEY at a CRYPTO ex_data index.
EVP_PKEY_set_int_param	Set a named integer parameter on an EVP_PKEY.
EVP_PKEY_set_octet_string_param	Set a named octet-string parameter on an EVP_PKEY.
EVP_PKEY_set_params	Set multiple algorithm parameters on an EVP_PKEY from an OSSL_PARAM array.
EVP_PKEY_set_size_t_param	Set a named size_t parameter on an EVP_PKEY.
EVP_PKEY_set_type	Assign the algorithm type of an empty EVP_PKEY by NID / EVP_PKEY_* id.
EVP_PKEY_set_type_by_keymgmt	Assign the algorithm type of pkey from a fetched EVP_KEYMGMT.
EVP_PKEY_set_type_str	Assign the algorithm type of pkey from an algorithm name string.
EVP_PKEY_set_utf8_string_param	Set a UTF-8 string algorithm parameter on an EVP_PKEY by name.
EVP_PKEY_settable_params	Return the parameters that may be set on an EVP_PKEY.
EVP_PKEY_sign	Create a signature over data using an initialized signing context.
EVP_PKEY_sign_init	Initialize a key context for signing with the key bound to ctx.
EVP_PKEY_sign_init_ex	Initialize ctx for signing and apply optional algorithm parameters.
EVP_PKEY_todata	Export selected key components from an EVP_PKEY as a newly allocated OSSL_PARAM array.
EVP_PKEY_type	Map a public-key type NID to its base algorithm type NID.
EVP_PKEY_type_names_do_all	Invoke fn for every algorithm name associated with pkey's type.
EVP_PKEY_up_ref	Increment the reference count of an EVP_PKEY.
EVP_PKEY_verify	Verify a signature over tbs using an initialised key context.
EVP_PKEY_verify_init	Initialise a key context for signature verification with the key bound to ctx.
EVP_PKEY_verify_init_ex	Initialise ctx for signature verification with optional parameters.
EVP_PKEY_verify_recover	Recover the signed data from a signature (algorithms that support recovery, e.g. RSA).
EVP_PKEY_verify_recover_init	Initialize a key context for signature recovery (typically RSA).
EVP_PKEY_verify_recover_init_ex	Initialize ctx for signature recovery and apply algorithm parameters.
EVP_Q_digest	One-shot digest of data using a fetched algorithm name.
EVP_Q_mac	One-shot MAC computation: fetch the algorithm, process data, and write the tag.
EVP_RAND_CTX_free	Free an EVP_RAND_CTX and release associated resources.
EVP_RAND_CTX_get0_rand	Return the EVP_RAND algorithm associated with RAND context ctx.
EVP_RAND_CTX_get_params	Retrieve algorithm parameters from a RAND context into params.
EVP_RAND_CTX_gettable_params	Return the OSSL_PARAM descriptors gettable from a live RAND context.
EVP_RAND_CTX_new	Create a RAND context for rand, optionally chaining from a parent DRBG.
EVP_RAND_CTX_set_params	Set parameters on a RAND context via an OSSL_PARAM array.
EVP_RAND_CTX_settable_params	Return the parameters that may be set on a RAND context.
EVP_RAND_CTX_up_ref	Increment the reference count on an EVP_RAND_CTX.
EVP_RAND_do_all_provided	Invoke a callback for every RAND implementation available from activated providers.
EVP_RAND_enable_locking	Enable thread-safe locking on a RAND context for concurrent use.
EVP_RAND_fetch	Fetch a random-number generator implementation from providers.
EVP_RAND_free	Release a reference to an EVP_RAND obtained from EVP_RAND_fetch.
EVP_RAND_generate	Generate random bytes from a RAND context.
EVP_RAND_get0_description	Return a human-readable description of a random-number algorithm.
EVP_RAND_get0_name	Return the primary algorithm name of a fetched EVP_RAND.
EVP_RAND_get0_provider	Return the provider that supplied a RAND implementation.
EVP_RAND_get_params	Retrieve algorithm-level parameters from a RAND implementation.
EVP_RAND_get_state	Return the current lifecycle state of a RAND context.
EVP_RAND_get_strength	Return the current security strength in bits of a RAND context.
EVP_RAND_gettable_ctx_params	Return the OSSL_PARAM descriptors for parameters gettable on a RAND context.
EVP_RAND_gettable_params	Return the OSSL_PARAM descriptors that can be retrieved from an EVP_RAND algorithm.
EVP_RAND_instantiate	Instantiate (seed) an EVP_RAND_CTX so it can generate random bytes.
EVP_RAND_is_a	Test whether a RAND implementation is known under the given name.
EVP_RAND_names_do_all	Call fn for each synonymous name of a random-number algorithm implementation.
EVP_RAND_nonce	Generate a nonce of outlen bytes from RAND context ctx.
EVP_RAND_reseed	Reseed a DRBG/RAND context with optional entropy and additional input.
EVP_RAND_settable_ctx_params	Return the OSSL_PARAM descriptors for parameters settable on a RAND context.
EVP_RAND_uninstantiate	Clear the instantiated state of a RAND context, returning it to uninitialised.
EVP_RAND_up_ref	Increment the reference count on a fetched EVP_RAND.
EVP_RAND_verify_zeroization	Confirm whether the internal DRBG state of ctx is currently zeroed.
EVP_SIGNATURE_do_all_provided	Call fn for every signature algorithm implementation available from providers.
EVP_SIGNATURE_fetch	Fetch a signature algorithm implementation from providers.
EVP_SIGNATURE_free	Free a fetched EVP_SIGNATURE method and release its provider reference.
EVP_SIGNATURE_get0_description	Return a human-readable description of a signature algorithm implementation.
EVP_SIGNATURE_get0_name	Return the primary algorithm name of a signature implementation.
EVP_SIGNATURE_get0_provider	Return the provider that implements a fetched EVP_SIGNATURE algorithm.
EVP_SIGNATURE_gettable_ctx_params	Return the OSSL_PARAM descriptors gettable on a signature context for sig.
EVP_SIGNATURE_is_a	Test whether a signature algorithm implementation matches a name.
EVP_SIGNATURE_names_do_all	Call fn for every name (including aliases) associated with a signature algorithm.
EVP_SIGNATURE_settable_ctx_params	Return the OSSL_PARAM descriptors settable on a signature context for sig.
EVP_SIGNATURE_up_ref	Increment the reference count on a fetched EVP_SIGNATURE algorithm.
EVP_SealFinal	Finalize a seal (envelope encrypt) operation and write any remaining ciphertext.
EVP_SealInit	Initialize a seal (envelope encrypt) operation for npubk recipients.
EVP_SignFinal	Finish a legacy Sign operation and write the signature using pkey.
EVP_SignFinal_ex	Finish a legacy Sign operation with an explicit library context and property query.
EVP_VerifyFinal	Finish a verify operation by checking sigbuf against the digested data.
EVP_VerifyFinal_ex	Verify a signature against the digest accumulated in ctx using pkey.
EVP_add_alg_module	Register built-in algorithm modules with the EVP subsystem.
EVP_add_cipher	Register cipher in the legacy EVP cipher name table.
EVP_add_digest	Register digest in the legacy EVP digest name table.
EVP_aes_128_cbc	Return the EVP_CIPHER for AES-128 in CBC mode.
EVP_aes_128_cbc_hmac_sha1	Return the EVP_CIPHER for AES-128-CBC with HMAC-SHA1 (TLS AEAD).
EVP_aes_128_cbc_hmac_sha256	Return the EVP_CIPHER for AES-128-CBC with HMAC-SHA256 (TLS AEAD).
EVP_aes_128_ccm	Return the AES-128 cipher in CCM mode.
EVP_aes_128_cfb1	Return the EVP_CIPHER for AES-128 in 1-bit CFB mode.
EVP_aes_128_cfb128	Return the EVP_CIPHER for AES-128 in 128-bit CFB mode.
EVP_aes_128_cfb8	Return the EVP_CIPHER for AES-128 in 8-bit CFB mode.
EVP_aes_128_ctr	Return the AES-128 cipher in CTR mode.
EVP_aes_128_ecb	Return the AES-128 cipher in ECB mode.
EVP_aes_128_gcm	Return the EVP_CIPHER for AES-128 in GCM mode.
EVP_aes_128_ocb	Return the AES-128 cipher in OCB mode.
EVP_aes_128_ofb	Return the EVP_CIPHER for AES-128 in OFB mode.
EVP_aes_128_wrap	Return the EVP_CIPHER for AES-128 key wrap (RFC 3394).
EVP_aes_128_wrap_pad	Return the AES-128 cipher in key-wrap-with-padding mode (RFC 5649).
EVP_aes_128_xts	Return the EVP_CIPHER for AES-128 in XTS mode.
EVP_aes_192_cbc	Return the AES-192 cipher in CBC mode.
EVP_aes_192_ccm	Return the EVP_CIPHER for AES-192 in CCM mode.
EVP_aes_192_cfb1	Return the AES-192 cipher in 1-bit CFB mode.
EVP_aes_192_cfb128	Return the EVP_CIPHER for AES-192 in 128-bit CFB mode.
EVP_aes_192_cfb8	Return the AES-192 cipher in 8-bit CFB mode.
EVP_aes_192_ctr	Return the AES-192 cipher in CTR mode.
EVP_aes_192_ecb	Return the EVP_CIPHER for AES-192 in ECB mode.
EVP_aes_192_gcm	Return the AES-192 cipher in GCM mode.
EVP_aes_192_ocb	Return the built-in AES-192 OCB authenticated-encryption cipher method.
EVP_aes_192_ofb	Return the EVP_CIPHER for AES-192 in OFB mode.
EVP_aes_192_wrap	Return the AES-192 cipher in key-wrap mode (RFC 3394).
EVP_aes_192_wrap_pad	Return the AES-192 cipher in key-wrap-with-padding mode (RFC 5649).
EVP_aes_256_cbc	Return the EVP_CIPHER for AES-256 in CBC mode.
EVP_aes_256_cbc_hmac_sha1	Return the EVP_CIPHER for AES-256-CBC with HMAC-SHA1 (TLS AEAD).
EVP_aes_256_cbc_hmac_sha256	Return the EVP_CIPHER for AES-256-CBC with HMAC-SHA256 (TLS AEAD).
EVP_aes_256_ccm	Return the EVP_CIPHER for AES-256 in CCM mode.
EVP_aes_256_cfb1	Return the AES-256 cipher in 1-bit CFB mode.
EVP_aes_256_cfb128	Return the AES-256 cipher in 128-bit CFB mode.
EVP_aes_256_cfb8	Return the AES-256 cipher in 8-bit CFB mode.
EVP_aes_256_ctr	Return the AES-256 cipher in CTR mode.
EVP_aes_256_ecb	Return the EVP_CIPHER for AES-256 in ECB mode.
EVP_aes_256_gcm	Return the EVP_CIPHER for AES-256 in GCM mode.
EVP_aes_256_ocb	Return the EVP_CIPHER for AES-256 in OCB mode.
EVP_aes_256_ofb	Return the EVP_CIPHER for AES-256 in OFB mode.
EVP_aes_256_wrap	Return the EVP_CIPHER for AES-256 key wrap (RFC 3394).
EVP_aes_256_wrap_pad	Return the EVP_CIPHER for AES-256 key wrap with padding (RFC 5649).
EVP_aes_256_xts	Return the EVP_CIPHER for AES-256 in XTS mode (IEEE 1619 / NIST SP 800-38E).
EVP_aria_128_cbc	Return the built-in ARIA-128 CBC cipher method.
EVP_aria_128_ccm	Return the EVP_CIPHER for ARIA-128 in CCM mode.
EVP_aria_128_cfb1	Return the EVP_CIPHER for ARIA-128 in 1-bit CFB mode.
EVP_aria_128_cfb128	Return the ARIA-128 cipher in 128-bit CFB mode.
EVP_aria_128_cfb8	Return the ARIA-128 cipher in 8-bit CFB mode.
EVP_aria_128_ctr	Return the EVP_CIPHER for ARIA-128 in CTR mode.
EVP_aria_128_ecb	Return the ARIA-128 cipher in ECB mode.
EVP_aria_128_gcm	Return the ARIA-128 cipher in GCM mode.
EVP_aria_128_ofb	Return the ARIA-128 cipher in OFB mode.
EVP_aria_192_cbc	Return the EVP_CIPHER for ARIA-192 in CBC mode.
EVP_aria_192_ccm	Return the EVP_CIPHER for ARIA-192 in CCM mode.
EVP_aria_192_cfb1	Return the ARIA-192 cipher in 1-bit CFB mode.
EVP_aria_192_cfb128	Return the ARIA-192 cipher in 128-bit CFB mode.
EVP_aria_192_cfb8	Return the ARIA-192 cipher in 8-bit CFB mode.
EVP_aria_192_ctr	Return the ARIA-192 cipher in CTR mode.
EVP_aria_192_ecb	Return the EVP_CIPHER for ARIA-192 in ECB mode.
EVP_aria_192_gcm	Return the EVP_CIPHER for ARIA-192 in GCM mode.
EVP_aria_192_ofb	Return the EVP_CIPHER for ARIA-192 in OFB mode.
EVP_aria_256_cbc	Return the EVP_CIPHER for ARIA-256 in CBC mode.
EVP_aria_256_ccm	Return the ARIA-256 cipher in CCM mode.
EVP_aria_256_cfb1	Return the ARIA-256 cipher in 1-bit CFB mode.
EVP_aria_256_cfb128	Return the EVP_CIPHER for ARIA-256 in 128-bit CFB mode.
EVP_aria_256_cfb8	Return the ARIA-256 cipher in 8-bit CFB mode.
EVP_aria_256_ctr	Return the ARIA-256 cipher in CTR mode.
EVP_aria_256_ecb	Return the ARIA-256 cipher in ECB mode.
EVP_aria_256_gcm	Return the EVP_CIPHER for ARIA-256 in GCM mode.
EVP_aria_256_ofb	Return the EVP_CIPHER for ARIA-256 in OFB mode.
EVP_bf_cbc	Return the Blowfish cipher in CBC mode.
EVP_bf_cfb64	Return the EVP_CIPHER for Blowfish in 64-bit CFB mode.
EVP_bf_ecb	Return the Blowfish cipher in ECB mode.
EVP_bf_ofb	Return the Blowfish cipher in OFB mode.
EVP_blake2b512	Return the EVP_MD for BLAKE2b-512.
EVP_blake2s256	Return the EVP_MD for BLAKE2s-256.
EVP_camellia_128_cbc	Return the Camellia-128 cipher in CBC mode.
EVP_camellia_128_cfb1	Return the Camellia-128 cipher in 1-bit CFB mode.
EVP_camellia_128_cfb128	Return the EVP_CIPHER for Camellia-128 in 128-bit CFB mode.
EVP_camellia_128_cfb8	Return the Camellia-128 cipher in 8-bit CFB mode.
EVP_camellia_128_ctr	Return the Camellia-128 cipher in CTR mode.
EVP_camellia_128_ecb	Return the EVP_CIPHER for Camellia-128 in ECB mode.
EVP_camellia_128_ofb	Return the Camellia-128 cipher in OFB mode.
EVP_camellia_192_cbc	Return the Camellia-192 cipher in CBC mode.
EVP_camellia_192_cfb1	Return the Camellia-192 cipher in 1-bit CFB mode.
EVP_camellia_192_cfb128	Return the EVP_CIPHER for Camellia-192 in 128-bit CFB mode.
EVP_camellia_192_cfb8	Return the EVP_CIPHER for Camellia-192 in 8-bit CFB mode.
EVP_camellia_192_ctr	Return the EVP_CIPHER for Camellia-192 in CTR mode.
EVP_camellia_192_ecb	Return the EVP_CIPHER for Camellia-192 in ECB mode.
EVP_camellia_192_ofb	Return the Camellia-192 cipher in OFB mode.
EVP_camellia_256_cbc	Return the Camellia-256 cipher in CBC mode.
EVP_camellia_256_cfb1	Return the Camellia-256 cipher in 1-bit CFB mode.
EVP_camellia_256_cfb128	Return the Camellia-256 cipher in 128-bit CFB mode.
EVP_camellia_256_cfb8	Return the Camellia-256 cipher in 8-bit CFB mode.
EVP_camellia_256_ctr	Return the EVP_CIPHER for Camellia-256 in CTR mode.
EVP_camellia_256_ecb	Return the Camellia-256 cipher in ECB mode.
EVP_camellia_256_ofb	Return the Camellia-256 cipher in OFB mode.
EVP_cast5_cbc	Return the CAST5 cipher in CBC mode.
EVP_cast5_cfb64	Return the EVP_CIPHER for CAST5 in 64-bit CFB mode.
EVP_cast5_ecb	Return the EVP_CIPHER for CAST5 in ECB mode.
EVP_cast5_ofb	Return the CAST5 cipher in OFB mode.
EVP_chacha20	Return the ChaCha20 stream cipher.
EVP_chacha20_poly1305	Return the EVP_CIPHER for ChaCha20-Poly1305 AEAD.
EVP_default_properties_enable_fips	Enable or disable the FIPS constraint in a library context's default properties.
EVP_default_properties_is_fips_enabled	Query whether the library context's default property query requires FIPS algorithms.
EVP_des_cbc	Return the EVP_CIPHER for DES in CBC mode.
EVP_des_cfb1	Return the EVP_CIPHER for DES in 1-bit CFB mode.
EVP_des_cfb64	Return the EVP_CIPHER for DES in 64-bit CFB mode.
EVP_des_cfb8	Return the single-DES cipher in 8-bit CFB mode.
EVP_des_ecb	Return the EVP_CIPHER for DES in ECB mode.
EVP_des_ede	Return the EVP_CIPHER for two-key triple-DES in CBC mode (alias of EVP_des_ede_cbc).
EVP_des_ede3	Return the EVP_CIPHER for triple-DES EDE with three keys in ECB mode.
EVP_des_ede3_cbc	Return the built-in Triple-DES (EDE3) CBC cipher method.
EVP_des_ede3_cfb1	Return the EVP_CIPHER for three-key triple-DES in 1-bit CFB mode.
EVP_des_ede3_cfb64	Return the EVP_CIPHER for triple-DES EDE in 64-bit CFB mode.
EVP_des_ede3_cfb8	Return the EVP_CIPHER for three-key triple-DES in 8-bit CFB mode.
EVP_des_ede3_ecb	Return the EVP_CIPHER for three-key triple-DES in ECB mode.
EVP_des_ede3_ofb	Return the EVP_CIPHER for three-key triple-DES in OFB mode.
EVP_des_ede3_wrap	Return the Triple-DES key-wrap cipher (RFC 3217).
EVP_des_ede_cbc	Return the EVP_CIPHER for two-key triple-DES in CBC mode.
EVP_des_ede_cfb64	Return the two-key triple-DES cipher in 64-bit CFB mode.
EVP_des_ede_ecb	Return the EVP_CIPHER for two-key triple-DES in ECB mode.
EVP_des_ede_ofb	Return the two-key triple-DES cipher in OFB mode.
EVP_des_ofb	Return the single-DES cipher in OFB mode.
EVP_desx_cbc	Return the DES-X cipher in CBC mode.
EVP_enc_null	Return the EVP_CIPHER for the null (pass-through) cipher.
EVP_get_cipherbyname	Look up a cipher algorithm by name (for example "AES-256-GCM").
EVP_get_digestbyname	Look up a message digest algorithm by name (e.g. "SHA256").
EVP_get_pw_prompt	Return the process-wide default password prompt string.
EVP_idea_cbc	Return the EVP_CIPHER for IDEA in CBC mode.
EVP_idea_cfb64	Return the EVP_CIPHER for IDEA in 64-bit CFB mode.
EVP_idea_ecb	Return the EVP_CIPHER for IDEA in ECB mode.
EVP_idea_ofb	Return the EVP_CIPHER for IDEA in OFB mode.
EVP_md4	Return the MD4 digest method (128-bit output; legacy provider).
EVP_md5	Return the MD5 digest method (128-bit output).
EVP_md5_sha1	Return the EVP_MD for the combined MD5-SHA-1 digest used by TLS 1.0/1.1.
EVP_md_null	Return the null digest method (zero-length digest, for testing/legacy use).
EVP_mdc2	Return the EVP_MD for MDC2.
EVP_rc2_40_cbc	Return the RC2 cipher in CBC mode with a 40-bit effective key.
EVP_rc2_64_cbc	Return the EVP_CIPHER for RC2-64 in CBC mode.
EVP_rc2_cbc	Return the RC2 cipher in CBC mode.
EVP_rc2_cfb64	Return the RC2 cipher in 64-bit CFB mode.
EVP_rc2_ecb	Return the EVP_CIPHER for RC2 in ECB mode.
EVP_rc2_ofb	Return the EVP_CIPHER for RC2 in OFB mode.
EVP_rc4	Return the RC4 stream cipher.
EVP_rc4_40	Return the EVP_CIPHER for RC4 with a 40-bit effective key (legacy).
EVP_rc4_hmac_md5	Return the EVP_CIPHER for the RC4-HMAC-MD5 AEAD suite (TLS legacy).
EVP_read_pw_string	Prompt on the terminal for a password into buf.
EVP_read_pw_string_min	Prompt for a password with a minimum and maximum length.
EVP_ripemd160	Return the EVP_MD for RIPEMD-160.
EVP_seed_cbc	Return the SEED cipher in CBC mode.
EVP_seed_cfb128	Return the EVP_CIPHER for SEED in 128-bit CFB mode.
EVP_seed_ecb	Return the SEED cipher in ECB mode.
EVP_seed_ofb	Return the SEED cipher in OFB mode.
EVP_set_default_properties	Set the default property query string used for algorithm fetches in libctx.
EVP_set_pw_prompt	Set the default password prompt string used by EVP password helpers.
EVP_sha1	Return the SHA-1 digest method (160-bit output).
EVP_sha224	Return the SHA-224 digest method (224-bit output).
EVP_sha256	Return the SHA-256 digest method (256-bit output).
EVP_sha384	Return the EVP_MD for SHA-384.
EVP_sha3_224	Return the EVP_MD for SHA3-224.
EVP_sha3_256	Return the built-in SHA3-256 message-digest method.
EVP_sha3_384	Return the EVP_MD for SHA3-384.
EVP_sha3_512	Return the SHA3-512 digest method (512-bit output).
EVP_sha512	Return the SHA-512 digest method (512-bit output).
EVP_sha512_224	Return the EVP_MD for SHA-512/224 (truncated SHA-512).
EVP_sha512_256	Return the EVP_MD for SHA-512/256.
EVP_shake128	Return the EVP_MD for SHAKE128 (XOF).
EVP_shake256	Return the SHAKE256 XOF digest method.
EVP_sm3	Return the EVP_MD for SM3.
EVP_sm4_cbc	Return the EVP_CIPHER for SM4 in CBC mode.
EVP_sm4_cfb128	Return the EVP_CIPHER for SM4 in 128-bit CFB mode.
EVP_sm4_ctr	Return the EVP_CIPHER for SM4 in CTR mode.
EVP_sm4_ecb	Return the EVP_CIPHER for SM4 in ECB mode.
EVP_sm4_ofb	Return the EVP_CIPHER for SM4 in OFB mode.
EVP_whirlpool	Return the WHIRLPOOL digest method (512-bit output; legacy provider).
EXTENDED_KEY_USAGE_free	Free an EXTENDED_KEY_USAGE structure and its contents.
EXTENDED_KEY_USAGE_it	Return the ASN.1 item descriptor for EXTENDED_KEY_USAGE.
EXTENDED_KEY_USAGE_new	Allocate a new Extended Key Usage extension value.
GENERAL_NAMES_free	Free a GENERAL_NAMES structure and its contents.
GENERAL_NAMES_it	Return the ASN.1 item descriptor for GENERAL_NAMES.
GENERAL_NAMES_new	Allocate a new GeneralNames (SEQUENCE OF GeneralName) value.
GENERAL_NAME_cmp	Compare two GENERAL_NAME values for equality.
GENERAL_NAME_dup	Duplicate a GENERAL_NAME structure.
GENERAL_NAME_free	Free a GENERAL_NAME structure and its contents.
GENERAL_NAME_get0_otherName	Retrieve the OID and typed value from a GeneralName of type otherName.
GENERAL_NAME_get0_value	Return the typed payload pointer stored in a GeneralName.
GENERAL_NAME_it	Return the ASN.1 item descriptor for GENERAL_NAME.
GENERAL_NAME_new	Allocate a new GeneralName value.
GENERAL_NAME_print	Print a GeneralName to a BIO in human-readable form.
GENERAL_NAME_set0_othername	Set a GeneralName to type otherName, taking ownership of oid and value.
GENERAL_NAME_set0_value	Set the type and owned value pointer of a GeneralName.
GENERAL_SUBTREE_free	Free a general subtree value and its contents.
GENERAL_SUBTREE_it	Return the ASN.1 item descriptor for GENERAL_SUBTREE.
GENERAL_SUBTREE_new	Allocate a new general subtree (Name Constraints entry).
HMAC	Compute an HMAC over data using digest evp_md and key key.
HMAC_CTX_copy [deprecated]	Copy the HMAC state from sctx into dctx (deprecated).
HMAC_CTX_free [deprecated]	Free an HMAC context.
HMAC_CTX_get_md [deprecated]	Get the message digest associated with an HMAC context.
HMAC_CTX_new [deprecated]	Allocate a new HMAC context (deprecated; prefer EVP_MAC).
HMAC_CTX_reset [deprecated]	Reset an HMAC context to a reusable empty state (deprecated; prefer EVP_MAC).
HMAC_CTX_set_flags [deprecated]	Set flags on an HMAC context, forwarded to the underlying digest.
HMAC_Final [deprecated]	Finalize an HMAC computation and write the MAC.
HMAC_Init [deprecated]	Initialize an HMAC context with a key and digest (legacy).
HMAC_Init_ex [deprecated]	(Re)initialize an HMAC_CTX with key and digest (deprecated; prefer EVP_MAC).
HMAC_Update [deprecated]	Absorb more message bytes into an HMAC context (deprecated; prefer EVP_MAC_update).
HMAC_size [deprecated]	Return the output length in bytes of the digest used by an HMAC context (deprecated).
IDEA_cbc_encrypt [deprecated]	Encrypt or decrypt data with IDEA in CBC mode (deprecated; prefer EVP).
IDEA_cfb64_encrypt [deprecated]	Encrypt or decrypt data with IDEA in 64-bit CFB mode (deprecated; prefer EVP).
IDEA_ecb_encrypt [deprecated]	Encrypt one 8-byte IDEA block in ECB mode (deprecated; prefer EVP).
IDEA_encrypt [deprecated]	Encrypt one IDEA block in place using an expanded key schedule (deprecated; prefer EVP).
IDEA_ofb64_encrypt [deprecated]	Encrypt or decrypt data with IDEA in 64-bit OFB mode (deprecated; prefer EVP).
IDEA_options [deprecated]	Return a short string describing the IDEA implementation (deprecated).
IDEA_set_decrypt_key [deprecated]	Derive an IDEA decryption schedule from an encryption schedule (deprecated).
IDEA_set_encrypt_key [deprecated]	Expand a 16-byte IDEA key into an encryption key schedule (deprecated; prefer EVP).
IPAddressChoice_free	Free an IPAddressChoice structure and its contents.
IPAddressChoice_it	Return the ASN.1 item descriptor for IPAddressChoice.
IPAddressChoice_new	Allocate a new IPAddressChoice (inherit or explicit address ranges).
IPAddressFamily_free	Free an IPAddressFamily value and its contents.
IPAddressFamily_it	Return the ASN.1 item descriptor for IPAddressFamily.
IPAddressFamily_new	Allocate a new IPAddressFamily value.
IPAddressOrRange_free	Free a IP address or address range (RFC 3779) and its contents.
IPAddressOrRange_it	Return the ASN.1 item descriptor for IPAddressOrRange.
IPAddressOrRange_new	Allocate an empty IP address or address range (RFC 3779).
IPAddressRange_free	Free an IPAddressRange value and its contents.
IPAddressRange_it	Return the ASN.1 item descriptor for IPAddressRange.
IPAddressRange_new	Allocate a new IPAddressRange value.
ISSUER_SIGN_TOOL_free	Free an ISSUER_SIGN_TOOL structure and its contents.
ISSUER_SIGN_TOOL_it	Return the ASN.1 item descriptor for ISSUER_SIGN_TOOL.
ISSUER_SIGN_TOOL_new	Allocate a new Issuer Signing Tool extension value.
ISSUING_DIST_POINT_free	Free an Issuing Distribution Point value and its contents.
ISSUING_DIST_POINT_it	Return the ASN.1 item descriptor for ISSUING_DIST_POINT.
ISSUING_DIST_POINT_new	Allocate a new Issuing Distribution Point extension value.
MD4 [deprecated]	Compute the MD4 digest of n bytes at d in one shot (deprecated; prefer EVP_Digest).
MD4_Final [deprecated]	Finish an MD4 message digest and write the 16-byte result (deprecated).
MD4_Init [deprecated]	Initialize a low-level MD4 digest context (deprecated; prefer EVP_DigestInit_ex).
MD4_Transform [deprecated]	Apply the MD4 compression function to one 64-byte block (deprecated).
MD4_Update [deprecated]	Absorb more message bytes into an MD4 digest context (deprecated).
MD5 [deprecated]	Compute the MD5 digest of n bytes at d in one shot (deprecated; prefer EVP_Digest).
MD5_Final [deprecated]	Finish an MD5 message digest and write the 16-byte result (deprecated).
MD5_Init [deprecated]	Initialize a low-level MD5 digest context (deprecated; prefer EVP_DigestInit_ex).
MD5_Transform [deprecated]	Apply the MD5 compression function to one 64-byte block (deprecated).
MD5_Update [deprecated]	Absorb more message bytes into an MD5 digest context (deprecated).
MDC2 [deprecated]	Compute the MDC-2 digest of n bytes at d in one shot (deprecated; prefer EVP_Digest).
MDC2_Final [deprecated]	Finalise an MDC-2 digest and write the 16-byte result (deprecated).
MDC2_Init [deprecated]	Initialise an MDC-2 digest context (deprecated).
MDC2_Update [deprecated]	Absorb more message bytes into an MDC-2 digest context (deprecated).
NAME_CONSTRAINTS_check	Check whether certificate subject names satisfy the given Name Constraints.
NAME_CONSTRAINTS_check_CN	Check whether the certificate Common Name satisfies Name Constraints.
NAME_CONSTRAINTS_free	Free a Name Constraints extension value and its contents.
NAME_CONSTRAINTS_it	Return the ASN.1 item descriptor for NAME_CONSTRAINTS.
NAME_CONSTRAINTS_new	Allocate a new Name Constraints extension value.
NAMING_AUTHORITY_free	Free a NAMING_AUTHORITY value and its contents.
NAMING_AUTHORITY_get0_authorityId	Return the namingAuthorityId object identifier from a NAMING_AUTHORITY.
NAMING_AUTHORITY_get0_authorityText	Return the human-readable naming authority text.
NAMING_AUTHORITY_get0_authorityURL	Return the naming authority URL (IA5String).
NAMING_AUTHORITY_it	Return the ASN.1 item descriptor for NAMING_AUTHORITY.
NAMING_AUTHORITY_new	Allocate a new NAMING_AUTHORITY value.
NAMING_AUTHORITY_set0_authorityId	Set the naming authority OID, taking ownership of namingAuthorityId.
NAMING_AUTHORITY_set0_authorityText	Set the authority text on a NAMING_AUTHORITY, taking ownership of namingAuthorityText.
NAMING_AUTHORITY_set0_authorityURL	Set the authority URL on a NAMING_AUTHORITY, taking ownership of namingAuthorityUrl.
NCONF_WIN32 [deprecated]	Return the legacy Win32 CONF_METHOD (deprecated).
NCONF_default	Return the default NCONF_METHOD used by NCONF_new(NULL).
NCONF_dump_bio	Dump a CONF structure's sections and name/value pairs to a BIO.
NCONF_dump_fp	Write the contents of a CONF object to a FILE in name=value form.
NCONF_free	Free a CONF object and its contained values.
NCONF_free_data	Free configuration values stored in conf without freeing the CONF object itself.
NCONF_get0_libctx	Return the library context associated with a CONF object.
NCONF_get_number_e	Look up a numeric value in a CONF object, reporting errors via the error stack.
NCONF_get_section	Return all name/value pairs belonging to a CONF section.
NCONF_get_section_names	Return the names of all sections present in a CONF object.
NCONF_get_string	Look up a string value in a CONF object.
NCONF_load	Load configuration values from a file into a CONF object.
NCONF_load_bio	Load configuration data from a BIO into a CONF object.
NCONF_load_fp	Load configuration name/value pairs from an open FILE.
NCONF_new	Allocate a CONF object using configuration method meth.
NCONF_new_ex	Allocate a CONF object associated with a library context.
NETSCAPE_CERT_SEQUENCE_free	Free a Netscape Certificate Sequence and its contents.
NETSCAPE_CERT_SEQUENCE_it	Return the ASN.1 item descriptor for NETSCAPE_CERT_SEQUENCE.
NETSCAPE_CERT_SEQUENCE_new	Allocate an empty Netscape Certificate Sequence.
NETSCAPE_SPKAC_free	Free a Netscape SPKAC structure and its contents.
NETSCAPE_SPKAC_it	Return the ASN.1 item descriptor for NETSCAPE_SPKAC.
NETSCAPE_SPKAC_new	Allocate an empty Netscape Signed Public Key And Challenge (SPKAC) structure.
NETSCAPE_SPKI_b64_decode	Decode a base64-encoded Netscape SPKI structure from a string.
NETSCAPE_SPKI_b64_encode	Base64-encode a Netscape Signed Public Key and Challenge structure.
NETSCAPE_SPKI_free	Free a Netscape Signed Public Key and Challenge (SPKI) and its contents.
NETSCAPE_SPKI_get_pubkey	Extract the public key from a Netscape SPKI structure.
NETSCAPE_SPKI_it	Return the ASN.1 item descriptor for NETSCAPE_SPKI.
NETSCAPE_SPKI_new	Allocate an empty Netscape Signed Public Key and Challenge (SPKI).
NETSCAPE_SPKI_print	Print a human-readable representation of a Netscape signed public key and challenge.
NETSCAPE_SPKI_set_pubkey	Set the public key in a Netscape SPKI structure from pkey.
NETSCAPE_SPKI_sign	Sign a Netscape SPKI with a private key and message digest.
NETSCAPE_SPKI_verify	Verify the signature on a Netscape Signed Public Key and Challenge (SPKI) structure.
NOTICEREF_free	Free a certificate-policy notice reference and its contents.
NOTICEREF_it	Return the ASN.1 item descriptor for NOTICEREF.
NOTICEREF_new	Allocate an empty certificate-policy notice reference (organization + notice numbers).
OBJ_NAME_add	Register a name-to-data mapping in the OBJ_NAME table (legacy aliases).
OBJ_NAME_cleanup	Free OBJ_NAME entries of the given type (or all types).
OBJ_NAME_do_all	Invoke a callback for every OBJ_NAME of the given type (unsorted).
OBJ_NAME_do_all_sorted	Invoke a callback for every OBJ_NAME of the given type in sorted name order.
OBJ_NAME_get	Look up data associated with a named object of the given type.
OBJ_NAME_init	Initialize the OBJ_NAME table used for algorithm name aliases.
OBJ_NAME_new_index	Allocate a new OBJ_NAME type index with custom hash, compare, and free callbacks.
OBJ_NAME_remove	Remove a name from the OBJ_NAME alias/lookup table.
OBJ_add_object	Add obj to the process-wide object database (NID/sn/ln tables).
OBJ_add_sigid	Register a signature OID as the combination of a digest and public-key algorithm.
OBJ_bsearch_	Binary-search a sorted array of fixed-size elements using a comparator.
OBJ_bsearch_ex_	Binary-search a sorted object table with optional flags (internal helper).
OBJ_cmp	Compare two ASN1_OBJECT values.
OBJ_create	Register a new ASN.1 object identifier with short and long names.
OBJ_create_objects	Load OID definitions from text lines read from in into the internal object table.
OBJ_dup	Deep-copy an ASN1_OBJECT.
OBJ_find_sigid_algs	Look up the digest and public-key NIDs that compose a signature algorithm.
OBJ_find_sigid_by_algs	Look up the composite signature NID for a digest and public-key algorithm pair.
OBJ_get0_data	Return the DER-encoded content octets of an ASN1_OBJECT.
OBJ_length	Return the length in bytes of an ASN.1 object's encoded OID content.
OBJ_ln2nid	Return the NID for an object long name.
OBJ_new_nid	Allocate one or more new numeric object identifiers (NIDs).
OBJ_nid2ln	Return the long name string for a numeric object identifier (NID).
OBJ_nid2obj	Return the ASN1_OBJECT for a numeric identifier (NID).
OBJ_nid2sn	Return the short name string for a numeric object identifier (NID).
OBJ_obj2nid	Return the NID for an ASN1_OBJECT.
OBJ_obj2txt	Format an ASN1_OBJECT as text (dotted OID and/or registered name).
OBJ_sigid_free	Free the signature-algorithm OID alias table populated by OBJ_add_sigid().
OBJ_sn2nid	Look up the numeric object identifier (NID) for a short name string.
OBJ_txt2nid	Return the NID for a text object identifier.
OBJ_txt2obj	Parse a textual OID (dot notation or name) into an ASN1_OBJECT.
OCSP_BASICRESP_add1_ext_i2d	Encode value as a basic-response extension of type nid and append it.
OCSP_BASICRESP_add_ext	Insert extension ex into a basic OCSP response at position loc.
OCSP_BASICRESP_delete_ext	Remove and return the basic-response extension at index loc.
OCSP_BASICRESP_free	Free an OCSP BasicOCSPResponse and its contents.
OCSP_BASICRESP_get1_ext_d2i	Decode the first basic-response extension of type nid into its native structure.
OCSP_BASICRESP_get_ext	Return the basic-response extension at index loc.
OCSP_BASICRESP_get_ext_by_NID	Find the next basic-response extension with NID nid.
OCSP_BASICRESP_get_ext_by_OBJ	Find the next basic-response extension with object identifier obj.
OCSP_BASICRESP_get_ext_by_critical	Find the next basic-response extension with criticality crit.
OCSP_BASICRESP_get_ext_count	Return the number of extensions on a basic OCSP response.
OCSP_BASICRESP_it	Return the ASN.1 item descriptor for OCSP_BASICRESP.
OCSP_BASICRESP_new	Allocate an empty OCSP BasicOCSPResponse.
OCSP_CERTID_dup	Duplicate an OCSP CertID structure.
OCSP_CERTID_free	Free an OCSP CertID and its contents.
OCSP_CERTID_it	Return the ASN.1 item descriptor for OCSP_CERTID.
OCSP_CERTID_new	Allocate an empty OCSP CertID.
OCSP_CERTSTATUS_free	Free a OCSP CertStatus and its contents.
OCSP_CERTSTATUS_it	Return the ASN.1 item descriptor for OCSP_CERTSTATUS.
OCSP_CERTSTATUS_new	Allocate an empty OCSP CertStatus.
OCSP_CRLID_free	Free an OCSP CrlID extension value and its contents.
OCSP_CRLID_it	Return the ASN.1 item descriptor for OCSP_CRLID.
OCSP_CRLID_new	Allocate an empty OCSP CrlID extension value.
OCSP_ONEREQ_add1_ext_i2d	Encode value as a single-request extension of type nid and append it.
OCSP_ONEREQ_add_ext	Insert extension ex into a single OCSP request at position loc.
OCSP_ONEREQ_delete_ext	Remove and return the single-request extension at index loc.
OCSP_ONEREQ_free	Free an OCSP single Request entry and its contents.
OCSP_ONEREQ_get1_ext_d2i	Decode the first single-request extension of type nid into its native structure.
OCSP_ONEREQ_get_ext	Return the single-request extension at index loc.
OCSP_ONEREQ_get_ext_by_NID	Find the next single-request extension with NID nid.
OCSP_ONEREQ_get_ext_by_OBJ	Find the next single-request extension with object identifier obj.
OCSP_ONEREQ_get_ext_by_critical	Find the next single-request extension with criticality crit.
OCSP_ONEREQ_get_ext_count	Return the number of extensions on a single OCSP request entry.
OCSP_ONEREQ_it	Return the ASN.1 item descriptor for OCSP_ONEREQ.
OCSP_ONEREQ_new	Allocate an empty OCSP single Request entry.
OCSP_REQINFO_free	Free a OCSP TBSRequest (OCSP_REQINFO) and its contents.
OCSP_REQINFO_it	Return the ASN.1 item descriptor for OCSP_REQINFO.
OCSP_REQINFO_new	Allocate an empty OCSP TBSRequest (OCSP_REQINFO).
OCSP_REQUEST_add1_ext_i2d	Encode value as an OCSP request extension of type nid and append it.
OCSP_REQUEST_add_ext	Insert extension ex into an OCSP request at position loc.
OCSP_REQUEST_delete_ext	Remove and return the OCSP request extension at index loc.
OCSP_REQUEST_free	Free an OCSP Request and its contents.
OCSP_REQUEST_get1_ext_d2i	Decode the first OCSP request extension of type nid into its native structure.
OCSP_REQUEST_get_ext	Return the OCSP request extension at index loc.
OCSP_REQUEST_get_ext_by_NID	Find the next OCSP request extension with NID nid.
OCSP_REQUEST_get_ext_by_OBJ	Find the next OCSP request extension with object identifier obj.
OCSP_REQUEST_get_ext_by_critical	Find the next OCSP request extension with criticality crit.
OCSP_REQUEST_get_ext_count	Return the number of extensions on an OCSP request.
OCSP_REQUEST_it	Return the ASN.1 item descriptor for OCSP_REQUEST.
OCSP_REQUEST_new	Allocate an empty OCSP Request.
OCSP_REQUEST_print	Print an OCSP request in human-readable form to a BIO.
OCSP_RESPBYTES_free	Free an OCSP ResponseBytes and its contents.
OCSP_RESPBYTES_it	Return the ASN.1 item descriptor for OCSP_RESPBYTES.
OCSP_RESPBYTES_new	Allocate an empty OCSP ResponseBytes.
OCSP_RESPDATA_free	Free a OCSP ResponseData and its contents.
OCSP_RESPDATA_it	Return the ASN.1 item descriptor for OCSP_RESPDATA.
OCSP_RESPDATA_new	Allocate an empty OCSP ResponseData.
OCSP_RESPID_free	Free a OCSP ResponderID and its contents.
OCSP_RESPID_it	Return the ASN.1 item descriptor for OCSP_RESPID.
OCSP_RESPID_match	Test whether a ResponderID matches cert by name or key hash (default libctx).
OCSP_RESPID_match_ex	Test whether a ResponderID matches cert by name or key hash.
OCSP_RESPID_new	Allocate an empty OCSP ResponderID.
OCSP_RESPID_set_by_key	Set a ResponderID to the SHA-1 hash of cert's public key (default libctx).
OCSP_RESPID_set_by_key_ex	Set a ResponderID to the SHA-1 hash of cert's public key, with provider selection.
OCSP_RESPID_set_by_name	Set a ResponderID to the subject name of cert.
OCSP_RESPONSE_free	Free a OCSP Response and its contents.
OCSP_RESPONSE_it	Return the ASN.1 item descriptor for OCSP_RESPONSE.
OCSP_RESPONSE_new	Allocate an empty OCSP Response.
OCSP_RESPONSE_print	Print an OCSP response in human-readable form to a BIO.
OCSP_REVOKEDINFO_free	Free an OCSP RevokedInfo and its contents.
OCSP_REVOKEDINFO_it	Return the ASN.1 item descriptor for OCSP_REVOKEDINFO.
OCSP_REVOKEDINFO_new	Allocate an empty OCSP RevokedInfo.
OCSP_SERVICELOC_free	Free an OCSP ServiceLocator extension value and its contents.
OCSP_SERVICELOC_it	Return the ASN.1 item descriptor for OCSP_SERVICELOC.
OCSP_SERVICELOC_new	Allocate an empty OCSP ServiceLocator extension value.
OCSP_SIGNATURE_free	Free an OCSP Signature and its contents.
OCSP_SIGNATURE_it	Return the ASN.1 item descriptor for OCSP_SIGNATURE.
OCSP_SIGNATURE_new	Allocate an empty OCSP Signature.
OCSP_SINGLERESP_add1_ext_i2d	Encode value as a SingleResponse extension of type nid and append it.
OCSP_SINGLERESP_add_ext	Insert extension ex into a SingleResponse at position loc.
OCSP_SINGLERESP_delete_ext	Remove and return the SingleResponse extension at index loc.
OCSP_SINGLERESP_free	Free an OCSP SingleResponse and its contents.
OCSP_SINGLERESP_get0_id	Return the CertID from a SingleResponse.
OCSP_SINGLERESP_get1_ext_d2i	Decode the first SingleResponse extension of type nid into its native structure.
OCSP_SINGLERESP_get_ext	Return the SingleResponse extension at index loc.
OCSP_SINGLERESP_get_ext_by_NID	Find the next SingleResponse extension with NID nid.
OCSP_SINGLERESP_get_ext_by_OBJ	Find the next SingleResponse extension with object identifier obj.
OCSP_SINGLERESP_get_ext_by_critical	Find the next SingleResponse extension with criticality crit.
OCSP_SINGLERESP_get_ext_count	Return the number of extensions on an OCSP SingleResponse.
OCSP_SINGLERESP_it	Return the ASN.1 item descriptor for OCSP_SINGLERESP.
OCSP_SINGLERESP_new	Allocate an empty OCSP SingleResponse.
OCSP_accept_responses_new	Create an AcceptableResponses OCSP extension from OID strings.
OCSP_archive_cutoff_new	Create an ArchiveCutoff OCSP extension from a time string.
OCSP_basic_add1_cert	Add a certificate to the optional certs field of a basic OCSP response.
OCSP_basic_add1_nonce	Add an OCSP nonce extension to a basic response.
OCSP_basic_add1_status	Append a SingleResponse with certificate status to a basic OCSP response.
OCSP_basic_sign	Sign a basic OCSP response with signer and key.
OCSP_basic_sign_ctx	Sign a basic OCSP response using an initialized digest/sign context.
OCSP_basic_verify	Verify the signature and optional certificate path of a basic OCSP response.
OCSP_cert_id_new	Build an OCSP CertID from issuer name/key material and a serial number.
OCSP_cert_status_str	Return a human-readable string for an OCSP CertStatus value.
OCSP_cert_to_id	Build an OCSP CertID from a subject certificate and its issuer.
OCSP_check_nonce	Compare OCSP nonce extensions between a request and a basic response.
OCSP_check_validity	Check that OCSP thisUpdate/nextUpdate times are acceptable relative to now.
OCSP_copy_nonce	Copy the nonce extension from an OCSP request into a basic response.
OCSP_crlID_new	Create a CrlID OCSP extension from optional URL, CRL number, and time.
OCSP_crl_reason_str	Return a human-readable string for a CRLReason / OCSP revocation reason code.
OCSP_id_cmp	Compare two OCSP CertID values for equality.
OCSP_id_get0_info	Return borrowed pointers to the fields of an OCSP CertID.
OCSP_id_issuer_cmp	Compare only the issuer name/key hash fields of two OCSP CertIDs.
OCSP_onereq_get0_id	Return the CertID from a single OCSP request entry.
OCSP_request_add0_id	Append a CertID as a new single-request entry, taking ownership of cid.
OCSP_request_add1_cert	Add a certificate to the optional certs field of a signed OCSP request.
OCSP_request_add1_nonce	Add an OCSP nonce extension to a request.
OCSP_request_is_signed	Test whether an OCSP request carries an optional signature.
OCSP_request_onereq_count	Return the number of single-request entries in an OCSP request.
OCSP_request_onereq_get0	Return the single-request entry at index i in an OCSP request.
OCSP_request_set1_name	Set the optional requestorName in an OCSP request to a directory name.
OCSP_request_sign	Sign an OCSP request with signer and key.
OCSP_request_verify	Verify the signature on a signed OCSP request.
OCSP_resp_count	Return the number of SingleResponse entries in a basic OCSP response.
OCSP_resp_find	Find the next SingleResponse whose CertID matches id.
OCSP_resp_find_status	Find a SingleResponse for id and return its certificate status fields.
OCSP_resp_get0	Return the SingleResponse at index idx in a basic OCSP response.
OCSP_resp_get0_certs	Return the optional certificate stack embedded in a basic OCSP response.
OCSP_resp_get0_id	Return internal pointers to the ResponderID fields of a basic OCSP response.
OCSP_resp_get0_produced_at	Return the producedAt time from a basic OCSP response.
OCSP_resp_get0_respdata	Return the tbsResponseData from a basic OCSP response.
OCSP_resp_get0_signature	Return the signature OCTET STRING from a basic OCSP response (borrowed).
OCSP_resp_get0_signer	Locate the signer certificate for a basic OCSP response.
OCSP_resp_get0_tbs_sigalg	Return the signature AlgorithmIdentifier from a basic OCSP response.
OCSP_resp_get1_id	Return a copy of the ResponderID from a basic OCSP response.
OCSP_response_create	Create an OCSP response with the given status and optional basic response.
OCSP_response_get1_basic	Extract and decode the BasicOCSPResponse from a successful OCSP response.
OCSP_response_status	Return the OCSPResponseStatus enumerated value from an OCSP response.
OCSP_response_status_str	Return a human-readable string for an OCSPResponseStatus code.
OCSP_sendreq_bio	Send an OCSP request over HTTP via b and return the decoded response.
OCSP_sendreq_new	Create a non-blocking HTTP request context for an OCSP exchange.
OCSP_single_get0_status	Extract certificate status and related times from a SingleResponse.
OCSP_url_svcloc_new	Create a ServiceLocator OCSP extension for issuer and locator URLs.
OPENSSL_INIT_free	Free an OPENSSL_INIT_SETTINGS object allocated with OPENSSL_INIT_new().
OPENSSL_INIT_new	Allocate an OPENSSL_INIT_SETTINGS object for OPENSSL_init_crypto().
OPENSSL_INIT_set_config_appname	Set the application section name used when OPENSSL_init_crypto() loads config.
OPENSSL_INIT_set_config_file_flags	Set CONF_modules_load_file() flags used when OPENSSL_init_crypto() loads config.
OPENSSL_INIT_set_config_filename	Set the configuration file path used when OPENSSL_init_crypto() loads config.
OPENSSL_LH_delete	Delete the entry matching data from an LHASH.
OPENSSL_LH_doall	Call func once for every element currently stored in an LHASH.
OPENSSL_LH_doall_arg	Invoke func for every element in an LHASH, passing caller argument arg.
OPENSSL_LH_error	Return whether the last LHASH operation on lh failed due to memory error.
OPENSSL_LH_flush	Remove and free all entries from an LHASH without freeing the table itself.
OPENSSL_LH_free	Free an LHASH table structure (does not free the caller-owned entries).
OPENSSL_LH_get_down_load	Return the load factor threshold that triggers LHASH contraction.
OPENSSL_LH_insert	Insert data into an LHASH, replacing any equal existing element.
OPENSSL_LH_new	Allocate a new LHASH table using hash function h and compare function c.
OPENSSL_LH_node_stats [deprecated]	Print per-bucket node counts for an LHASH to fp (deprecated).
OPENSSL_LH_node_stats_bio [deprecated]	Print per-bucket node counts for a hash table to a BIO (deprecated).
OPENSSL_LH_node_usage_stats [deprecated]	Print node-usage / collision statistics for an LHASH to fp (deprecated).
OPENSSL_LH_node_usage_stats_bio [deprecated]	Print hash-bucket usage / load statistics for a hash table to a BIO (deprecated).
OPENSSL_LH_num_items	Return the number of entries stored in an LHASH table.
OPENSSL_LH_retrieve	Look up the entry matching data in an LHASH.
OPENSSL_LH_set_down_load	Set the load factor threshold that triggers LHASH contraction.
OPENSSL_LH_set_thunks	Install type-safe thunk adapters used by DEFINE_LHASH_OF wrappers on lh.
OPENSSL_LH_stats [deprecated]	Print summary statistics for an LHASH to fp (deprecated).
OPENSSL_LH_stats_bio [deprecated]	Print summary statistics for a hash table to a BIO (deprecated).
OPENSSL_LH_strhash	Hash a NUL-terminated C string for use as an LHASH hash function.
OPENSSL_asc2uni	Convert an ASCII/ISO-8859-1 string to PKCS#12 BMPString form (zero-extended UTF-16BE).
OPENSSL_atexit	Register a handler to run during OPENSSL_cleanup().
OPENSSL_buf2hexstr	Convert a byte buffer to a newly allocated colon-separated hex string.
OPENSSL_buf2hexstr_ex	Encode buf as a hexadecimal string into str, optionally separated by sep.
OPENSSL_cipher_name	Map an RFC cipher suite name to the corresponding OpenSSL cipher name.
OPENSSL_cleanse	Overwrite len bytes at ptr with zeros in a way that resists compiler elision.
OPENSSL_cleanup	Deinitialize OpenSSL: run atexit handlers, free global crypto state, and stop threads.
OPENSSL_config [deprecated]	Load the named OpenSSL configuration file (deprecated; prefer CONF_modules_load_file).
OPENSSL_die	Abort the process after printing an internal OpenSSL assertion failure.
OPENSSL_fork_child [deprecated]	Rebuild per-process cryptographic state in a freshly forked child (deprecated).
OPENSSL_fork_parent [deprecated]	Resume OpenSSL internal state in the parent after a POSIX fork (deprecated).
OPENSSL_fork_prepare [deprecated]	Prepare OpenSSL internal state before a POSIX fork (deprecated).
OPENSSL_gmtime	Convert a time_t to UTC broken-down time into caller-provided storage.
OPENSSL_gmtime_adj	Add a day/second offset to a UTC struct tm in place.
OPENSSL_gmtime_diff	Compute the day/second difference between two broken-down UTC times.
OPENSSL_hexchar2int	Convert a single hexadecimal digit character to its 0–15 value.
OPENSSL_hexstr2buf	Decode a hexadecimal string into a newly allocated byte buffer.
OPENSSL_hexstr2buf_ex	Decode a hex string into buf, optionally ignoring separator sep.
OPENSSL_info	Return a static string describing a build or runtime configuration property.
OPENSSL_init	Perform legacy low-level OpenSSL library initialization (prefer OPENSSL_init_crypto()).
OPENSSL_init_crypto	Initialize libcrypto with option flags and optional settings.
OPENSSL_init_ssl	Explicitly initialise libssl and libcrypto with the given options and settings.
OPENSSL_isservice	Report whether the process appears to be a non-interactive Windows service.
OPENSSL_issetugid	Report whether the process is running setuid/setgid (or otherwise "tainted").
OPENSSL_load_builtin_modules	Register OpenSSL's built-in CONF modules (engines, providers, SSL, etc.).
OPENSSL_sk_deep_copy	Deep-copy a stack by duplicating each element with c.
OPENSSL_sk_delete	Remove and return the element at index loc from a stack.
OPENSSL_sk_delete_ptr	Delete the first stack element whose pointer equals p.
OPENSSL_sk_dup	Shallow-copy a stack (element pointers are duplicated, not deep-copied).
OPENSSL_sk_find	Find the first stack element that compares equal to data.
OPENSSL_sk_find_all	Search for data and report how many matching elements exist.
OPENSSL_sk_find_ex	Search for data; if absent, return the insertion index of the nearest greater element.
OPENSSL_sk_free	Free a stack structure without freeing its elements.
OPENSSL_sk_insert	Insert data before index where (appending if where is out of range).
OPENSSL_sk_is_sorted	Report whether a stack is marked sorted under its comparison function.
OPENSSL_sk_new	Allocate an empty stack with an optional comparison function.
OPENSSL_sk_new_null	Allocate an empty stack with no comparison function.
OPENSSL_sk_new_reserve	Allocate a stack with comparison function c and room for n elements.
OPENSSL_sk_num	Return the number of elements in a stack.
OPENSSL_sk_pop	Remove and return the last element of a stack.
OPENSSL_sk_pop_free	Pop and free every element, then free the stack.
OPENSSL_sk_push	Append data to the end of a generic OPENSSL_STACK.
OPENSSL_sk_reserve	Ensure a stack's internal array can hold at least n elements without reallocating.
OPENSSL_sk_set	Replace the pointer at index i in a stack.
OPENSSL_sk_set_cmp_func	Install a comparison function on a stack and mark it as unsorted.
OPENSSL_sk_shift	Remove and return the first element of a stack.
OPENSSL_sk_sort	Sort a stack in place using its comparison function.
OPENSSL_sk_unshift	Insert data at the front of a generic OPENSSL_STACK.
OPENSSL_sk_value	Return the element at index idx in a stack (no bounds checking beyond returning NULL).
OPENSSL_sk_zero	Clear a stack to zero elements without freeing the element pointers.
OPENSSL_strcasecmp	Case-insensitive comparison of two NUL-terminated C strings.
OPENSSL_strlcat	Append src onto dst with OpenSSL's bounded strlcat semantics.
OPENSSL_strlcpy	Copy src into dst with BSD strlcpy semantics.
OPENSSL_strncasecmp	Case-insensitive comparison of at most n characters of two C strings.
OPENSSL_strnlen	Return the length of str, limited to at most maxlen bytes.
OPENSSL_thread_stop	Run per-thread OpenSSL cleanup handlers for the calling thread in the default library context.
OPENSSL_thread_stop_ex	Release per-thread OpenSSL state associated with library context ctx.
OPENSSL_uni2asc	Convert a PKCS#12 BMPString (big-endian UTF-16 with zero high bytes) to a C string.
OPENSSL_uni2utf8	Convert a PKCS#12 BMPString (big-endian UTF-16) to a UTF-8 C string.
OPENSSL_utf82uni	Convert a UTF-8 string to PKCS#12 BMPString form (big-endian UTF-16).
OPENSSL_version_build_metadata	Return OpenSSL build metadata (OPENSSL_VERSION_BUILD_METADATA).
OPENSSL_version_major	Return the OpenSSL library major version (OPENSSL_VERSION_MAJOR).
OPENSSL_version_minor	Return the OpenSSL library minor version (OPENSSL_VERSION_MINOR).
OPENSSL_version_patch	Return the OpenSSL library patch level (OPENSSL_VERSION_PATCH).
OPENSSL_version_pre_release	Return the OpenSSL pre-release label (OPENSSL_VERSION_PRE_RELEASE).
OSSL_CMP_CTX_build_cert_chain	Build and store a certificate chain for the CMP signer certificate.
OSSL_CMP_CTX_free	Free a CMP context and all resources it owns.
OSSL_CMP_CTX_get0_geninfo_ITAVs	Return the geninfo ITAV stack configured on the context.
OSSL_CMP_CTX_get0_libctx	Return the library context associated with a CMP context.
OSSL_CMP_CTX_get0_newCert	Return the newly obtained certificate from the last transaction, if any.
OSSL_CMP_CTX_get0_newPkey	Return the new public or private key stored on the context.
OSSL_CMP_CTX_get0_propq	Return the property query string used for algorithm fetching.
OSSL_CMP_CTX_get0_statusString	Return the statusString text from the last CMP transaction.
OSSL_CMP_CTX_get0_trustedStore	Return the trusted certificate store used to authenticate the CMP server.
OSSL_CMP_CTX_get0_untrusted	Return the untrusted certificate stack configured on the context.
OSSL_CMP_CTX_get0_validatedSrvCert	Return the validated CMP server certificate from the last transaction.
OSSL_CMP_CTX_get1_caPubs	Return a copy of CA certificates (caPubs) from the last certRep.
OSSL_CMP_CTX_get1_extraCertsIn	Return a copy of extraCerts received in the last CMP message.
OSSL_CMP_CTX_get1_newChain	Return a copy of the newly obtained certificate chain from the last transaction.
OSSL_CMP_CTX_get_certConf_cb_arg	Return the argument previously set for the certConf callback.
OSSL_CMP_CTX_get_failInfoCode	Return the failInfo bit field from the last CMP transaction.
OSSL_CMP_CTX_get_http_cb_arg	Return the argument previously set for the HTTP transfer callback.
OSSL_CMP_CTX_get_option	Read a CMP context option (OSSL_CMP_OPT_*).
OSSL_CMP_CTX_get_status	Return the PKIStatus from the last CMP transaction stored on the context.
OSSL_CMP_CTX_get_transfer_cb_arg	Return the argument previously set for the message transfer callback.
OSSL_CMP_CTX_new	Allocate a CMP context with default options for client or server use.
OSSL_CMP_CTX_print_errors	Print the OpenSSL error queue using the context logging callback.
OSSL_CMP_CTX_push0_geninfo_ITAV	Append an ITAV to the geninfo field of outgoing CMP messages.
OSSL_CMP_CTX_push0_genm_ITAV	Append an ITAV to the body of an outgoing General Message (genm).
OSSL_CMP_CTX_push0_policy	Append a certificate policy to the template policy extension.
OSSL_CMP_CTX_push1_subjectAltName	Append a Subject Alternative Name to the certificate template.
OSSL_CMP_CTX_reinit	Reset a CMP context to its initial state while retaining configuration.
OSSL_CMP_CTX_reqExtensions_have_SAN	Test whether the context contains a Subject Alternative Name extension.
OSSL_CMP_CTX_reset_geninfo_ITAVs	Clear all geninfo ITAVs stored on the CMP context.
OSSL_CMP_CTX_server_perform	Process a CMP request locally using the server callbacks on the context.
OSSL_CMP_CTX_set0_newPkey	Set the new key pair used in certificate-request templates.
OSSL_CMP_CTX_set0_reqExtensions	Replace request extensions in the certificate template.
OSSL_CMP_CTX_set0_trustedStore	Set the trusted certificate store used to authenticate the CMP server.
OSSL_CMP_CTX_set1_cert	Set the client CMP signer certificate on the context.
OSSL_CMP_CTX_set1_expected_sender	Pin the expected sender DN for incoming CMP response verification.
OSSL_CMP_CTX_set1_extraCertsOut	Set extra certificates sent in outgoing CMP messages.
OSSL_CMP_CTX_set1_issuer	Set the intended issuer DN for the certificate template.
OSSL_CMP_CTX_set1_no_proxy	Set a comma-separated list of hosts that bypass the HTTP proxy.
OSSL_CMP_CTX_set1_oldCert	Set the old certificate referenced by a key-update request.
OSSL_CMP_CTX_set1_p10CSR	Set a PKCS#10 CSR used for P10CR certificate requests.
OSSL_CMP_CTX_set1_pkey	Set the private key used to protect outgoing CMP messages.
OSSL_CMP_CTX_set1_proxy	Set an HTTP proxy hostname for CMP transfer.
OSSL_CMP_CTX_set1_recipient	Set the intended recipient DN placed in outgoing CMP PKIHeader fields.
OSSL_CMP_CTX_set1_referenceValue	Set the reference value used for password-based CMP message protection.
OSSL_CMP_CTX_set1_secretValue	Set the shared secret used for MAC-based CMP message protection.
OSSL_CMP_CTX_set1_senderNonce	Set the senderNonce placed in outgoing CMP PKIHeader fields.
OSSL_CMP_CTX_set1_serialNumber	Set the serial number field in the certificate template.
OSSL_CMP_CTX_set1_server	Set the CMP server hostname or IP address used for HTTP(S) transfer.
OSSL_CMP_CTX_set1_serverPath	Set the HTTP path component for CMP server requests.
OSSL_CMP_CTX_set1_srvCert	Pin the expected CMP server certificate for response verification.
OSSL_CMP_CTX_set1_subjectName	Set the subject DN in the certificate template.
OSSL_CMP_CTX_set1_transactionID	Set the transactionID placed in outgoing CMP PKIHeader fields.
OSSL_CMP_CTX_set1_untrusted	Set untrusted certificates used when validating CMP server messages.
OSSL_CMP_CTX_set_certConf_cb	Register the certificate-confirmation callback for the CMP client.
OSSL_CMP_CTX_set_certConf_cb_arg	Set the opaque argument passed to the certConf callback.
OSSL_CMP_CTX_set_http_cb	Set the HTTP BIO callback used for CMP message transfer.
OSSL_CMP_CTX_set_http_cb_arg	Set the opaque argument passed to the HTTP transfer callback.
OSSL_CMP_CTX_set_log_cb	Register a CMP logging callback for this context.
OSSL_CMP_CTX_set_option	Set a CMP context option (OSSL_CMP_OPT_*).
OSSL_CMP_CTX_set_serverPort	Set the TCP port used for CMP HTTP(S) transfer.
OSSL_CMP_CTX_set_transfer_cb	Replace the message transfer callback used by the CMP client.
OSSL_CMP_CTX_set_transfer_cb_arg	Set the opaque argument passed to the message transfer callback.
OSSL_CMP_CTX_setup_CRM	Build a CRMF CertReqMsg from fields stored on the CMP context.
OSSL_CMP_CTX_snprint_PKIStatus	Format the PKIStatusInfo from a CMP context into a human-readable string.
OSSL_CMP_HDR_get0_geninfo_ITAVs	Return the geninfo ITAV stack from a CMP PKIHeader.
OSSL_CMP_HDR_get0_recipNonce	Return the recipNonce from a CMP PKIHeader.
OSSL_CMP_HDR_get0_transactionID	Return the transactionID from a CMP PKIHeader.
OSSL_CMP_ITAV_create	Allocate an ITAV with the given infoType and infoValue, taking ownership of both.
OSSL_CMP_ITAV_dup	Duplicate an OSSL_CMP_ITAV structure.
OSSL_CMP_ITAV_free	Free an OSSL_CMP_ITAV structure and its infoType and infoValue contents.
OSSL_CMP_ITAV_get0_caCerts	Extract the CA certificate stack from a caCerts ITAV.
OSSL_CMP_ITAV_get0_certProfile	Extract the certProfile name list from a certProfile ITAV.
OSSL_CMP_ITAV_get0_rootCaCert	Extract the root CA certificate from a rootCaCert ITAV.
OSSL_CMP_ITAV_get0_rootCaKeyUpdate	Extract root CA key-update certificates from a rootCaKeyUpdate ITAV.
OSSL_CMP_ITAV_get0_type	Return the infoType OID from an ITAV.
OSSL_CMP_ITAV_get0_value	Return the infoValue from an ITAV.
OSSL_CMP_ITAV_new0_certProfile	Create a certProfile ITAV from a stack of profile name strings.
OSSL_CMP_ITAV_new_caCerts	Create a caCerts ITAV containing a copy of the given CA certificate stack.
OSSL_CMP_ITAV_new_rootCaCert	Create a rootCaCert ITAV optionally containing a root CA certificate.
OSSL_CMP_ITAV_new_rootCaKeyUpdate	Create a rootCaKeyUpdate ITAV with optional transition certificates.
OSSL_CMP_ITAV_push0_stack_item	Push an ITAV onto a stack, creating the stack if *itav_sk_p is NULL.
OSSL_CMP_ITAV_set0	Set the infoType and infoValue of an ITAV, taking ownership of both pointers.
OSSL_CMP_MSG_dup	Duplicate an OSSL_CMP_MSG structure.
OSSL_CMP_MSG_free	Free an OSSL_CMP_MSG structure and its contents.
OSSL_CMP_MSG_get0_certreq_publickey	Return the public key from the certificate template of a certificate-request message.
OSSL_CMP_MSG_get0_header	Return the PKIHeader from a CMP message.
OSSL_CMP_MSG_get_bodytype	Return the PKIBody choice id of a CMP message.
OSSL_CMP_MSG_http_perform	Send a CMP request over HTTP(S) to the server configured in ctx and return the response.
OSSL_CMP_MSG_it	Return the ASN.1 item descriptor for OSSL_CMP_MSG.
OSSL_CMP_MSG_new	Allocate an empty OSSL_CMP_MSG structure.
OSSL_CMP_MSG_read	Load a DER-encoded CMP message from a file.
OSSL_CMP_MSG_update_recipNonce	Copy the context senderNonce into a CMP message recipNonce field.
OSSL_CMP_MSG_update_transactionID	Copy the context transactionID into a CMP message header.
OSSL_CMP_MSG_write	Write a CMP message to a file in DER encoding.
OSSL_CMP_PKIHEADER_free	Free an OSSL_CMP_PKIHEADER structure and its contents.
OSSL_CMP_PKIHEADER_it	Return the ASN.1 item descriptor for OSSL_CMP_PKIHEADER.
OSSL_CMP_PKIHEADER_new	Allocate an empty OSSL_CMP_PKIHEADER structure.
OSSL_CMP_PKISI_dup	Duplicate an OSSL_CMP_PKISI structure.
OSSL_CMP_PKISI_free	Free an OSSL_CMP_PKISI structure and its contents.
OSSL_CMP_PKISI_it	Return the ASN.1 item descriptor for OSSL_CMP_PKISI.
OSSL_CMP_PKISI_new	Allocate an empty OSSL_CMP_PKISI structure.
OSSL_CMP_PKISTATUS_it	Return the ASN.1 item descriptor for OSSL_CMP_PKISTATUS.
OSSL_CMP_SRV_CTX_free	Free a CMP server context and its resources.
OSSL_CMP_SRV_CTX_get0_cmp_ctx	Return the embedded CMP context from a server context.
OSSL_CMP_SRV_CTX_get0_custom_ctx	Return the application custom context pointer from a server context.
OSSL_CMP_SRV_CTX_init	Register server-side CMP message processing callbacks.
OSSL_CMP_SRV_CTX_init_trans	Register delayed-delivery and transaction-cleanup callbacks on a server context.
OSSL_CMP_SRV_CTX_new	Allocate a CMP server context with default options.
OSSL_CMP_SRV_CTX_set_accept_raverified	Enable accepting IR/CR/KUR requests with POPO raVerified.
OSSL_CMP_SRV_CTX_set_accept_unprotected	Enable accepting CMP requests without protection or with invalid protection.
OSSL_CMP_SRV_CTX_set_grant_implicit_confirm	Enable or disable granting implicitConfirm in certRep messages.
OSSL_CMP_SRV_CTX_set_send_unprotected_errors	Enable sending unprotected CMP error and negative response messages.
OSSL_CMP_SRV_process_request	Process a CMP request using the callbacks registered in srv_ctx.
OSSL_CMP_STATUSINFO_new	Allocate a PKIStatusInfo with status, optional failInfo, and statusString text.
OSSL_CMP_certConf_cb	Default certificate-confirmation callback that validates the new certificate chain.
OSSL_CMP_exec_GENM_ses	Execute a CMP General Message (genm) transaction and return response ITAVs.
OSSL_CMP_exec_RR_ses	Execute a CMP Revocation Request (RR) transaction using context fields.
OSSL_CMP_exec_certreq	Execute a CMP certificate request transaction (IR/CR/KUR/P10CR).
OSSL_CMP_get1_caCerts	Request CA certificates from the CMP server via genm/genp and verify the response.
OSSL_CMP_get1_rootCaKeyUpdate	Request a root CA key update via genm/genp and verify the response.
OSSL_CMP_log_close	Flush pending CMP log output and release the default CMP logging channel.
OSSL_CMP_log_open	Open the default CMP logging channel (stderr) if not already open.
OSSL_CMP_print_errors_cb	Print the OpenSSL error queue via a CMP logging callback.
OSSL_CMP_print_to_bio	Format a CMP log record (component, location, severity, message) onto a BIO.
OSSL_CMP_snprint_PKIStatusInfo	Format a PKIStatusInfo structure into a human-readable string.
OSSL_CMP_try_certreq	Start or continue a deferred CMP certificate request (pollReq flow).
OSSL_CMP_validate_cert_path	Validate that cert chains to a trust anchor in trusted_store.
OSSL_CMP_validate_msg	Verify protection and header fields of an incoming CMP message.
OSSL_CRMF_CERTID_dup	Duplicate an OSSL_CRMF_CERTID structure.
OSSL_CRMF_CERTID_free	Free an OSSL_CRMF_CERTID structure and its contents.
OSSL_CRMF_CERTID_gen	Create an OSSL_CRMF_CERTID from an issuer name and serial number.
OSSL_CRMF_CERTID_get0_issuer	Return the issuer name from a CRMF CertId.
OSSL_CRMF_CERTID_get0_serialNumber	Return the serial number from a CRMF CertId.
OSSL_CRMF_CERTID_it	Return the ASN.1 item descriptor for OSSL_CRMF_CERTID.
OSSL_CRMF_CERTID_new	Allocate an empty OSSL_CRMF_CERTID structure.
OSSL_CRMF_CERTTEMPLATE_fill	Populate selected fields of a CRMF CertTemplate.
OSSL_CRMF_CERTTEMPLATE_free	Free an OSSL_CRMF_CERTTEMPLATE structure and its contents.
OSSL_CRMF_CERTTEMPLATE_get0_extensions	Return the X.509 extensions from a CRMF CertTemplate.
OSSL_CRMF_CERTTEMPLATE_get0_issuer	Return the issuer name from a CRMF CertTemplate.
OSSL_CRMF_CERTTEMPLATE_get0_publicKey	Return the public key from a CRMF CertTemplate.
OSSL_CRMF_CERTTEMPLATE_get0_serialNumber	Return the serial number from a CRMF CertTemplate.
OSSL_CRMF_CERTTEMPLATE_get0_subject	Return the subject name from a CRMF CertTemplate.
OSSL_CRMF_CERTTEMPLATE_it	Return the ASN.1 item descriptor for OSSL_CRMF_CERTTEMPLATE.
OSSL_CRMF_CERTTEMPLATE_new	Allocate an empty OSSL_CRMF_CERTTEMPLATE structure.
OSSL_CRMF_ENCRYPTEDVALUE_free	Free an OSSL_CRMF_ENCRYPTEDVALUE structure and its contents.
OSSL_CRMF_ENCRYPTEDVALUE_get1_encCert	Decrypt the certificate held in an EncryptedValue.
OSSL_CRMF_ENCRYPTEDVALUE_it	Return the ASN.1 item descriptor for OSSL_CRMF_ENCRYPTEDVALUE.
OSSL_CRMF_ENCRYPTEDVALUE_new	Allocate an empty OSSL_CRMF_ENCRYPTEDVALUE structure.
OSSL_CRMF_MSGS_free	Free an OSSL_CRMF_MSGS stack and its contents.
OSSL_CRMF_MSGS_it	Return the ASN.1 item descriptor for OSSL_CRMF_MSGS.
OSSL_CRMF_MSGS_new	Allocate an empty OSSL_CRMF_MSGS stack.
OSSL_CRMF_MSGS_verify_popo	Verify proof-of-possession on a CRMF CertReqMessages sequence.
OSSL_CRMF_MSG_PKIPublicationInfo_push0_SinglePubInfo	Append a SinglePubInfo to a PKIPublicationInfo pubInfos list.
OSSL_CRMF_MSG_create_popo	Create and set the Proof-of-Possession field in a CRMF CertReqMsg.
OSSL_CRMF_MSG_dup	Duplicate an OSSL_CRMF_MSG structure.
OSSL_CRMF_MSG_free	Free an OSSL_CRMF_MSG structure and its contents.
OSSL_CRMF_MSG_get0_regCtrl_authenticator	Return the authenticator regCtrl from a CRMF CertReqMsg, if present.
OSSL_CRMF_MSG_get0_regCtrl_oldCertID	Return the oldCertID regCtrl from a CRMF CertReqMsg, if present.
OSSL_CRMF_MSG_get0_regCtrl_pkiPublicationInfo	Return the pkiPublicationInfo regCtrl from a CRMF CertReqMsg, if present.
OSSL_CRMF_MSG_get0_regCtrl_protocolEncrKey	Return the protocolEncrKey regCtrl from a CRMF CertReqMsg, if present.
OSSL_CRMF_MSG_get0_regCtrl_regToken	Return the regToken regCtrl from a CRMF CertReqMsg, if present.
OSSL_CRMF_MSG_get0_regInfo_certReq	Return the first certReq regInfo from a CRMF CertReqMsg, if present.
OSSL_CRMF_MSG_get0_regInfo_utf8Pairs	Return the first utf8Pairs regInfo from a CRMF CertReqMsg, if present.
OSSL_CRMF_MSG_get0_tmpl	Return the certTemplate from a CRMF CertReqMsg.
OSSL_CRMF_MSG_get_certReqId	Return the certReqId from a CRMF CertReqMsg.
OSSL_CRMF_MSG_it	Return the ASN.1 item descriptor for OSSL_CRMF_MSG.
OSSL_CRMF_MSG_new	Allocate an empty OSSL_CRMF_MSG structure.
OSSL_CRMF_MSG_push0_extension	Append an X.509 extension to the certTemplate of a CRMF CertReqMsg.
OSSL_CRMF_MSG_set0_SinglePubInfo	Set publication method and optional location in a SinglePubInfo.
OSSL_CRMF_MSG_set0_extensions	Set X.509 extensions in the certTemplate of a CRMF CertReqMsg.
OSSL_CRMF_MSG_set0_validity	Set optional validity times in the certTemplate of a CRMF CertReqMsg.
OSSL_CRMF_MSG_set1_regCtrl_authenticator	Set the authenticator regCtrl in a CRMF CertReqMsg.
OSSL_CRMF_MSG_set1_regCtrl_oldCertID	Set the oldCertID regCtrl in a CRMF CertReqMsg.
OSSL_CRMF_MSG_set1_regCtrl_pkiPublicationInfo	Set the pkiPublicationInfo regCtrl in a CRMF CertReqMsg.
OSSL_CRMF_MSG_set1_regCtrl_protocolEncrKey	Set the protocolEncrKey regCtrl in a CRMF CertReqMsg.
OSSL_CRMF_MSG_set1_regCtrl_regToken	Set the regToken regCtrl in a CRMF CertReqMsg.
OSSL_CRMF_MSG_set1_regInfo_certReq	Add a copy of a certReq regInfo value to a CRMF CertReqMsg.
OSSL_CRMF_MSG_set1_regInfo_utf8Pairs	Set the utf8Pairs regInfo in a CRMF CertReqMsg.
OSSL_CRMF_MSG_set_PKIPublicationInfo_action	Set the publication action in a PKIPublicationInfo.
OSSL_CRMF_MSG_set_certReqId	Set the certReqId field in a CRMF CertReqMsg.
OSSL_CRMF_PBMPARAMETER_free	Free an OSSL_CRMF_PBMPARAMETER structure and its contents.
OSSL_CRMF_PBMPARAMETER_it	Return the ASN.1 item descriptor for OSSL_CRMF_PBMPARAMETER.
OSSL_CRMF_PBMPARAMETER_new	Allocate an empty OSSL_CRMF_PBMPARAMETER structure.
OSSL_CRMF_PKIPUBLICATIONINFO_free	Free an OSSL_CRMF_PKIPUBLICATIONINFO structure and its contents.
OSSL_CRMF_PKIPUBLICATIONINFO_it	Return the ASN.1 item descriptor for OSSL_CRMF_PKIPUBLICATIONINFO.
OSSL_CRMF_PKIPUBLICATIONINFO_new	Allocate an empty OSSL_CRMF_PKIPUBLICATIONINFO structure.
OSSL_CRMF_SINGLEPUBINFO_free	Free an OSSL_CRMF_SINGLEPUBINFO structure and its contents.
OSSL_CRMF_SINGLEPUBINFO_it	Return the ASN.1 item descriptor for OSSL_CRMF_SINGLEPUBINFO.
OSSL_CRMF_SINGLEPUBINFO_new	Allocate an empty OSSL_CRMF_SINGLEPUBINFO structure.
OSSL_CRMF_pbm_new	Compute a Password-Based MAC (PBM) for CRMF POPO using the given parameters, message, and secret.
OSSL_CRMF_pbmp_new	Create a PBMParameter for password-based MAC POPO (RFC 4211 section 4.4).
OSSL_DECODER_CTX_add_decoder	Attach a fetched decoder implementation to a decoder context.
OSSL_DECODER_CTX_add_extra	Add decoder implementations that feed already-attached decoders (build chains).
OSSL_DECODER_CTX_free	Free a decoder context and invoke any registered cleanup callback.
OSSL_DECODER_CTX_get_cleanup	Return the cleanup callback currently set on a decoder context.
OSSL_DECODER_CTX_get_construct	Return the construct callback currently set on a decoder context.
OSSL_DECODER_CTX_get_construct_data	Return the construct-data pointer currently set on a decoder context.
OSSL_DECODER_CTX_get_num_decoders	Return how many decoder implementations are currently attached to ctx.
OSSL_DECODER_CTX_new	Create an empty decoder context for chaining and running decoders.
OSSL_DECODER_CTX_new_for_pkey	Create a decoder context preconfigured to decode an EVP_PKEY.
OSSL_DECODER_CTX_set_cleanup	Register a cleanup callback invoked from OSSL_DECODER_CTX_free().
OSSL_DECODER_CTX_set_construct	Register a callback invoked when a decoded object is constructed.
OSSL_DECODER_CTX_set_construct_data	Attach opaque application data passed to the construct and cleanup callbacks.
OSSL_DECODER_CTX_set_input_structure	Set the expected ASN.1 structure name for the encoded input.
OSSL_DECODER_CTX_set_input_type	Set the starting input type that limits which decoder chains are considered.
OSSL_DECODER_CTX_set_params	Apply an OSSL_PARAM array to all decoders currently attached to ctx.
OSSL_DECODER_CTX_set_passphrase	Supply a passphrase for decrypting encoded private-key input.
OSSL_DECODER_CTX_set_passphrase_cb	Set an OSSL_PASSPHRASE_CALLBACK used to prompt for a passphrase.
OSSL_DECODER_CTX_set_passphrase_ui	Set a UI method for passphrase prompting on a decoder context.
OSSL_DECODER_CTX_set_pem_password_cb	Set a legacy PEM password callback used to prompt for a passphrase.
OSSL_DECODER_CTX_set_selection	Set the key/component selection mask for decoding (OSSL_KEYMGMT_SELECT_*).
OSSL_DECODER_INSTANCE_get_decoder	Return the decoder implementation associated with a decoder instance.
OSSL_DECODER_INSTANCE_get_decoder_ctx	Return the provider decoder context for a decoder instance.
OSSL_DECODER_INSTANCE_get_input_structure	Return the input-structure name configured for a decoder instance.
OSSL_DECODER_INSTANCE_get_input_type	Return the input-type name configured for a decoder instance.
OSSL_DECODER_do_all_provided	Invoke a callback for every decoder provided by activated providers.
OSSL_DECODER_export	Export a reference from a decoder instance via a provider export callback.
OSSL_DECODER_fetch	Fetch a decoder implementation from providers by algorithm name.
OSSL_DECODER_free	Decrement the reference count of a fetched decoder and free it at zero.
OSSL_DECODER_from_bio	Run decoding from a BIO into objects handled by the context's construct callback.
OSSL_DECODER_from_data	Run decoding from a memory buffer, advancing *pdata past consumed bytes.
OSSL_DECODER_from_fp	Run decoding from a FILE stream (same as OSSL_DECODER_from_bio() with a file BIO).
OSSL_DECODER_get0_description	Return a human-readable description of a fetched decoder.
OSSL_DECODER_get0_name	Return the primary algorithm name used to fetch a decoder.
OSSL_DECODER_get0_properties	Return the property definition string of a fetched decoder.
OSSL_DECODER_get0_provider	Return the provider that supplies a fetched decoder.
OSSL_DECODER_get_params	Retrieve parameters from a decoder into an OSSL_PARAM array.
OSSL_DECODER_gettable_params	Return descriptors for parameters that can be retrieved from a decoder.
OSSL_DECODER_is_a	Test whether a decoder implements the algorithm identified by name.
OSSL_DECODER_names_do_all	Invoke a callback for every name/synonym associated with a decoder.
OSSL_DECODER_settable_ctx_params	Return descriptors for parameters that can be set on a decoder context.
OSSL_DECODER_up_ref	Increment the reference count of a fetched decoder.
OSSL_EC_curve_nid2name	Return the short name of a built-in elliptic curve given its NID.
OSSL_ENCODER_CTX_add_encoder	Add an encoder implementation to an encoder context's chain.
OSSL_ENCODER_CTX_add_extra	Add encoder implementations that continue an already-attached encoder chain.
OSSL_ENCODER_CTX_free	Free an encoder context and invoke any registered cleanup callback.
OSSL_ENCODER_CTX_get_num_encoders	Return how many encoder implementations are currently attached to ctx.
OSSL_ENCODER_CTX_new	Create an empty encoder context for chaining and running encoders.
OSSL_ENCODER_CTX_new_for_pkey	Create an encoder context preconfigured to encode an EVP_PKEY.
OSSL_ENCODER_CTX_set_cipher	Select the cipher used to encrypt encoded private-key material.
OSSL_ENCODER_CTX_set_cleanup	Register a cleanup callback invoked from OSSL_ENCODER_CTX_free().
OSSL_ENCODER_CTX_set_construct	Register the constructor that builds the provider-side object to encode.
OSSL_ENCODER_CTX_set_construct_data	Associate opaque construct data passed to the encoder construct callback.
OSSL_ENCODER_CTX_set_output_structure	Set the desired output structure name for the encoder chain (for example "pkcs8").
OSSL_ENCODER_CTX_set_output_type	Set the ending output type that a complete encoder chain must produce.
OSSL_ENCODER_CTX_set_params	Apply an OSSL_PARAM array to an encoder context.
OSSL_ENCODER_CTX_set_passphrase	Set a passphrase used when the encoder encrypts private-key output.
OSSL_ENCODER_CTX_set_passphrase_cb	Set an OSSL_PASSPHRASE_CALLBACK used to prompt for a passphrase.
OSSL_ENCODER_CTX_set_passphrase_ui	Set a UI method for passphrase prompting on an encoder context.
OSSL_ENCODER_CTX_set_pem_password_cb	Set a legacy PEM password callback used to prompt for a passphrase.
OSSL_ENCODER_CTX_set_selection	Set the key/component selection mask for encoding (OSSL_KEYMGMT_SELECT_*).
OSSL_ENCODER_INSTANCE_get_encoder	Return the OSSL_ENCODER implementation bound to an encoder instance.
OSSL_ENCODER_INSTANCE_get_encoder_ctx	Return the provider encoder context for an encoder instance.
OSSL_ENCODER_INSTANCE_get_output_structure	Return the output-structure name for an encoder instance (for example "pkcs8").
OSSL_ENCODER_INSTANCE_get_output_type	Return the output type name for an encoder instance (for example "DER" or "PEM").
OSSL_ENCODER_do_all_provided	Invoke a callback for every encoder provided by activated providers.
OSSL_ENCODER_fetch	Fetch an encoder implementation from providers by algorithm name.
OSSL_ENCODER_free	Decrement the reference count of a fetched encoder and free it at zero.
OSSL_ENCODER_get0_description	Return a human-readable description of an encoder implementation.
OSSL_ENCODER_get0_name	Return the primary algorithm name used to fetch an encoder.
OSSL_ENCODER_get0_properties	Return the property definition string of a fetched encoder.
OSSL_ENCODER_get0_provider	Return the provider that supplies a fetched encoder.
OSSL_ENCODER_get_params	Retrieve parameters from an encoder into an OSSL_PARAM array.
OSSL_ENCODER_gettable_params	Return descriptors for parameters that can be retrieved from an encoder.
OSSL_ENCODER_is_a	Test whether an encoder implements the algorithm identified by name.
OSSL_ENCODER_names_do_all	Invoke a callback for every name/synonym associated with an encoder.
OSSL_ENCODER_settable_ctx_params	Return the OSSL_PARAM descriptors that may be set on an encoder context.
OSSL_ENCODER_to_bio	Run encoding for a context and write the result to a BIO.
OSSL_ENCODER_to_data	Run encoding for a context and write the result into a memory buffer.
OSSL_ENCODER_to_fp	Run encoding for a context and write the result to a FILE stream.
OSSL_ENCODER_up_ref	Increment the reference count of a fetched encoder.
OSSL_ERR_STATE_free	Free a saved error-state object and its duplicated auxiliary data.
OSSL_ERR_STATE_new	Allocate an empty saved error-state object.
OSSL_ERR_STATE_restore	Append errors saved in es onto the current thread's error queue.
OSSL_ERR_STATE_save	Copy the current thread's error queue into es and clear the thread queue.
OSSL_ERR_STATE_save_to_mark	Move errors above the most recent mark from the thread queue into es.
OSSL_ESS_check_signing_certs	Verify that chain satisfies ESS signing-certificate identifiers in ss and/or ssv2.
OSSL_ESS_signing_cert_new_init	Build an ESS SigningCertificate attribute from a signer cert and optional chain.
OSSL_ESS_signing_cert_v2_new_init	Build an ESS SigningCertificateV2 attribute using digest hash_alg.
OSSL_HPKE_CTX_free	Free an HPKE context and clear associated secrets.
OSSL_HPKE_CTX_get_seq	Return the AEAD sequence number that will be used on the next seal/open call.
OSSL_HPKE_CTX_new	Create an HPKE context for the given mode, suite, and sender/receiver role.
OSSL_HPKE_CTX_set1_authpriv	Set the sender authentication private key for AUTH / PSKAUTH modes.
OSSL_HPKE_CTX_set1_authpub	Set the sender authentication public key for AUTH / PSKAUTH modes.
OSSL_HPKE_CTX_set1_ikme	Override the sender's ephemeral IKM used inside OSSL_HPKE_encap() (deterministic).
OSSL_HPKE_CTX_set1_psk	Set the pre-shared key and PSK identifier for PSK / PSKAUTH modes.
OSSL_HPKE_CTX_set_seq	Set the AEAD sequence number used on the next seal/open call (receivers only).
OSSL_HPKE_decap	Decapsulate a sender's encapsulated key and derive the shared HPKE secrets.
OSSL_HPKE_encap	Encapsulate to a recipient public key and derive sender HPKE secrets.
OSSL_HPKE_export	Derive an exporter secret from an established HPKE context (after encap/decap).
OSSL_HPKE_get_ciphertext_size	Return the ciphertext size needed to seal a plaintext of length clearlen.
OSSL_HPKE_get_grease_value	Produce GREASE-like random encap and ciphertext buffers sized for an HPKE suite.
OSSL_HPKE_get_public_encap_size	Return the encapsulated public-key size produced by OSSL_HPKE_encap() for suite.
OSSL_HPKE_get_recommended_ikmelen	Return the recommended IKM length for deterministic key generation with suite.
OSSL_HPKE_keygen	Generate an HPKE recipient key pair for suite, optionally from IKM.
OSSL_HPKE_open	Decrypt ciphertext with AEAD using secrets derived by a prior OSSL_HPKE_decap().
OSSL_HPKE_seal	Encrypt plaintext with AEAD using secrets derived by a prior OSSL_HPKE_encap().
OSSL_HPKE_str2suite	Parse a comma-separated "kem,kdf,aead" string into an OSSL_HPKE_SUITE.
OSSL_HPKE_suite_check	Test whether the local build supports the given HPKE suite.
OSSL_HTTP_REQ_CTX_add1_header	Append an HTTP request header name/value pair to an HTTP request context.
OSSL_HTTP_REQ_CTX_exchange	Exchange the prepared HTTP request and response, retrying non-blocking I/O until done or timeout.
OSSL_HTTP_REQ_CTX_free	Free an HTTP request context and its owned BIO/state.
OSSL_HTTP_REQ_CTX_get0_mem_bio	Return the internal memory BIO that accumulates the HTTP request headers for rctx.
OSSL_HTTP_REQ_CTX_get_resp_len	Return the number of response body bytes accumulated so far.
OSSL_HTTP_REQ_CTX_nbio	Continue a non-blocking HTTP request/response exchange on rctx.
OSSL_HTTP_REQ_CTX_nbio_d2i	Exchange an HTTP request non-blockingly and decode the response body as ASN.1.
OSSL_HTTP_REQ_CTX_new	Allocate a low-level HTTP request context bound to write and read BIOs.
OSSL_HTTP_REQ_CTX_set1_req	Finalize the request by attaching an ASN.1 DER body and Content-Type/Length headers.
OSSL_HTTP_REQ_CTX_set_expected	Configure response Content-Type, ASN.1, timeout, and keep-alive expectations on rctx.
OSSL_HTTP_REQ_CTX_set_max_response_hdr_lines	Limit how many HTTP response header lines rctx will accept.
OSSL_HTTP_REQ_CTX_set_max_response_length	Cap the maximum HTTP response body length accepted by rctx.
OSSL_HTTP_REQ_CTX_set_request_line	Set the first HTTP request line (method and request-target) on rctx.
OSSL_HTTP_adapt_proxy	Choose an HTTP(S) proxy string, applying no_proxy exclusions and environment defaults.
OSSL_HTTP_close	Close the HTTP connection and free the request context.
OSSL_HTTP_exchange	Perform the HTTP exchange and return a BIO of the response body.
OSSL_HTTP_get	Perform an HTTP GET and return a memory BIO holding the response body.
OSSL_HTTP_is_alive	Test whether an HTTP request context still has a keep-alive connection.
OSSL_HTTP_open	Open an HTTP (or HTTPS) connection and allocate a request context.
OSSL_HTTP_parse_url	Parse an http or https URL into allocated component strings.
OSSL_HTTP_proxy_connect	Perform an HTTP CONNECT through a proxy on an already-connected BIO.
OSSL_HTTP_set1_request	Configure the HTTP request path, headers, body, and response expectations on rctx.
OSSL_HTTP_transfer	Open (or reuse), send one HTTP request, receive the response, and optionally keep the connection.
OSSL_LIB_CTX_free	Free a library context and its associated provider/algorithm state.
OSSL_LIB_CTX_get0_global_default	Return the process-wide global default OSSL_LIB_CTX (not thread-local).
OSSL_LIB_CTX_load_config	Load providers and configuration directives from config_file into ctx.
OSSL_LIB_CTX_new	Allocate a new OpenSSL library context (provider / property scope).
OSSL_LIB_CTX_new_child	Create a child library context mirroring providers from a provider's parent context.
OSSL_LIB_CTX_new_from_dispatch	Allocate an OSSL_LIB_CTX wired to core BIO upcalls from a provider dispatch table.
OSSL_LIB_CTX_set0_default	Set the thread-local default OSSL_LIB_CTX used when NULL is passed for libctx.
OSSL_PARAM_BLD_free	Free an OSSL_PARAM builder allocated by OSSL_PARAM_BLD_new().
OSSL_PARAM_BLD_new	Allocate an empty OSSL_PARAM builder.
OSSL_PARAM_BLD_push_BN	Append a BIGNUM parameter by reference (must remain valid until OSSL_PARAM_BLD_to_param()).
OSSL_PARAM_BLD_push_BN_pad	Append a BIGNUM parameter padded to exactly sz bytes (by reference until to_param).
OSSL_PARAM_BLD_push_double	Append a double-precision floating-point parameter to a builder.
OSSL_PARAM_BLD_push_int	Append a signed int parameter to a builder (stored by value).
OSSL_PARAM_BLD_push_int32	Append a signed 32-bit integer parameter to a builder.
OSSL_PARAM_BLD_push_int64	Append a signed 64-bit integer parameter to a builder.
OSSL_PARAM_BLD_push_long	Append a signed long parameter to a builder (stored by value).
OSSL_PARAM_BLD_push_octet_ptr	Append an octet-string pointer parameter that remains referenced until OSSL_PARAM_free().
OSSL_PARAM_BLD_push_octet_string	Append an octet-string parameter by reference until OSSL_PARAM_BLD_to_param().
OSSL_PARAM_BLD_push_size_t	Append a size_t parameter to a builder (stored by value).
OSSL_PARAM_BLD_push_time_t	Append a time_t parameter to a builder (stored by value).
OSSL_PARAM_BLD_push_uint	Append an unsigned int parameter to a builder (stored by value).
OSSL_PARAM_BLD_push_uint32	Append an unsigned 32-bit integer parameter to a builder.
OSSL_PARAM_BLD_push_uint64	Append an unsigned 64-bit integer parameter to a builder.
OSSL_PARAM_BLD_push_ulong	Append an unsigned long parameter to a builder.
OSSL_PARAM_BLD_push_utf8_ptr	Append a UTF-8 string pointer parameter that remains referenced until OSSL_PARAM_free().
OSSL_PARAM_BLD_push_utf8_string	Append a UTF-8 string parameter by reference until OSSL_PARAM_BLD_to_param().
OSSL_PARAM_BLD_to_param	Convert a built-up parameter builder into a newly allocated OSSL_PARAM array.
OSSL_PARAM_allocate_from_text	Allocate and fill an OSSL_PARAM from a textual key/value using a param definition list.
OSSL_PARAM_construct_BN	Construct an OSSL_PARAM describing an arbitrary-precision integer in buf.
OSSL_PARAM_construct_double	Construct an OSSL_PARAM describing a double located at buf.
OSSL_PARAM_construct_end	Construct the terminating OSSL_PARAM sentinel for a parameter array.
OSSL_PARAM_construct_int	Construct an OSSL_PARAM that locates a signed int value.
OSSL_PARAM_construct_int32	Construct an OSSL_PARAM describing a signed 32-bit integer buffer.
OSSL_PARAM_construct_int64	Construct an OSSL_PARAM describing a signed 64-bit integer buffer.
OSSL_PARAM_construct_long	Construct an OSSL_PARAM that locates a signed long int value.
OSSL_PARAM_construct_octet_ptr	Construct an OSSL_PARAM that references an existing octet buffer via pointer.
OSSL_PARAM_construct_octet_string	Construct an OSSL_PARAM describing an octet-string buffer.
OSSL_PARAM_construct_size_t	Construct an OSSL_PARAM that locates a size_t value.
OSSL_PARAM_construct_time_t	Construct an OSSL_PARAM describing a time_t integer buffer.
OSSL_PARAM_construct_uint	Construct an OSSL_PARAM that locates an unsigned int value.
OSSL_PARAM_construct_uint32	Construct an OSSL_PARAM describing an unsigned 32-bit integer buffer.
OSSL_PARAM_construct_uint64	Construct an OSSL_PARAM describing an unsigned 64-bit integer at buf.
OSSL_PARAM_construct_ulong	Construct an OSSL_PARAM that locates an unsigned long value.
OSSL_PARAM_construct_utf8_ptr	Construct an OSSL_PARAM describing a pointer to a UTF-8 string buffer.
OSSL_PARAM_construct_utf8_string	Construct an OSSL_PARAM describing a UTF-8 string buffer.
OSSL_PARAM_dup	Deep-copy an OSSL_PARAM array, including owned string/octet buffers.
OSSL_PARAM_free	Free an OSSL_PARAM array allocated by OSSL_PARAM_dup() or OSSL_PARAM_merge().
OSSL_PARAM_get_BN	Decode an unsigned integer OSSL_PARAM into a newly allocated BIGNUM.
OSSL_PARAM_get_double	Read a floating-point value from an OSSL_PARAM into val.
OSSL_PARAM_get_int	Read an integer parameter value from p into *val.
OSSL_PARAM_get_int32	Read a signed 32-bit integer from an OSSL_PARAM.
OSSL_PARAM_get_int64	Read a signed 64-bit integer from an OSSL_PARAM.
OSSL_PARAM_get_long	Read a long integer parameter value from p into *val.
OSSL_PARAM_get_octet_ptr	Return a pointer to the octet data referenced by an OSSL_PARAM_OCTET_PTR parameter.
OSSL_PARAM_get_octet_string	Copy an OSSL_PARAM octet-string value into a caller buffer.
OSSL_PARAM_get_octet_string_ptr	Return a pointer to the octet-string contents of an OSSL_PARAM without copying.
OSSL_PARAM_get_size_t	Read an OSSL_PARAM value as a size_t.
OSSL_PARAM_get_time_t	Read a time_t value from an integer OSSL_PARAM.
OSSL_PARAM_get_uint	Read an unsigned int parameter value from p into *val.
OSSL_PARAM_get_uint32	Read an unsigned 32-bit integer from an OSSL_PARAM.
OSSL_PARAM_get_uint64	Read an OSSL_PARAM value as a uint64_t (with allowed integer type coercion).
OSSL_PARAM_get_ulong	Read an unsigned long integer from an OSSL_PARAM.
OSSL_PARAM_get_utf8_ptr	Read a UTF-8 pointer parameter without copying the string.
OSSL_PARAM_get_utf8_string	Copy a UTF-8 string OSSL_PARAM into a caller-provided or allocated buffer.
OSSL_PARAM_get_utf8_string_ptr	Return a pointer to the UTF-8 contents of an OSSL_PARAM without copying.
OSSL_PARAM_locate	Find the first OSSL_PARAM in p whose key matches key.
OSSL_PARAM_locate_const	Find the first OSSL_PARAM in a const array whose key matches key.
OSSL_PARAM_merge	Merge two OSSL_PARAM arrays, with p2 overriding duplicate keys from p1.
OSSL_PARAM_modified	Test whether an OSSL_PARAM was written (modified) by a set/get operation.
OSSL_PARAM_set_BN	Encode a BIGNUM into an unsigned-integer OSSL_PARAM buffer.
OSSL_PARAM_set_all_unmodified	Clear the modified flag on every element of an OSSL_PARAM array.
OSSL_PARAM_set_double	Write a double into the storage located by p.
OSSL_PARAM_set_int	Store a signed int into an OSSL_PARAM integer buffer.
OSSL_PARAM_set_int32	Store an int32_t value into an integer OSSL_PARAM.
OSSL_PARAM_set_int64	Store an int64_t into an OSSL_PARAM integer buffer.
OSSL_PARAM_set_long	Write val into parameter as a signed long (with range checks).
OSSL_PARAM_set_octet_ptr	Set an OSSL_PARAM that references an existing octet buffer without copying.
OSSL_PARAM_set_octet_string	Copy len octets from val into an octet-string OSSL_PARAM.
OSSL_PARAM_set_size_t	Store a size_t value into an integer OSSL_PARAM.
OSSL_PARAM_set_time_t	Store a time_t into an OSSL_PARAM integer buffer.
OSSL_PARAM_set_uint	Write an unsigned int into the storage located by p.
OSSL_PARAM_set_uint32	Store a uint32_t into an OSSL_PARAM integer buffer.
OSSL_PARAM_set_uint64	Store a uint64_t into an OSSL_PARAM integer buffer.
OSSL_PARAM_set_ulong	Write val into parameter as an unsigned long (with range checks).
OSSL_PARAM_set_utf8_ptr	Set a UTF-8 pointer parameter to refer to val (no copy).
OSSL_PARAM_set_utf8_string	Write a NUL-terminated UTF-8 string into an OSSL_PARAM destination.
OSSL_PROVIDER_add_builtin	Register a built-in provider init function under name in a library context.
OSSL_PROVIDER_available	Report whether a named provider is available in a library context.
OSSL_PROVIDER_do_all	Invoke a callback for every provider available in a library context.
OSSL_PROVIDER_get0_default_search_path	Return the default filesystem search path for loading providers (borrowed).
OSSL_PROVIDER_get0_dispatch	Return the provider's dispatch table of core functions (borrowed).
OSSL_PROVIDER_get0_name	Return the registered name of a provider (borrowed).
OSSL_PROVIDER_get0_provider_ctx	Return the provider's opaque provider-context pointer (borrowed).
OSSL_PROVIDER_get_capabilities	Query a named provider capability via a callback.
OSSL_PROVIDER_get_params	Fetch provider parameters into a caller-supplied OSSL_PARAM array.
OSSL_PROVIDER_gettable_params	Return the gettable parameter descriptors for a provider (borrowed).
OSSL_PROVIDER_load	Load a provider by name into a library context.
OSSL_PROVIDER_load_ex	Load a provider by name with an optional parameter array.
OSSL_PROVIDER_query_operation	Query algorithms a provider implements for an operation.
OSSL_PROVIDER_self_test	Run the provider's self-test routine, if implemented.
OSSL_PROVIDER_set_default_search_path	Set the default filesystem search path used when loading providers.
OSSL_PROVIDER_try_load	Try to load a provider by name, optionally keeping fallback providers.
OSSL_PROVIDER_try_load_ex	Try to load a provider with parameters, optionally keeping fallback providers.
OSSL_PROVIDER_unload	Unload a provider, running its teardown and releasing its resources.
OSSL_PROVIDER_unquery_operation	Release algorithm results previously returned by OSSL_PROVIDER_query_operation().
OSSL_QUIC_client_method	Return the SSL_METHOD for non-thread-assisted QUIC client use.
OSSL_QUIC_client_thread_method	Return the SSL_METHOD for thread-assisted QUIC client use.
OSSL_SELF_TEST_free	Free an OSSL_SELF_TEST object allocated by OSSL_SELF_TEST_new().
OSSL_SELF_TEST_get_callback	Retrieve the self-test callback previously set on a library context.
OSSL_SELF_TEST_new	Allocate an OSSL_SELF_TEST handle that invokes cb during self-test phases.
OSSL_SELF_TEST_onbegin	Signal the start of a self-test block (callback phase "Start").
OSSL_SELF_TEST_oncorrupt_byte	Optionally corrupt the first byte of bytes when the callback requests failure injection.
OSSL_SELF_TEST_onend	Signal the end of a self-test block with pass/fail (callback phase "Pass" or "Fail").
OSSL_SELF_TEST_set_callback	Register a callback invoked during provider self-test operations.
OSSL_STACK_OF_X509_free	Free a STACK_OF(X509) and the certificates it owns (sk_X509_pop_free).
OSSL_STORE_INFO_free	Free an OSSL_STORE_INFO and the object it owns.
OSSL_STORE_INFO_get0_CERT	Return the X.509 certificate from a store object (borrowed).
OSSL_STORE_INFO_get0_CRL	Return the CRL from a store object (borrowed).
OSSL_STORE_INFO_get0_NAME	Return the name string from an OSSL_STORE_INFO_NAME object (borrowed).
OSSL_STORE_INFO_get0_NAME_description	Return the optional description for an OSSL_STORE_INFO_NAME (borrowed).
OSSL_STORE_INFO_get0_PARAMS	Return the key-parameter EVP_PKEY from a store object (borrowed).
OSSL_STORE_INFO_get0_PKEY	Return the key EVP_PKEY from a store object (borrowed).
OSSL_STORE_INFO_get0_PUBKEY	Return the public-key EVP_PKEY from a store object (borrowed).
OSSL_STORE_INFO_get0_data	Return the typed object pointer from a store info when type matches (borrowed).
OSSL_STORE_INFO_get1_CERT	Return a new reference to the X.509 certificate from a store object.
OSSL_STORE_INFO_get1_CRL	Return a new reference to the CRL from a store object.
OSSL_STORE_INFO_get1_NAME	Return a copy of the name string from an OSSL_STORE_INFO_NAME object.
OSSL_STORE_INFO_get1_NAME_description	Return a copy of the optional description for an OSSL_STORE_INFO_NAME.
OSSL_STORE_INFO_get1_PARAMS	Return a new reference to the key-parameter EVP_PKEY from a store object.
OSSL_STORE_INFO_get1_PKEY	Return a new reference to the key EVP_PKEY from a store object.
OSSL_STORE_INFO_get1_PUBKEY	Return a new reference to the public-key EVP_PKEY from a store object.
OSSL_STORE_INFO_get_type	Return the OSSL_STORE_INFO_* type code of a store object.
OSSL_STORE_INFO_new	Create an OSSL_STORE_INFO that takes ownership of data for type.
OSSL_STORE_INFO_new_CERT	Create an OSSL_STORE_INFO holding an X.509 certificate (takes ownership of x509).
OSSL_STORE_INFO_new_CRL	Create an OSSL_STORE_INFO holding a CRL (takes ownership of crl).
OSSL_STORE_INFO_new_NAME	Create an OSSL_STORE_INFO_NAME holding name (takes ownership of name).
OSSL_STORE_INFO_new_PARAMS	Create an OSSL_STORE_INFO holding key parameters (takes ownership of params).
OSSL_STORE_INFO_new_PKEY	Create an OSSL_STORE_INFO holding a key (takes ownership of pkey).
OSSL_STORE_INFO_new_PUBKEY	Create an OSSL_STORE_INFO holding a public key (takes ownership of pubkey).
OSSL_STORE_INFO_set0_NAME_description	Attach an optional description string to an OSSL_STORE_INFO_NAME.
OSSL_STORE_INFO_type_string	Return a static string name for an OSSL_STORE_INFO_* type code.
OSSL_STORE_LOADER_do_all_provided	Invoke a callback for every store loader provided in a library context.
OSSL_STORE_LOADER_fetch	Fetch a provider-based OSSL_STORE loader for a URI scheme.
OSSL_STORE_LOADER_free	Release a reference to a store loader.
OSSL_STORE_LOADER_get0_description	Return a human-readable description of a fetched store loader (borrowed).
OSSL_STORE_LOADER_get0_engine [deprecated]	Return the ENGINE associated with a deprecated store loader (borrowed).
OSSL_STORE_LOADER_get0_properties	Return the property definition string of a fetched store loader (borrowed).
OSSL_STORE_LOADER_get0_provider	Return the provider that implements a fetched store loader (borrowed).
OSSL_STORE_LOADER_get0_scheme [deprecated]	Return the URI scheme registered for a deprecated store loader (borrowed).
OSSL_STORE_LOADER_is_a	Test whether a store loader implements the given URI scheme name.
OSSL_STORE_LOADER_names_do_all	Invoke a callback for every scheme name of a store loader.
OSSL_STORE_LOADER_new [deprecated]	Allocate a deprecated ENGINE-based store loader for scheme; prefer OSSL_STORE_LOADER_fetch().
OSSL_STORE_LOADER_set_attach [deprecated]	Set the attach callback on a deprecated ENGINE-based store loader.
OSSL_STORE_LOADER_set_close [deprecated]	Set the close callback on a deprecated ENGINE-based store loader.
OSSL_STORE_LOADER_set_ctrl [deprecated]	Set the ctrl callback on a deprecated ENGINE-based store loader.
OSSL_STORE_LOADER_set_eof [deprecated]	Set the eof callback on a deprecated ENGINE-based store loader.
OSSL_STORE_LOADER_set_error [deprecated]	Set the error callback on a deprecated ENGINE-based store loader.
OSSL_STORE_LOADER_set_expect [deprecated]	Set the expect callback on a deprecated ENGINE-based store loader.
OSSL_STORE_LOADER_set_find [deprecated]	Set the find callback on a deprecated ENGINE-based store loader.
OSSL_STORE_LOADER_set_load [deprecated]	Set the load callback on a deprecated ENGINE-based store loader.
OSSL_STORE_LOADER_set_open [deprecated]	Set the open callback on a deprecated ENGINE-based store loader.
OSSL_STORE_LOADER_set_open_ex [deprecated]	Set the open_ex callback on a deprecated ENGINE-based store loader.
OSSL_STORE_LOADER_up_ref	Increment the reference count on a fetched store loader.
OSSL_STORE_SEARCH_by_alias	Build a search criterion matching an alias string.
OSSL_STORE_SEARCH_by_issuer_serial	Build a search criterion matching an issuer name and serial number.
OSSL_STORE_SEARCH_by_key_fingerprint	Build a search criterion matching a key fingerprint.
OSSL_STORE_SEARCH_by_name	Build a search criterion matching a subject (certs) or issuer (CRLs) name.
OSSL_STORE_SEARCH_free	Free an OSSL_STORE_SEARCH criterion (does not free caller-owned inputs).
OSSL_STORE_SEARCH_get0_bytes	Return the fingerprint or alias byte string from a search criterion (borrowed).
OSSL_STORE_SEARCH_get0_digest	Return the digest method from a key-fingerprint search criterion (borrowed).
OSSL_STORE_SEARCH_get0_name	Return the X509_NAME from a by-name or issuer-serial search criterion (borrowed).
OSSL_STORE_SEARCH_get0_serial	Return the serial number from an issuer-serial search criterion (borrowed).
OSSL_STORE_SEARCH_get0_string	Return the alias string from a search criterion (borrowed).
OSSL_STORE_SEARCH_get_type	Return the OSSL_STORE_SEARCH_BY_* type of a search criterion.
OSSL_STORE_attach	Open an OSSL_STORE channel that reads from a BIO using a named scheme.
OSSL_STORE_close	Close an OSSL_STORE channel and free its context.
OSSL_STORE_ctrl [deprecated]	Send a loader-specific or common control command to an open store (deprecated).
OSSL_STORE_delete	Delete the object identified by uri from its store backend.
OSSL_STORE_do_all_loaders [deprecated]	Invoke a callback for every registered store loader (deprecated).
OSSL_STORE_eof	Test whether an open store has no more objects to load.
OSSL_STORE_error	Test whether the last store operation recorded an error on ctx.
OSSL_STORE_expect	Restrict an open store to a single expected OSSL_STORE_INFO_* type.
OSSL_STORE_find	Attach a search criterion to an open store before loading.
OSSL_STORE_load	Load the next object from an open OSSL_STORE channel.
OSSL_STORE_open	Open an OSSL_STORE channel for the given URI.
OSSL_STORE_open_ex	Open an OSSL_STORE channel with an explicit library context and parameters.
OSSL_STORE_register_loader [deprecated]	Register a deprecated ENGINE-based store loader; prefer OSSL_STORE_LOADER_fetch().
OSSL_STORE_supports_search	Test whether the loader for an open store supports a search type.
OSSL_STORE_unregister_loader [deprecated]	Unregister a deprecated ENGINE-based store loader by URI scheme.
OSSL_STORE_vctrl [deprecated]	va_list form of OSSL_STORE_ctrl() (deprecated).
OSSL_default_cipher_list	Return the built-in default TLSv1.2 (and earlier) cipher-list string.
OSSL_default_ciphersuites	Return the built-in default TLSv1.3 ciphersuite list string.
OSSL_get_max_threads	Return the current maximum thread-pool size configured for a library context.
OSSL_get_thread_support_flags	Return bitmask of thread features supported by this OpenSSL build.
OSSL_parse_url	Parse url into allocated scheme/user/host/port/path/query/fragment components.
OSSL_provider_init	Exported provider entry point; each provider module must define this symbol.
OSSL_set_max_threads	Set the maximum number of threads the OpenSSL thread pool may use for ctx.
OSSL_sleep	Sleep the calling thread for approximately millis milliseconds.
OSSL_trace_begin	Begin a locked trace output group for category and return its BIO channel.
OSSL_trace_enabled	Test whether a trace channel is currently attached for category.
OSSL_trace_end	End a locked trace output group and release the trace BIO channel.
OSSL_trace_get_category_name	Map an OSSL_TRACE_CATEGORY_* number to its canonical name string.
OSSL_trace_get_category_num	Map a trace category name to its OSSL_TRACE_CATEGORY_* number.
OSSL_trace_set_callback	Enable tracing for category by sending output to callback.
OSSL_trace_set_channel	Attach a BIO as the simple trace channel for category (ownership transfers on success).
OSSL_trace_set_prefix	Set the text printed before each trace group for category.
OSSL_trace_set_suffix	Set the text printed after each trace group for category.
OSSL_trace_string	Write data to a trace BIO as text, optionally masking controls and truncating.
OTHERNAME_cmp	Compare two otherName values by type OID and typed value.
OTHERNAME_free	Free an OTHERNAME structure and its contents.
OTHERNAME_it	Return the ASN.1 item descriptor for OTHERNAME.
OTHERNAME_new	Allocate a new otherName GeneralName payload.
OpenSSL_version	Return a descriptive string about the running OpenSSL build.
OpenSSL_version_num	Return the packed OpenSSL version number (OPENSSL_VERSION_NUMBER).
PBE2PARAM_free	Free a PKCS#5 PBES2 parameter structure and its contents.
PBE2PARAM_it	Return the ASN.1 item descriptor for PBE2PARAM.
PBE2PARAM_new	Allocate an empty PKCS#5 PBES2 parameter structure.
PBEPARAM_free	Free a PKCS#5 PBES1 parameter structure (salt and iteration count) and its contents.
PBEPARAM_it	Return the ASN.1 item descriptor for PBEPARAM.
PBEPARAM_new	Allocate an empty PKCS#5 PBES1 parameter structure (salt and iteration count).
PBKDF2PARAM_free	Free a PKCS#5 PBKDF2 parameter structure and its contents.
PBKDF2PARAM_it	Return the ASN.1 item descriptor for PBKDF2PARAM.
PBKDF2PARAM_new	Allocate an empty PKCS#5 PBKDF2 parameter structure.
PEM_ASN1_read	Read a named PEM object from a FILE and decode it with d2i.
PEM_ASN1_read_bio	Read a named PEM object from a BIO and decode it with d2i.
PEM_ASN1_write	Encode an ASN.1 object with i2d and write it as PEM to a FILE.
PEM_ASN1_write_bio	Encode an ASN.1 object with i2d and write it as a PEM block to a BIO.
PEM_SignFinal	Finalize a PEM signing operation and write the signature.
PEM_SignInit	Initialize an EVP_MD_CTX for signing with digest type (used by PEM_Sign*).
PEM_SignUpdate	Absorb more message bytes into a PEM signing digest context.
PEM_X509_INFO_read	Read certificates, CRLs, and keys from a PEM FILE into X509_INFO objects.
PEM_X509_INFO_read_bio	Read successive PEM objects from a BIO into a stack of X509_INFO.
PEM_X509_INFO_read_bio_ex	Read successive PEM X509_INFO objects (cert, CRL, and/or key) from a BIO with an explicit library context.
PEM_X509_INFO_read_ex	Read certificates, CRLs, and keys from a PEM FILE with a library context.
PEM_X509_INFO_write_bio	Write the certificate, CRL, and/or private key from an X509_INFO as PEM.
PEM_bytes_read_bio	Read a named PEM object from a BIO, decrypting if needed, and return its DER bytes.
PEM_bytes_read_bio_secmem	Read a named PEM object from a BIO into secure memory, decrypting if needed.
PEM_def_callback	Default pem_password_cb that prompts on the terminal (or copies userdata).
PEM_dek_info	Append a DEK-Info encapsulation header (cipher name and hex IV) to a PEM header.
PEM_do_header	Decrypt PEM payload bytes in place using cipher info and a password callback.
PEM_get_EVP_CIPHER_INFO	Parse a PEM encapsulation header for cipher and IV (legacy PEM encryption).
PEM_proc_type	Append a Proc-Type encapsulation header line to a PEM header buffer.
PEM_read	Read one PEM object from a FILE, returning name, header, and decoded data.
PEM_read_DHparams [deprecated]	Read Diffie-Hellman domain parameters from a PEM-encoded FILE (deprecated).
PEM_read_DSAPrivateKey [deprecated]	Read a traditional DSA private key from a PEM-encoded FILE (deprecated).
PEM_read_DSA_PUBKEY [deprecated]	Read a DSA SubjectPublicKeyInfo from a PEM-encoded FILE (deprecated).
PEM_read_DSAparams [deprecated]	Read DSA domain parameters from a PEM-encoded FILE (deprecated).
PEM_read_ECPKParameters [deprecated]	Read EC domain parameters (ECPKParameters) from a PEM-encoded FILE (deprecated).
PEM_read_ECPrivateKey [deprecated]	Read an EC private key from a PEM-encoded FILE (deprecated).
PEM_read_EC_PUBKEY [deprecated]	Read an EC SubjectPublicKeyInfo from a PEM-encoded FILE (deprecated).
PEM_read_NETSCAPE_CERT_SEQUENCE	Read a Netscape certificate sequence from a PEM-encoded FILE stream.
PEM_read_PKCS7	Read a PKCS#7 structure from a PEM-encoded FILE stream.
PEM_read_PKCS8	Read a PKCS#8 encrypted private-key envelope (X509_SIG) from a PEM-encoded FILE.
PEM_read_PKCS8_PRIV_KEY_INFO	Read a PKCS#8 PrivateKeyInfo from a PEM-encoded FILE stream.
PEM_read_PUBKEY	Read a SubjectPublicKeyInfo public key from a PEM-encoded FILE.
PEM_read_PUBKEY_ex	Read a SubjectPublicKeyInfo public key from a PEM FILE with a library context.
PEM_read_PrivateKey	Read a private key from a PEM-encoded FILE (traditional or PKCS#8).
PEM_read_PrivateKey_ex	Read a private key from a PEM-encoded FILE with an explicit library context.
PEM_read_RSAPrivateKey [deprecated]	Read a traditional RSA private key from a PEM-encoded FILE (deprecated).
PEM_read_RSAPublicKey [deprecated]	Read a traditional PKCS#1 RSA public key from a PEM-encoded FILE (deprecated).
PEM_read_RSA_PUBKEY [deprecated]	Read an RSA SubjectPublicKeyInfo from a PEM-encoded FILE (deprecated).
PEM_read_SSL_SESSION	Read an SSL_SESSION from a PEM-encoded FILE stream.
PEM_read_X509	Read an X.509 certificate from a PEM-encoded FILE stream.
PEM_read_X509_AUX	Read a trusted X.509 certificate (with aux trust info) from a PEM FILE.
PEM_read_X509_CRL	Read an X.509 CRL from a PEM-encoded FILE stream.
PEM_read_X509_PUBKEY	Read an X.509 SubjectPublicKeyInfo from a PEM-encoded FILE stream.
PEM_read_X509_REQ	Read a certificate request from a PEM-encoded FILE stream.
PEM_read_bio	Read one PEM object from a BIO, returning name, header, and decoded data.
PEM_read_bio_DHparams [deprecated]	Read Diffie-Hellman domain parameters from a PEM-encoded BIO (deprecated).
PEM_read_bio_DSAPrivateKey [deprecated]	Read a traditional DSA private key from a PEM-encoded BIO (deprecated).
PEM_read_bio_DSA_PUBKEY [deprecated]	Read a DSA SubjectPublicKeyInfo from a PEM-encoded BIO (deprecated).
PEM_read_bio_DSAparams [deprecated]	Read DSA domain parameters from a PEM-encoded BIO (deprecated).
PEM_read_bio_ECPKParameters [deprecated]	Read EC domain parameters (ECPKParameters) from a PEM-encoded BIO (deprecated).
PEM_read_bio_ECPrivateKey [deprecated]	Read an EC private key from a PEM-encoded BIO (deprecated).
PEM_read_bio_EC_PUBKEY [deprecated]	Read an EC SubjectPublicKeyInfo from a PEM-encoded BIO (deprecated).
PEM_read_bio_NETSCAPE_CERT_SEQUENCE	Read a Netscape certificate sequence from a PEM-encoded BIO.
PEM_read_bio_PKCS7	Read a PKCS#7 structure from a PEM-encoded BIO.
PEM_read_bio_PKCS8	Read a PKCS#8 encrypted private-key envelope (X509_SIG) from a PEM-encoded BIO.
PEM_read_bio_PKCS8_PRIV_KEY_INFO	Read a PKCS#8 PrivateKeyInfo from a PEM-encoded BIO.
PEM_read_bio_PUBKEY	Read a SubjectPublicKeyInfo public key from a PEM-encoded BIO.
PEM_read_bio_PUBKEY_ex	Read a SubjectPublicKeyInfo public key from a PEM BIO with a library context.
PEM_read_bio_Parameters	Read algorithm parameters (e.g. DH/DSA) from PEM into an EVP_PKEY.
PEM_read_bio_Parameters_ex	Read algorithm parameters (e.g. DH/DSA) from PEM into an EVP_PKEY with a library context.
PEM_read_bio_PrivateKey	Read a private key from a PEM-encoded BIO (traditional or PKCS#8).
PEM_read_bio_PrivateKey_ex	Read a private key from a PEM-encoded BIO with an explicit library context.
PEM_read_bio_RSAPrivateKey [deprecated]	Read a traditional RSA private key from a PEM-encoded BIO (deprecated).
PEM_read_bio_RSAPublicKey [deprecated]	Read a traditional PKCS#1 RSA public key from a PEM-encoded BIO (deprecated).
PEM_read_bio_RSA_PUBKEY [deprecated]	Read an RSA SubjectPublicKeyInfo from a PEM-encoded BIO (deprecated).
PEM_read_bio_SSL_SESSION	Read an SSL_SESSION from a PEM-encoded BIO.
PEM_read_bio_X509	Read an X.509 certificate from a PEM-encoded BIO.
PEM_read_bio_X509_AUX	Read a trusted X.509 certificate (with aux trust info) from a PEM BIO.
PEM_read_bio_X509_CRL	Read an X.509 CRL from a PEM-encoded BIO.
PEM_read_bio_X509_PUBKEY	Read an X.509 SubjectPublicKeyInfo from a PEM-encoded BIO.
PEM_read_bio_X509_REQ	Read a certificate request from a PEM-encoded BIO.
PEM_read_bio_ex	Read one PEM object from a BIO with controllable decoding behaviour.
PEM_write	Write a PEM object (header, optional headers, and base64 body) to a FILE.
PEM_write_DHparams [deprecated]	Write Diffie-Hellman domain parameters to a FILE in PEM form (deprecated).
PEM_write_DHxparams [deprecated]	Write Diffie-Hellman X9.42 domain parameters to a FILE in PEM form (deprecated).
PEM_write_DSAPrivateKey [deprecated]	Write a traditional DSA private key to a FILE in PEM form (deprecated).
PEM_write_DSA_PUBKEY [deprecated]	Write a DSA SubjectPublicKeyInfo to a FILE in PEM form (deprecated).
PEM_write_DSAparams [deprecated]	Write DSA domain parameters to a FILE in PEM form (deprecated).
PEM_write_ECPKParameters [deprecated]	Write EC domain parameters (ECPKParameters) to a FILE in PEM form (deprecated).
PEM_write_ECPrivateKey [deprecated]	Write an EC private key to a FILE in PEM form (deprecated).
PEM_write_EC_PUBKEY [deprecated]	Write an EC SubjectPublicKeyInfo to a FILE in PEM form (deprecated).
PEM_write_NETSCAPE_CERT_SEQUENCE	Write a Netscape certificate sequence to a FILE stream in PEM form.
PEM_write_PKCS7	Write a PKCS#7 structure to a FILE stream in PEM form.
PEM_write_PKCS8	Write a PKCS#8 encrypted private-key envelope (X509_SIG) to a FILE in PEM form.
PEM_write_PKCS8PrivateKey	Write a private key as PEM PKCS#8 EncryptedPrivateKeyInfo (PKCS#5 v2.0).
PEM_write_PKCS8PrivateKey_nid	Write a private key as PEM PKCS#8 using a PKCS#5 v1.5 / PKCS#12 PBE NID.
PEM_write_PKCS8_PRIV_KEY_INFO	Write a PKCS#8 PrivateKeyInfo to a FILE stream in PEM form.
PEM_write_PUBKEY	Write a SubjectPublicKeyInfo public key to a FILE in PEM form.
PEM_write_PUBKEY_ex	Write a SubjectPublicKeyInfo public key to a FILE with a library context.
PEM_write_PrivateKey	Write a private key to a FILE as PEM, preferring PKCS#8 EncryptedPrivateKeyInfo.
PEM_write_PrivateKey_ex	Write a private key to a FILE as PEM with an explicit library context.
PEM_write_RSAPrivateKey [deprecated]	Write a traditional RSA private key to a FILE in PEM form (deprecated).
PEM_write_RSAPublicKey [deprecated]	Write a traditional PKCS#1 RSA public key to a FILE in PEM form (deprecated).
PEM_write_RSA_PUBKEY [deprecated]	Write an RSA SubjectPublicKeyInfo to a FILE in PEM form (deprecated).
PEM_write_SSL_SESSION	Write an SSL_SESSION to a FILE stream in PEM form.
PEM_write_X509	Write an X.509 certificate to a FILE stream in PEM form.
PEM_write_X509_AUX	Write a trusted X.509 certificate (with aux trust info) to a FILE as PEM.
PEM_write_X509_CRL	Write an X.509 CRL to a FILE stream in PEM form.
PEM_write_X509_PUBKEY	Write an X.509 SubjectPublicKeyInfo to a FILE stream in PEM form.
PEM_write_X509_REQ	Write a certificate request to a FILE stream in PEM form.
PEM_write_X509_REQ_NEW	Write a certificate request using the legacy "NEW CERTIFICATE REQUEST" PEM label.
PEM_write_bio	Write a PEM object (header, optional headers, and base64 body) to a BIO.
PEM_write_bio_ASN1_stream	Stream-encode an ASN.1 value as a PEM object, optionally pulling content from in.
PEM_write_bio_CMS_stream	Write a CMS ContentInfo as a PEM CMS message, optionally streaming content from in.
PEM_write_bio_DHparams [deprecated]	Write Diffie-Hellman domain parameters to a BIO in PEM form (deprecated).
PEM_write_bio_DHxparams [deprecated]	Write Diffie-Hellman X9.42 domain parameters to a BIO in PEM form (deprecated).
PEM_write_bio_DSAPrivateKey [deprecated]	Write a traditional DSA private key to a BIO in PEM form (deprecated).
PEM_write_bio_DSA_PUBKEY [deprecated]	Write a DSA SubjectPublicKeyInfo to a BIO in PEM form (deprecated).
PEM_write_bio_DSAparams [deprecated]	Write DSA domain parameters to a BIO in PEM form (deprecated).
PEM_write_bio_ECPKParameters [deprecated]	Write EC domain parameters (ECPKParameters) to a BIO in PEM form (deprecated).
PEM_write_bio_ECPrivateKey [deprecated]	Write an EC private key to a BIO in PEM form (deprecated).
PEM_write_bio_EC_PUBKEY [deprecated]	Write an EC SubjectPublicKeyInfo to a BIO in PEM form (deprecated).
PEM_write_bio_NETSCAPE_CERT_SEQUENCE	Write a Netscape certificate sequence to a BIO in PEM form.
PEM_write_bio_PKCS7	Write a PKCS#7 structure to a BIO in PEM form.
PEM_write_bio_PKCS7_stream	Write a PKCS#7 structure as PEM, streaming content from in when required.
PEM_write_bio_PKCS8	Write a PKCS#8 encrypted private-key envelope (X509_SIG) to a BIO in PEM form.
PEM_write_bio_PKCS8PrivateKey	Write a private key as PEM PKCS#8 EncryptedPrivateKeyInfo (PKCS#5 v2.0).
PEM_write_bio_PKCS8PrivateKey_nid	Write a private key as PEM PKCS#8 using a PKCS#5 v1.5 / PKCS#12 PBE NID.
PEM_write_bio_PKCS8_PRIV_KEY_INFO	Write a PKCS#8 PrivateKeyInfo to a BIO in PEM form.
PEM_write_bio_PUBKEY	Write a SubjectPublicKeyInfo public key to a BIO in PEM form.
PEM_write_bio_PUBKEY_ex	Write a SubjectPublicKeyInfo public key to a BIO with a library context.
PEM_write_bio_Parameters	Write algorithm parameters from an EVP_PKEY to a BIO in PEM form.
PEM_write_bio_PrivateKey	Write a private key to a BIO as PEM, preferring PKCS#8 EncryptedPrivateKeyInfo.
PEM_write_bio_PrivateKey_ex	Write a private key to a BIO as PEM with an explicit library context.
PEM_write_bio_PrivateKey_traditional	Write a private key to a BIO using the legacy "traditional" PEM private-key format.
PEM_write_bio_RSAPrivateKey [deprecated]	Write a traditional RSA private key to a BIO in PEM form (deprecated).
PEM_write_bio_RSAPublicKey [deprecated]	Write a traditional PKCS#1 RSA public key to a BIO in PEM form (deprecated).
PEM_write_bio_RSA_PUBKEY [deprecated]	Write an RSA SubjectPublicKeyInfo to a BIO in PEM form (deprecated).
PEM_write_bio_SSL_SESSION	Write an SSL_SESSION to a BIO in PEM form.
PEM_write_bio_X509	Write an X.509 certificate to a BIO in PEM form.
PEM_write_bio_X509_AUX	Write a trusted X.509 certificate (with aux trust info) to a BIO as PEM.
PEM_write_bio_X509_CRL	Write an X.509 CRL to a BIO in PEM form.
PEM_write_bio_X509_PUBKEY	Write an X.509 SubjectPublicKeyInfo to a BIO in PEM form.
PEM_write_bio_X509_REQ	Write a certificate request to a BIO in PEM form.
PEM_write_bio_X509_REQ_NEW	Write a certificate request using the legacy "NEW CERTIFICATE REQUEST" PEM label.
PKCS12_AUTHSAFES_it	Return the ASN.1 item descriptor for a SEQUENCE OF PKCS7 (authSafes).
PKCS12_BAGS_free	Free a PKCS12_BAGS structure and its contents.
PKCS12_BAGS_it	Return the ASN.1 item descriptor for PKCS12_BAGS.
PKCS12_BAGS_new	Allocate an empty PKCS12_BAGS structure.
PKCS12_MAC_DATA_free	Free a PKCS12_MAC_DATA structure and its contents.
PKCS12_MAC_DATA_it	Return the ASN.1 item descriptor for PKCS12_MAC_DATA.
PKCS12_MAC_DATA_new	Allocate an empty PKCS12_MAC_DATA structure.
PKCS12_PBE_add	Register PKCS#12 PBE algorithms (historical no-op; algorithms are built in).
PKCS12_PBE_keyivgen	Initialise a cipher context for PKCS#12 PBE encryption or decryption.
PKCS12_PBE_keyivgen_ex	Initialise a cipher context for PKCS#12 PBE encryption or decryption.
PKCS12_SAFEBAGS_it	Return the ASN.1 item descriptor for a SEQUENCE OF PKCS12_SAFEBAG.
PKCS12_SAFEBAG_create0_p8inf	Create an unencrypted keyBag safeBag from PKCS#8 private key info.
PKCS12_SAFEBAG_create0_pkcs8	Create a pkcs8ShroudedKeyBag safeBag wrapping an already-encrypted PKCS#8 key.
PKCS12_SAFEBAG_create_cert	Create a certBag safeBag containing the supplied certificate.
PKCS12_SAFEBAG_create_crl	Create a crlBag safeBag containing the supplied CRL.
PKCS12_SAFEBAG_create_pkcs8_encrypt	Create an encrypted pkcs8ShroudedKeyBag safeBag from PKCS#8 private key info.
PKCS12_SAFEBAG_create_pkcs8_encrypt_ex	Create an encrypted pkcs8ShroudedKeyBag safeBag from PKCS#8 private key info.
PKCS12_SAFEBAG_create_secret	Create a secretBag safeBag with the supplied ASN.1 value.
PKCS12_SAFEBAG_free	Free a PKCS12_SAFEBAG structure and its contents.
PKCS12_SAFEBAG_get0_attr	Get a PKCS#12 safeBag attribute value by NID.
PKCS12_SAFEBAG_get0_attrs	Return the attribute stack attached to a safeBag without copying it.
PKCS12_SAFEBAG_get0_bag_obj	Retrieve the ASN.1 object contained within a safeBag.
PKCS12_SAFEBAG_get0_bag_type	Get the type of the object contained within a safeBag as an OID.
PKCS12_SAFEBAG_get0_p8inf	Return the PKCS#8 private key info from a keyBag or pkcs8ShroudedKeyBag.
PKCS12_SAFEBAG_get0_pkcs8	Return the encrypted PKCS#8 structure from a pkcs8ShroudedKeyBag safeBag.
PKCS12_SAFEBAG_get0_safes	Retrieve the nested safeBags from a safeContentsBag.
PKCS12_SAFEBAG_get0_type	Return the safeBag type OID without copying it.
PKCS12_SAFEBAG_get1_cert	Extract an X.509 certificate from a certBag safeBag.
PKCS12_SAFEBAG_get1_cert_ex	Extract an X.509 certificate from a certBag safeBag with a library context.
PKCS12_SAFEBAG_get1_crl	Extract an X.509 CRL from a crlBag safeBag.
PKCS12_SAFEBAG_get1_crl_ex	Extract an X.509 CRL from a crlBag safeBag with a library context.
PKCS12_SAFEBAG_get_bag_nid	Get the type of the object contained within a safeBag.
PKCS12_SAFEBAG_get_nid	Get the safeBag type as an NID.
PKCS12_SAFEBAG_it	Return the ASN.1 item descriptor for PKCS12_SAFEBAG.
PKCS12_SAFEBAG_new	Allocate an empty PKCS12_SAFEBAG structure.
PKCS12_SAFEBAG_set0_attrs	Assign a stack of X509_ATTRIBUTEs to a safeBag.
PKCS12_add1_attr_by_NID	Add a PKCS#12 attribute to a safeBag by NID.
PKCS12_add1_attr_by_txt	Add a PKCS#12 attribute to a safeBag by name.
PKCS12_add_CSPName_asc	Add a Microsoft CSP Name attribute (ASCII) to a safeBag.
PKCS12_add_cert	Create a certBag safeBag and append it to a stack of safeBags.
PKCS12_add_friendlyname_asc	Add a PKCS#9 friendlyName attribute (ASCII) to a safeBag.
PKCS12_add_friendlyname_uni	Add a PKCS#9 friendlyName attribute (BMPString) to a safeBag.
PKCS12_add_friendlyname_utf8	Add a PKCS#9 friendlyName attribute (UTF-8) to a safeBag.
PKCS12_add_key	Create a key safeBag and append it to a stack of safeBags.
PKCS12_add_key_ex	Create a key safeBag and append it to a stack of safeBags.
PKCS12_add_localkeyid	Add a PKCS#9 localKeyID attribute to a safeBag.
PKCS12_add_safe	Pack safeBags into a PKCS#7 contentInfo and append it to a stack of safes.
PKCS12_add_safe_ex	Pack safeBags into a PKCS#7 contentInfo and append it to a stack of safes.
PKCS12_add_safes	Create a PKCS#12 structure from a stack of PKCS#7 authSafes contentInfos.
PKCS12_add_safes_ex	Create a PKCS#12 structure from a stack of PKCS#7 authSafes contentInfos.
PKCS12_add_secret	Create a secretBag safeBag and append it to a stack of safeBags.
PKCS12_create	Create a PKCS#12 structure from a key, certificate, and optional CA stack (default library context).
PKCS12_create_ex	Create a PKCS#12 structure from a key, certificate, and optional CA stack.
PKCS12_create_ex2	Create a PKCS#12 structure with an optional per-safeBag callback.
PKCS12_decrypt_skey	Decrypt the PKCS#8 shrouded key in a pkcs8ShroudedKeyBag safeBag.
PKCS12_decrypt_skey_ex	Decrypt the PKCS#8 shrouded key in a pkcs8ShroudedKeyBag safeBag.
PKCS12_free	Free a PKCS12 structure and its contents.
PKCS12_gen_mac	Generate the HMAC for a PKCS#12 object using configured MAC parameters.
PKCS12_get0_mac	Retrieve MAC value and MAC-parameter fields from a PKCS#12 PFX.
PKCS12_get_attr [deprecated]	Retrieve a PKCS#12 safeBag attribute by NID (deprecated; use PKCS12_SAFEBAG_get0_attr()).
PKCS12_get_attr_gen	Retrieve an attribute by NID from a stack of X509_ATTRIBUTEs.
PKCS12_get_friendlyname	Retrieve the PKCS#9 friendlyName from a safeBag as a UTF-8 string.
PKCS12_init	Create an empty PKCS#12 structure.
PKCS12_init_ex	Create an empty PKCS#12 structure with a library context.
PKCS12_it	Return the ASN.1 item descriptor for PKCS12.
PKCS12_item_decrypt_d2i	Decrypt an ASN.1 octet string and decode the embedded object.
PKCS12_item_decrypt_d2i_ex	Decrypt an ASN.1 octet string and decode the embedded object.
PKCS12_item_i2d_encrypt	Encode an ASN.1 object and encrypt the result.
PKCS12_item_i2d_encrypt_ex	Encode an ASN.1 object and encrypt the result using a library context.
PKCS12_item_pack_safebag	Pack an ASN.1 object into a certBag or crlBag safeBag.
PKCS12_key_gen_asc	Derive key material using the PKCS#12 key-generation function (ASCII passphrase).
PKCS12_key_gen_asc_ex	Derive key material using the PKCS#12 key-generation function (ASCII passphrase).
PKCS12_key_gen_uni	Derive key material using the PKCS#12 key-generation function (BMPString passphrase).
PKCS12_key_gen_uni_ex	Derive key material using the PKCS#12 key-generation function (BMPString passphrase).
PKCS12_key_gen_utf8	Derive key material using the PKCS#12 key-generation function (UTF-8 passphrase).
PKCS12_key_gen_utf8_ex	Derive key material using the PKCS#12 key-generation function (UTF-8 passphrase).
PKCS12_mac_present	Test whether a PKCS#12 PFX carries an integrity MAC.
PKCS12_new	Allocate an empty PKCS12 structure.
PKCS12_newpass	Change the password protecting a PKCS#12 structure.
PKCS12_pack_authsafes	Encode a stack of PKCS#7 authSafes contentInfos into a PKCS#12 structure.
PKCS12_pack_p7data	Pack a stack of safeBags into a PKCS#7 data ContentInfo.
PKCS12_pack_p7encdata	Pack safeBags into a PKCS#7 encrypted-data ContentInfo (default library context).
PKCS12_pack_p7encdata_ex	Pack safeBags into a PKCS#7 encrypted-data ContentInfo.
PKCS12_parse	Parse a PKCS#12 structure and extract key, certificate, and CA certificates.
PKCS12_pbe_crypt	Encrypt or decrypt a buffer using a PKCS#12 PBE algorithm.
PKCS12_pbe_crypt_ex	Encrypt or decrypt a buffer using a PKCS#12 PBE algorithm.
PKCS12_set_mac	Compute and store the MAC and MAC parameters in a PKCS#12 object.
PKCS12_setup_mac	Set MAC parameters in a PKCS#12 object without computing the MAC.
PKCS12_unpack_authsafes	Unpack the authSafes PKCS#7 contentInfos from a PKCS#12 structure.
PKCS12_unpack_p7data	Unpack safeBags from a PKCS#7 data ContentInfo.
PKCS12_unpack_p7encdata	Unpack safeBags from a PKCS#7 encrypted-data ContentInfo.
PKCS12_verify_mac	Verify the HMAC of a PKCS#12 object.
PKCS1_MGF1 [deprecated]	Generate a PKCS #1 mask using MGF1 with digest dgst (deprecated).
PKCS5_PBE_add	Register the built-in PKCS#5 password-based encryption algorithms with the EVP PBE table.
PKCS5_PBE_keyivgen	Derive a PBE key and IV and initialize ctx for encryption/decryption (PKCS #5 v1.5).
PKCS5_PBE_keyivgen_ex	Derive a key and IV for password-based encryption and initialize cctx (library-context variant).
PKCS5_PBKDF2_HMAC	Derive a key from a password with PBKDF2-HMAC (RFC 2898) using digest.
PKCS5_PBKDF2_HMAC_SHA1	Derive a key from a password with PBKDF2-HMAC-SHA1 (RFC 2898).
PKCS5_pbe2_set	Build a PKCS#5 PBES2 AlgorithmIdentifier for cipher with PBKDF2.
PKCS5_pbe2_set_iv	Build a PKCS#5 PBES2 AlgorithmIdentifier for cipher with optional IV and PBKDF2 PRF.
PKCS5_pbe2_set_iv_ex	Build a PBES2 AlgorithmIdentifier with explicit IV and library context.
PKCS5_pbe2_set_scrypt	Build a PBES2 AlgorithmIdentifier that derives the key with scrypt.
PKCS5_pbe_set	Build an AlgorithmIdentifier for PKCS#5 PBE with alg, iter, and salt.
PKCS5_pbe_set0_algor	Set a PKCS#5 PBE algorithm OID and parameters into an existing X509_ALGOR.
PKCS5_pbe_set0_algor_ex	Set a PBES1 AlgorithmIdentifier (OID, iteration count, and salt) with a library context.
PKCS5_pbe_set_ex	Build a PKCS#5 PBE AlgorithmIdentifier using an explicit library context.
PKCS5_pbkdf2_set	Build an X509_ALGOR describing PBKDF2 key-derivation parameters.
PKCS5_pbkdf2_set_ex	Build an X509_ALGOR describing PBKDF2 parameters (library-context aware).
PKCS5_v2_PBE_keyivgen	Derive a key and IV from a PKCS#5 v2 PBE AlgorithmIdentifier and initialize ctx.
PKCS5_v2_PBE_keyivgen_ex	Derive a key and IV with PKCS#5 PBES2 and initialize ctx for encrypt/decrypt.
PKCS5_v2_scrypt_keyivgen	Initialize ctx for PBE using scrypt parameters from ASN.1 (PKCS#5 v2).
PKCS5_v2_scrypt_keyivgen_ex	Initialize ctx for scrypt-based PBE using a library context.
PKCS7_ATTR_SIGN_it	Return the ASN.1 item descriptor used when signing PKCS#7 authenticated attributes.
PKCS7_ATTR_VERIFY_it	Return the ASN.1 item descriptor used when verifying PKCS#7 authenticated attributes.
PKCS7_DIGEST_free	Free a PKCS#7 DigestedData structure and its contents.
PKCS7_DIGEST_it	Return the ASN.1 item descriptor for PKCS7_DIGEST.
PKCS7_DIGEST_new	Allocate an empty PKCS#7 DigestedData structure.
PKCS7_ENCRYPT_free	Free a PKCS#7 EncryptedData and its contents.
PKCS7_ENCRYPT_it	Return the ASN.1 item descriptor for PKCS7_ENCRYPT.
PKCS7_ENCRYPT_new	Allocate an empty PKCS#7 EncryptedData.
PKCS7_ENC_CONTENT_free	Free a PKCS#7 EncryptedContentInfo and its contents.
PKCS7_ENC_CONTENT_it	Return the ASN.1 item descriptor for PKCS7_ENC_CONTENT.
PKCS7_ENC_CONTENT_new	Allocate an empty PKCS#7 EncryptedContentInfo.
PKCS7_ENVELOPE_free	Free a PKCS#7 EnvelopedData structure and its contents.
PKCS7_ENVELOPE_it	Return the ASN.1 item descriptor for PKCS7_ENVELOPE.
PKCS7_ENVELOPE_new	Allocate an empty PKCS#7 EnvelopedData structure.
PKCS7_ISSUER_AND_SERIAL_digest	Digest the DER encoding of a PKCS7_ISSUER_AND_SERIAL structure.
PKCS7_ISSUER_AND_SERIAL_free	Free a PKCS#7 IssuerAndSerialNumber and its contents.
PKCS7_ISSUER_AND_SERIAL_it	Return the ASN.1 item descriptor for PKCS7_ISSUER_AND_SERIAL.
PKCS7_ISSUER_AND_SERIAL_new	Allocate an empty PKCS#7 IssuerAndSerialNumber.
PKCS7_RECIP_INFO_free	Free a PKCS#7 recipient info structure and its contents.
PKCS7_RECIP_INFO_get0_alg	Return a non-owning pointer to a recipient info's key-encryption algorithm.
PKCS7_RECIP_INFO_it	Return the ASN.1 item descriptor for PKCS7_RECIP_INFO.
PKCS7_RECIP_INFO_new	Allocate an empty PKCS#7 recipient info structure.
PKCS7_RECIP_INFO_set	Populate a PKCS#7 recipient info from a recipient certificate.
PKCS7_SIGNED_free	Free a PKCS#7 SignedData and its contents.
PKCS7_SIGNED_it	Return the ASN.1 item descriptor for PKCS7_SIGNED.
PKCS7_SIGNED_new	Allocate an empty PKCS#7 SignedData.
PKCS7_SIGNER_INFO_free	Free a PKCS#7 SignerInfo and its contents.
PKCS7_SIGNER_INFO_get0_algs	Return non-owning pointers to a signer info's key and digest/signature algorithms.
PKCS7_SIGNER_INFO_it	Return the ASN.1 item descriptor for PKCS7_SIGNER_INFO.
PKCS7_SIGNER_INFO_new	Allocate an empty PKCS#7 SignerInfo.
PKCS7_SIGNER_INFO_set	Populate a PKCS#7 signer info with certificate, key, and digest algorithm.
PKCS7_SIGNER_INFO_sign	Compute and store the signature for a prepared PKCS#7 signer info.
PKCS7_SIGN_ENVELOPE_free	Free a PKCS#7 SignedAndEnvelopedData structure and its contents.
PKCS7_SIGN_ENVELOPE_it	Return the ASN.1 item descriptor for PKCS7_SIGN_ENVELOPE.
PKCS7_SIGN_ENVELOPE_new	Allocate an empty PKCS#7 SignedAndEnvelopedData structure.
PKCS7_add0_attrib_signing_time	Add a signing-time authenticated attribute, taking ownership of t.
PKCS7_add1_attrib_digest	Add a PKCS#9 messageDigest authenticated attribute to a SignerInfo.
PKCS7_add_attrib_content_type	Add a PKCS#9 contentType authenticated attribute to a PKCS#7 signer info.
PKCS7_add_attrib_smimecap	Attach an S/MIME capabilities attribute to a PKCS#7 signer info.
PKCS7_add_attribute	Add an unauthenticated attribute to a PKCS#7 signer info.
PKCS7_add_certificate	Add a certificate to a PKCS#7 SignedData or SignedAndEnvelopedData structure.
PKCS7_add_crl	Add a certificate revocation list to a PKCS#7 SignedData or SignedAndEnvelopedData structure.
PKCS7_add_recipient	Create a recipient info from x509 and add it to enveloped or signed-and-enveloped PKCS#7 p7.
PKCS7_add_recipient_info	Add a recipient info structure to a PKCS#7 enveloped-data object.
PKCS7_add_signature	Create a signer info from x509 / pkey / dgst and add it to signed PKCS#7 p7.
PKCS7_add_signed_attribute	Add an authenticated (signed) attribute to a PKCS#7 signer info.
PKCS7_add_signer	Attach a prepared signer info to a PKCS#7 SignedData or SignedAndEnvelopedData structure.
PKCS7_cert_from_signer_info	Find the certificate in p7 that matches a signer info's issuer and serial.
PKCS7_content_new	Allocate nested content of type nid and attach it to a PKCS#7 structure.
PKCS7_ctrl	Perform a control operation on a PKCS#7 object (for example set/get detached signature).
PKCS7_dataDecode	Create a BIO that decrypts/verifies PKCS#7 content for reading.
PKCS7_dataFinal	Finalize PKCS#7 content processing after data has been written through bio.
PKCS7_dataInit	Create a BIO chain for writing content into a PKCS#7 structure (digest/encrypt filters).
PKCS7_dataVerify	Verify a PKCS#7 signed content digest against a signer info and certificate store.
PKCS7_decrypt	Decrypt a PKCS#7 envelopedData (or signed-and-enveloped) structure for a recipient.
PKCS7_digest_from_attributes	Extract the message-digest OCTET STRING from a set of authenticatedAttributes.
PKCS7_dup	Deep-copy a PKCS#7 structure (PKCS7_dup).
PKCS7_encrypt	Create a PKCS#7 envelopedData encrypting in for each recipient in certs.
PKCS7_encrypt_ex	Create a PKCS#7 envelopedData encrypting in for each recipient in certs.
PKCS7_final	Finalize a PKCS#7 structure by digesting content from a BIO and completing signatures or encryption.
PKCS7_free	Free a PKCS#7 structure and its contents.
PKCS7_get0_signers	Return the signer certificates used by PKCS7_verify() without duplicating them.
PKCS7_get_attribute	Return an unauthenticated attribute of type nid from a PKCS#7 signer info.
PKCS7_get_issuer_and_serial	Return the issuer-and-serial of signer info idx in a signed PKCS#7 structure.
PKCS7_get_octet_string	Return an ASN.1 octet string from a PKCS#7 structure.
PKCS7_get_signed_attribute	Return a signed attribute of type nid from a PKCS#7 signer info.
PKCS7_get_signer_info	Return the signer infos from a signed or signed-and-enveloped PKCS#7 structure.
PKCS7_get_smimecap	Return the SMIMECapabilities attribute from a PKCS#7 signer info.
PKCS7_it	Return the ASN.1 item descriptor for PKCS7.
PKCS7_new	Allocate an empty PKCS#7 structure.
PKCS7_new_ex	Allocate an empty PKCS#7 structure with an explicit library context and property query.
PKCS7_print_ctx	Print a PKCS#7 structure to a BIO.
PKCS7_set0_type_other	Set a PKCS#7 content type to an ASN.1 OTHER content value, transferring ownership of other.
PKCS7_set_attributes	Replace the unauthenticated attributes on a PKCS#7 signer info.
PKCS7_set_cipher	Set the content-encryption cipher on an enveloped or encrypted PKCS#7 structure.
PKCS7_set_content	Set the inner content of a SignedData / DigestedData PKCS#7 to p7_data.
PKCS7_set_digest	Set the message-digest algorithm on a DigestedData PKCS#7 structure.
PKCS7_set_signed_attributes	Replace the authenticatedAttributes of a signer info with a copy of sk.
PKCS7_set_type	Set the PKCS#7 content type and allocate the corresponding content structure.
PKCS7_sign	Create a PKCS#7 signed-data structure using the default library context.
PKCS7_sign_add_signer	Add a signer to an existing SignedData PKCS#7 created for incremental signing.
PKCS7_sign_ex	Create a PKCS#7 signed-data structure, with library context and property query.
PKCS7_signatureVerify	Verify one PKCS#7 signer info's signature against content digested from bio.
PKCS7_simple_smimecap	Append a simple SMIMECapabilities AlgorithmIdentifier for nid to sk.
PKCS7_stream	Prepare a PKCS#7 structure for streaming BER output and return content-boundary pointers.
PKCS7_to_TS_TST_INFO	Extract the TSTInfo content from a PKCS#7 time-stamp token.
PKCS7_type_is_other	Return whether a PKCS#7 content type is not one of the standard PKCS#7 content NIDs.
PKCS7_verify	Verify a PKCS#7 signedData structure and optionally write the content.
PKCS8_PRIV_KEY_INFO_free	Free a PKCS#8 PrivateKeyInfo structure and its contents.
PKCS8_PRIV_KEY_INFO_it	Return the ASN.1 item descriptor for PKCS8_PRIV_KEY_INFO.
PKCS8_PRIV_KEY_INFO_new	Allocate an empty PKCS#8 PrivateKeyInfo structure.
PKCS8_add_keyusage	Add a Microsoft key-usage attribute to PKCS#8 private key info.
PKCS8_decrypt	Decrypt a PKCS#8 encrypted private key.
PKCS8_decrypt_ex	Decrypt a PKCS#8 encrypted private key using a library context.
PKCS8_encrypt	Encrypt a PKCS#8 private key info structure (default library context).
PKCS8_encrypt_ex	Encrypt a PKCS#8 private key info structure.
PKCS8_get_attr	Retrieve a PKCS#8 private-key attribute by NID.
PKCS8_pkey_add1_attr	Append a copy of an attribute to a PKCS#8 PrivateKeyInfo.
PKCS8_pkey_add1_attr_by_NID	Append an attribute identified by NID nid to a PKCS#8 private key info.
PKCS8_pkey_add1_attr_by_OBJ	Append an attribute identified by obj to a PKCS#8 private key info.
PKCS8_pkey_get0	Extract algorithm and private-key octets from a PKCS#8 PrivateKeyInfo.
PKCS8_pkey_get0_attrs	Return the attribute stack embedded in a PKCS#8 PrivateKeyInfo.
PKCS8_pkey_set0	Set the algorithm, version, parameters, and encoded private key on a PKCS#8 PrivateKeyInfo.
PKCS8_set0_pbe	Encrypt PKCS#8 private key info using a pre-built PBE algorithm.
PKCS8_set0_pbe_ex	Encrypt PKCS#8 private key info using a pre-built PBE algorithm.
PKEY_USAGE_PERIOD_free	Free a PKEY_USAGE_PERIOD structure and its contents.
PKEY_USAGE_PERIOD_it	Return the ASN.1 item descriptor for PKEY_USAGE_PERIOD.
PKEY_USAGE_PERIOD_new	Allocate a new Private Key Usage Period extension value.
POLICYINFO_free	Free a certificate policy information value and its contents.
POLICYINFO_it	Return the ASN.1 item descriptor for POLICYINFO.
POLICYINFO_new	Allocate an empty certificate policy information (POLICYINFO) value.
POLICYQUALINFO_free	Free a policy qualifier information value and its contents.
POLICYQUALINFO_it	Return the ASN.1 item descriptor for POLICYQUALINFO.
POLICYQUALINFO_new	Allocate a new certificate policy qualifier information value.
POLICY_CONSTRAINTS_free	Free a Policy Constraints extension value and its contents.
POLICY_CONSTRAINTS_it	Return the ASN.1 item descriptor for POLICY_CONSTRAINTS.
POLICY_CONSTRAINTS_new	Allocate a new Policy Constraints extension value.
POLICY_MAPPINGS_it	Return the ASN.1 item descriptor for POLICY_MAPPINGS.
POLICY_MAPPING_free	Free a policy mapping value and its contents.
POLICY_MAPPING_it	Return the ASN.1 item descriptor for POLICY_MAPPING.
POLICY_MAPPING_new	Allocate a new policy mapping value.
PROFESSION_INFO_free	Free a PROFESSION_INFO value and its contents.
PROFESSION_INFO_get0_addProfessionInfo	Return the additional profession info octet string from a PROFESSION_INFO.
PROFESSION_INFO_get0_namingAuthority	Return the naming authority from a PROFESSION_INFO.
PROFESSION_INFO_get0_professionItems	Return the profession item strings from a PROFESSION_INFO.
PROFESSION_INFO_get0_professionOIDs	Return the profession OID stack from a PROFESSION_INFO.
PROFESSION_INFO_get0_registrationNumber	Return the registration number from a PROFESSION_INFO without duplicating it.
PROFESSION_INFO_it	Return the ASN.1 item descriptor for PROFESSION_INFO.
PROFESSION_INFO_new	Allocate a new PROFESSION_INFO value.
PROFESSION_INFO_set0_addProfessionInfo	Set the additionalProfessionInfo OCTET STRING on a PROFESSION_INFO, taking ownership of aos.
PROFESSION_INFO_set0_namingAuthority	Set the naming authority on a PROFESSION_INFO, taking ownership of na.
PROFESSION_INFO_set0_professionItems	Set the profession items (titles) on a PROFESSION_INFO, taking ownership of as.
PROFESSION_INFO_set0_professionOIDs	Set the profession OIDs on a PROFESSION_INFO, taking ownership of po.
PROFESSION_INFO_set0_registrationNumber	Set the registration number on a PROFESSION_INFO, taking ownership of rn.
PROXY_CERT_INFO_EXTENSION_free	Free a PROXY_CERT_INFO_EXTENSION structure and its contents.
PROXY_CERT_INFO_EXTENSION_it	Return the ASN.1 item descriptor for PROXY_CERT_INFO_EXTENSION.
PROXY_CERT_INFO_EXTENSION_new	Allocate a new Proxy Certificate Information extension value.
PROXY_POLICY_free	Free a PROXY_POLICY structure and its OID/policy octets.
PROXY_POLICY_it	Return the ASN.1 item descriptor for PROXY_POLICY.
PROXY_POLICY_new	Allocate a new PROXY_POLICY structure.
RAND_OpenSSL [deprecated]	Return the built-in OpenSSL legacy RAND_METHOD (deprecated).
RAND_add	Mix additional bytes into the PRNG state with an estimated entropy amount.
RAND_bytes	Fill a buffer with cryptographically strong random bytes from the public CSPRNG.
RAND_bytes_ex	Fill a buffer with public CSPRNG bytes using a library context and strength.
RAND_file_name	Build the default path for the PRNG seed file into a caller-provided buffer.
RAND_get0_primary	Return the shared primary DRBG for a library context (used to reseed public/private DRBGs).
RAND_get0_private	Return the thread-local private DRBG used by RAND_priv_bytes() for a library context.
RAND_get0_public	Return the thread-local public DRBG used by RAND_bytes() for a library context.
RAND_get_rand_method [deprecated]	Return the currently selected legacy RAND_METHOD used for PRNG operations.
RAND_keep_random_devices_open	Keep OS random devices open across forks when keep is nonzero.
RAND_load_file	Mix up to max_bytes of file file into the PRNG seed pool.
RAND_poll	Reseed the PRNG by polling trusted system entropy sources.
RAND_priv_bytes	Generate private random bytes using a separate DRBG instance from RAND_bytes().
RAND_priv_bytes_ex	Like RAND_priv_bytes(), with an explicit library context and security strength.
RAND_pseudo_bytes [deprecated]	Fill a buffer with bytes that need not be cryptographically strong (deprecated).
RAND_seed	Mix num bytes from buf into the PRNG (equivalent to RAND_add with full entropy).
RAND_set0_private	Install rand as the private DRBG for a library context, transferring ownership.
RAND_set0_public	Install rand as the public DRBG for a library context, transferring ownership.
RAND_set_DRBG_type	Configure the primary DRBG algorithm type for a library context.
RAND_set_rand_engine [deprecated]	Select an ENGINE as the source of the legacy RAND_METHOD (deprecated).
RAND_set_rand_method [deprecated]	Install the legacy RAND_METHOD used by RAND_bytes and related APIs (deprecated).
RAND_set_seed_source_type	Select the seed source used by the primary RNG in a library context.
RAND_status	Report whether the PRNG has been sufficiently seeded for RAND_bytes().
RAND_write_file	Write a seed file containing entropy from the CSPRNG for later RAND_load_file() use.
RC2_cbc_encrypt [deprecated]	Encrypt or decrypt with RC2 in CBC mode (deprecated).
RC2_cfb64_encrypt [deprecated]	Encrypt or decrypt with RC2 in 64-bit CFB mode (deprecated).
RC2_decrypt [deprecated]	Decrypt one RC2 block held as two host-endian longs (deprecated).
RC2_ecb_encrypt [deprecated]	Encrypt or decrypt one RC2 block in ECB mode (deprecated).
RC2_encrypt [deprecated]	Encrypt one RC2 block held as two host-endian longs (deprecated).
RC2_ofb64_encrypt [deprecated]	Encrypt or decrypt with RC2 in 64-bit OFB mode (deprecated).
RC2_set_key [deprecated]	Expand a raw RC2 key into an RC2_KEY schedule (deprecated).
RC4 [deprecated]	Encrypt or decrypt len bytes with RC4 (deprecated; prefer EVP_CIPHER).
RC4_options [deprecated]	Return a short string describing compiled RC4 implementation options (deprecated).
RC4_set_key [deprecated]	Initialize an RC4_KEY from a variable-length key (deprecated; prefer EVP_CIPHER).
RIPEMD160 [deprecated]	Compute the RIPEMD-160 digest of n bytes at d in one shot (deprecated; prefer EVP_Digest).
RIPEMD160_Final [deprecated]	Finalise a RIPEMD-160 digest into a 20-byte buffer (deprecated; prefer EVP_DigestFinal_ex).
RIPEMD160_Init [deprecated]	Initialize a RIPEMD-160 hashing context (deprecated; prefer EVP_DigestInit_ex).
RIPEMD160_Transform [deprecated]	Process one 64-byte RIPEMD-160 block into the context chaining state (deprecated).
RIPEMD160_Update [deprecated]	Absorb len bytes into a RIPEMD-160 context (deprecated; prefer EVP_DigestUpdate).
RSAPrivateKey_dup [deprecated]	Deep-copy an RSA private key (RSAPrivateKey_dup) (deprecated).
RSAPrivateKey_it [deprecated]	Return the ASN.1 item descriptor for PKCS#1 RSAPrivateKey (deprecated).
RSAPublicKey_dup [deprecated]	Duplicate an RSA public key via ASN.1 encode/decode (deprecated).
RSA_OAEP_PARAMS_free	Free RSA-OAEP algorithm parameters and their contents.
RSA_OAEP_PARAMS_it	Return the ASN.1 item descriptor for RSA_OAEP_PARAMS.
RSA_OAEP_PARAMS_new	Allocate empty RSA-OAEP algorithm parameters.
RSA_PKCS1_OpenSSL [deprecated]	Return the built-in OpenSSL RSA_METHOD implementing PKCS#1 operations (deprecated).
RSA_PSS_PARAMS_dup	Deep-copy RSA-PSS algorithm parameters.
RSA_PSS_PARAMS_free	Free RSA-PSS algorithm parameters and their contents.
RSA_PSS_PARAMS_it	Return the ASN.1 item descriptor for RSA_PSS_PARAMS.
RSA_PSS_PARAMS_new	Allocate empty RSA-PSS algorithm parameters.
RSA_X931_derive_ex [deprecated]	Derive an RSA key from ANSI X9.31 intermediate values (deprecated).
RSA_X931_generate_key_ex [deprecated]	Generate an RSA key pair using the X9.31 prime-generation method (deprecated).
RSA_X931_hash_id [deprecated]	Return the X9.31 hash algorithm identifier byte for digest NID nid (deprecated).
RSA_bits [deprecated]	Return the bit length of an RSA modulus (deprecated; use EVP_PKEY_get_bits).
RSA_blinding_off [deprecated]	Disable RSA blinding on rsa and free any associated blinding state (deprecated).
RSA_blinding_on [deprecated]	Enable RSA blinding on rsa to mitigate timing attacks (deprecated).
RSA_check_key [deprecated]	Validate consistency of an RSA key's public/private components (deprecated).
RSA_check_key_ex [deprecated]	Validate RSA key components with an optional progress callback (deprecated).
RSA_clear_flags [deprecated]	Clear the given flag bits on an RSA key object (deprecated).
RSA_flags [deprecated]	Return the flag bits from the RSA_METHOD currently bound to r (deprecated).
RSA_free [deprecated]	Free an RSA key and its BIGNUM components (deprecated).
RSA_generate_key [deprecated]	Generate an RSA key pair (very old API; deprecated — prefer RSA_generate_key_ex).
RSA_generate_key_ex [deprecated]	Generate a two-prime RSA key pair into an existing RSA object (deprecated).
RSA_generate_multi_prime_key [deprecated]	Generate a multi-prime RSA key pair (deprecated).
RSA_get0_crt_params [deprecated]	Borrow pointers to the RSA CRT parameters d mod (p-1), d mod (q-1), and q^-1 mod p (deprecated).
RSA_get0_d [deprecated]	Return the RSA private exponent d (deprecated).
RSA_get0_dmp1 [deprecated]	Return CRT exponent d mod (p-1) without duplicating it (deprecated).
RSA_get0_dmq1 [deprecated]	Return CRT exponent d mod (q-1) without duplicating it (deprecated).
RSA_get0_e [deprecated]	Return the public exponent e of an RSA key without transferring ownership (deprecated).
RSA_get0_engine [deprecated]	Return the ENGINE set on an RSA key (deprecated).
RSA_get0_factors [deprecated]	Return the prime factors p and q of an RSA key without transferring ownership (deprecated).
RSA_get0_iqmp [deprecated]	Return CRT coefficient q^-1 mod p without duplicating it (deprecated).
RSA_get0_key [deprecated]	Get const pointers to the RSA modulus and exponents (deprecated).
RSA_get0_multi_prime_crt_params [deprecated]	Get const pointers to multi-prime CRT exponents and coefficients (deprecated).
RSA_get0_multi_prime_factors [deprecated]	Fill primes with borrowed pointers to the extra multi-prime factors (deprecated).
RSA_get0_n [deprecated]	Return the RSA modulus n (deprecated).
RSA_get0_p [deprecated]	Return the first prime factor (p) of an RSA key without transferring ownership.
RSA_get0_pss_params [deprecated]	Return the RSA-PSS parameters associated with an RSA key (deprecated).
RSA_get0_q [deprecated]	Return the second prime factor (q) of an RSA key without transferring ownership.
RSA_get_default_method [deprecated]	Return the current default RSA_METHOD (deprecated).
RSA_get_ex_data [deprecated]	Return application data previously stored on an RSA key at CRYPTO_EX index idx (deprecated).
RSA_get_method [deprecated]	Return the RSA_METHOD currently associated with an RSA key (deprecated).
RSA_get_multi_prime_extra_count [deprecated]	Return how many extra primes beyond p and q a multi-prime RSA key has (deprecated).
RSA_get_version [deprecated]	Return whether an RSA key is multi-prime or two-prime (deprecated).
RSA_meth_dup [deprecated]	Duplicate an RSA_METHOD structure (deprecated).
RSA_meth_free [deprecated]	Free an RSA_METHOD allocated with RSA_meth_new() (deprecated).
RSA_meth_get0_app_data [deprecated]	Return the application pointer previously attached to an RSA_METHOD.
RSA_meth_get0_name [deprecated]	Return the descriptive name stored on an RSA_METHOD (deprecated).
RSA_meth_get_bn_mod_exp [deprecated]	Return the BN modular-exponentiation callback from an RSA_METHOD (deprecated).
RSA_meth_get_finish [deprecated]	Return the finish/cleanup callback from an RSA_METHOD (deprecated).
RSA_meth_get_flags [deprecated]	Return the flag mask stored on an RSA_METHOD (deprecated).
RSA_meth_get_init [deprecated]	Return the init callback previously set on an RSA_METHOD (deprecated).
RSA_meth_get_keygen [deprecated]	Return the key-generation callback from a custom RSA_METHOD (deprecated).
RSA_meth_get_mod_exp [deprecated]	Return the CRT modular-exponentiation callback from an RSA_METHOD (deprecated).
RSA_meth_get_multi_prime_keygen [deprecated]	Return the multi-prime key-generation callback from an RSA_METHOD (deprecated).
RSA_meth_get_priv_dec [deprecated]	Return the private-decrypt callback from an RSA_METHOD (deprecated).
RSA_meth_get_priv_enc [deprecated]	Return the private-encrypt (signing) callback from an RSA_METHOD (deprecated).
RSA_meth_get_pub_dec [deprecated]	Return the public-decrypt callback from an RSA_METHOD (deprecated).
RSA_meth_get_pub_enc [deprecated]	Return the public-encrypt callback installed on a custom RSA_METHOD (deprecated).
RSA_meth_get_sign [deprecated]	Return the high-level sign callback from an RSA_METHOD (deprecated).
RSA_meth_get_verify [deprecated]	Return the high-level verify callback from an RSA_METHOD (deprecated).
RSA_meth_new [deprecated]	Allocate a new RSA_METHOD with the given name and flags (deprecated).
RSA_meth_set0_app_data [deprecated]	Attach application data to an RSA_METHOD without copying (deprecated).
RSA_meth_set1_name [deprecated]	Set the descriptive name stored on an RSA_METHOD (deprecated).
RSA_meth_set_bn_mod_exp [deprecated]	Set the CRT modular-exponentiation callback on an RSA_METHOD (deprecated).
RSA_meth_set_finish [deprecated]	Set the finish/cleanup callback on an RSA_METHOD (deprecated).
RSA_meth_set_flags [deprecated]	Replace the flag mask stored on an RSA_METHOD.
RSA_meth_set_init [deprecated]	Install the init callback on an RSA_METHOD (deprecated).
RSA_meth_set_keygen [deprecated]	Set the key-generation callback on a custom RSA_METHOD (deprecated).
RSA_meth_set_mod_exp [deprecated]	Set the CRT modular-exponentiation callback on a custom RSA_METHOD (deprecated).
RSA_meth_set_multi_prime_keygen [deprecated]	Set the multi-prime key-generation callback on a custom RSA_METHOD (deprecated).
RSA_meth_set_priv_dec [deprecated]	Set the private-decrypt callback on a custom RSA_METHOD (deprecated).
RSA_meth_set_priv_enc [deprecated]	Set the private-encrypt (signing) callback on a custom RSA_METHOD (deprecated).
RSA_meth_set_pub_dec [deprecated]	Set the public-decrypt callback on a custom RSA_METHOD (deprecated).
RSA_meth_set_pub_enc [deprecated]	Set the public-encrypt callback on a custom RSA_METHOD (deprecated).
RSA_meth_set_sign [deprecated]	Set the private-key signing callback on an RSA_METHOD (deprecated).
RSA_meth_set_verify [deprecated]	Set the signature-verification callback on a custom RSA_METHOD (deprecated).
RSA_new [deprecated]	Allocate and initialise an empty RSA key object (deprecated; use EVP_PKEY-RSA).
RSA_new_method [deprecated]	Allocate an RSA object that uses engine's RSA method (deprecated).
RSA_null_method [deprecated]	Return the historical "null" RSA_METHOD stub (deprecated; always returns NULL since 1.1.1).
RSA_padding_add_PKCS1_OAEP [deprecated]	Apply PKCS#1 OAEP padding using SHA-1 / MGF1-SHA-1 defaults (deprecated).
RSA_padding_add_PKCS1_OAEP_mgf1 [deprecated]	Apply PKCS#1 OAEP padding with explicit message and MGF1 digests (deprecated).
RSA_padding_add_PKCS1_PSS [deprecated]	Encode an EMSA-PSS padded block for RSA signature (deprecated).
RSA_padding_add_PKCS1_PSS_mgf1 [deprecated]	Encode an EMSA-PSS padded block using an explicit MGF1 hash (deprecated).
RSA_padding_add_PKCS1_type_1 [deprecated]	Encode a DigestInfo or similar block with PKCS #1 v1.5 type-1 padding for RSA signatures (deprecated).
RSA_padding_add_PKCS1_type_2 [deprecated]	Encode a message with PKCS #1 v1.5 encryption padding (type 2) (deprecated).
RSA_padding_add_X931 [deprecated]	Apply ANSI X9.31 padding to a message block (deprecated).
RSA_padding_add_none [deprecated]	Copy f into to with no padding (lengths must match) (deprecated).
RSA_padding_check_PKCS1_OAEP [deprecated]	Verify PKCS#1 OAEP padding and recover the encoded message (deprecated).
RSA_padding_check_PKCS1_OAEP_mgf1 [deprecated]	Verify PKCS#1 OAEP padding with explicit digests and recover the message (deprecated).
RSA_padding_check_PKCS1_type_1 [deprecated]	Verify and remove PKCS#1 v1.5 type-1 (signing) padding (deprecated).
RSA_padding_check_PKCS1_type_2 [deprecated]	Decode and verify PKCS #1 v1.5 type-2 (encryption) padding (deprecated).
RSA_padding_check_X931 [deprecated]	Verify ANSI X9.31 padding and recover the message (deprecated).
RSA_padding_check_none [deprecated]	Verify "no padding" by copying f into to when lengths match (deprecated).
RSA_pkey_ctx_ctrl	Dispatch an RSA-specific control operation on an EVP_PKEY_CTX.
RSA_print [deprecated]	Print RSA key components to a BIO with indentation (deprecated).
RSA_print_fp [deprecated]	Print RSA key components to a FILE with indentation (deprecated).
RSA_private_decrypt [deprecated]	Decrypt flen ciphertext bytes with RSA private key rsa (deprecated).
RSA_private_encrypt [deprecated]	RSA private-key encryption (raw primitive / signing-style) (deprecated).
RSA_public_decrypt [deprecated]	RSA public-key decryption / signature recovery (deprecated).
RSA_public_encrypt [deprecated]	Encrypt flen bytes from from with RSA public key rsa (deprecated).
RSA_security_bits [deprecated]	Estimate the security strength of rsa in bits (deprecated).
RSA_set0_crt_params [deprecated]	Set the CRT parameters on an RSA key, transferring ownership (deprecated).
RSA_set0_factors [deprecated]	Set the RSA prime factors p and q, transferring ownership of the BIGNUMs (deprecated).
RSA_set0_key [deprecated]	Set the RSA modulus and exponents, transferring ownership of the BIGNUMs (deprecated).
RSA_set0_multi_prime_params [deprecated]	Set multi-prime RSA factors, exponents, and CRT coefficients (deprecated).
RSA_set_default_method [deprecated]	Set the default RSA_METHOD used when creating new RSA keys (deprecated; not thread-safe).
RSA_set_ex_data [deprecated]	Store application data on an RSA key at CRYPTO_EX index idx (deprecated).
RSA_set_flags [deprecated]	Set flag bits on an RSA key object (deprecated).
RSA_set_method [deprecated]	Bind an RSA_METHOD implementation to an RSA key object (deprecated).
RSA_setup_blinding [deprecated]	Create and attach a BN_BLINDING factor for RSA private operations (deprecated).
RSA_sign [deprecated]	Create an RSA signature with PKCS#1 DigestInfo wrapping (deprecated).
RSA_sign_ASN1_OCTET_STRING [deprecated]	Sign an ASN.1 OCTET STRING payload with RSA (deprecated).
RSA_size [deprecated]	Return the RSA modulus size in bytes (deprecated).
RSA_test_flags [deprecated]	Return which of the given flag bits are currently set on an RSA object.
RSA_up_ref [deprecated]	Increment the reference count of an RSA key object (deprecated).
RSA_verify [deprecated]	Verify an RSASSA-PKCS1-v1_5 signature over digest m (deprecated).
RSA_verify_ASN1_OCTET_STRING [deprecated]	Verify an RSA signature that wraps a DigestInfo-style ASN.1 OCTET STRING (deprecated).
RSA_verify_PKCS1_PSS [deprecated]	Verify an RSA-PSS encoded message EM against a message hash (deprecated).
RSA_verify_PKCS1_PSS_mgf1 [deprecated]	Verify a PKCS#1 PSS-encoded digest using an explicit MGF1 hash (deprecated).
SCRYPT_PARAMS_free	Free a PKCS#5 scrypt parameter structure and its contents.
SCRYPT_PARAMS_it	Return the ASN.1 item descriptor for SCRYPT_PARAMS.
SCRYPT_PARAMS_new	Allocate an empty PKCS#5 scrypt parameter structure.
SCT_LIST_free	Free a stack of SCTs and the SCTs themselves.
SCT_LIST_print	Pretty-print a stack of SCTs to a BIO, optionally resolving log names.
SCT_LIST_validate	Validate a list of SCTs against a policy evaluation context.
SCT_free	Free an SCT and its underlying data.
SCT_get0_extensions	Return a pointer to the extension data embedded in an SCT.
SCT_get0_log_id	Get the log ID that an SCT came from.
SCT_get0_signature	Get a pointer to the signature bytes of an SCT.
SCT_get_log_entry_type	Get the log entry type of an SCT.
SCT_get_signature_nid	Return the NID of the signature algorithm used by an SCT.
SCT_get_source	Get the origin of an SCT (TLS extension, OCSP response, and so on).
SCT_get_timestamp	Get the timestamp of an SCT.
SCT_get_validation_status	Get the last validation result stored on an SCT.
SCT_get_version	Get the Certificate Transparency version of an SCT.
SCT_new	Create a new, blank Signed Certificate Timestamp. The caller must free it with SCT_free().
SCT_new_from_base64	Create an SCT from base64-encoded log id, extensions, and signature fields.
SCT_print	Pretty-print a single Signed Certificate Timestamp to a BIO.
SCT_set0_extensions	Set SCT extensions by taking ownership of the given buffer.
SCT_set0_log_id	Set the CT log ID on an SCT, transferring ownership of log_id.
SCT_set0_signature	Set the SCT signature by taking ownership of the given buffer.
SCT_set1_extensions	Set the SCT extensions field by copying ext.
SCT_set1_log_id	Set the CT log ID on an SCT by copying log_id.
SCT_set1_signature	Set the SCT signature by copying sig.
SCT_set_log_entry_type	Set the log entry type of an SCT.
SCT_set_signature_nid	Set the signature algorithm NID used by an SCT.
SCT_set_source	Record where an SCT was obtained (TLS extension, OCSP, X.509 extension, etc.).
SCT_set_timestamp	Set the timestamp of an SCT.
SCT_set_version	Set the Certificate Transparency version of an SCT.
SCT_validate	Validate an SCT against a policy evaluation context.
SCT_validation_status_string	Get a text description of an SCT's validation status.
SEED_cbc_encrypt [deprecated]	Encrypt or decrypt data with SEED in CBC mode (deprecated; prefer EVP).
SEED_cfb128_encrypt [deprecated]	Encrypt or decrypt data with SEED in 128-bit CFB mode (deprecated; prefer EVP).
SEED_decrypt [deprecated]	Decrypt one 16-byte SEED block (deprecated; prefer EVP).
SEED_ecb_encrypt [deprecated]	Encrypt or decrypt one 16-byte SEED block in ECB mode (deprecated; prefer EVP).
SEED_encrypt [deprecated]	Encrypt one 16-byte SEED block (deprecated; prefer EVP).
SEED_ofb128_encrypt [deprecated]	Encrypt or decrypt data with SEED in 128-bit OFB mode (deprecated; prefer EVP).
SEED_set_key [deprecated]	Expand a 16-byte SEED key into a SEED_KEY_SCHEDULE (deprecated; prefer EVP).
SHA1	Compute the SHA-1 digest of n bytes at d in one shot.
SHA1_Final [deprecated]	Finalize a SHA-1 digest into md and clear c (deprecated; prefer EVP_DigestFinal_ex).
SHA1_Init [deprecated]	Initialize a low-level SHA-1 digest context (deprecated; prefer EVP_DigestInit_ex).
SHA1_Transform [deprecated]	Process one SHA-1 compression round on a full 64-byte block (deprecated).
SHA1_Update [deprecated]	Absorb len bytes at data into a SHA-1 context (deprecated; prefer EVP_DigestUpdate).
SHA224	Compute the SHA-224 digest of n bytes at d in one shot.
SHA224_Final [deprecated]	Place the SHA-224 digest into md and clear c (deprecated).
SHA224_Init [deprecated]	Initialize a SHA-224 digest context (deprecated; prefer EVP_DigestInit_ex).
SHA224_Update [deprecated]	Absorb message bytes into a SHA-224 context (deprecated; prefer EVP_DigestUpdate).
SHA256	Compute the SHA-256 digest of n bytes at d in one shot.
SHA256_Final [deprecated]	Finalise a SHA-256 digest and write the 32-byte hash.
SHA256_Init [deprecated]	Initialise a SHA-256 digest context (deprecated; prefer EVP_DigestInit_ex).
SHA256_Transform [deprecated]	Process one 64-byte SHA-256 block into digest state c (deprecated).
SHA256_Update [deprecated]	Absorb message bytes into a SHA-256 context (deprecated; prefer EVP_DigestUpdate).
SHA384	Compute the SHA-384 digest of n bytes at d in one shot.
SHA384_Final [deprecated]	Finalise a SHA-384 digest and write the 48-byte hash (deprecated).
SHA384_Init [deprecated]	Initialize a SHA-384 digest context (deprecated; prefer EVP_DigestInit).
SHA384_Update [deprecated]	Absorb message bytes into a SHA-384 context (deprecated; prefer EVP_DigestUpdate).
SHA512	Compute the SHA-512 digest of n bytes at d in one shot.
SHA512_Final [deprecated]	Finalize a SHA-512 digest and write SHA512_DIGEST_LENGTH bytes to md (deprecated).
SHA512_Init [deprecated]	Initialize a SHA-512 digest context (deprecated; prefer EVP_DigestInit).
SHA512_Transform [deprecated]	Process one SHA-512 block into c (deprecated low-level primitive).
SHA512_Update [deprecated]	Absorb message bytes into a SHA-512 context (deprecated; prefer EVP_DigestUpdate).
SMIME_crlf_copy	Copy in to out applying S/MIME canonical CRLF line endings when appropriate.
SMIME_read_ASN1	Parse an S/MIME message into an ASN.1 structure described by it (flags=0).
SMIME_read_ASN1_ex	Parse an S/MIME message into an ASN.1 structure described by it.
SMIME_read_CMS	Parse an S/MIME message from a BIO into a CMS_ContentInfo.
SMIME_read_CMS_ex	Parse an S/MIME message into a CMS_ContentInfo, with optional flags and reuse.
SMIME_read_PKCS7	Parse an S/MIME message into a PKCS#7 structure using the default library context.
SMIME_read_PKCS7_ex	Parse an S/MIME message into a PKCS#7 structure, optionally reusing p7.
SMIME_text	Strip MIME headers from a text/plain S/MIME part and copy the body to out.
SMIME_write_ASN1	Write an ASN.1 CMS/PKCS#7 value as an S/MIME message (default library context).
SMIME_write_ASN1_ex	Write an ASN.1 CMS/PKCS#7 value as an S/MIME message with library context.
SMIME_write_CMS	Write a CMS_ContentInfo as an S/MIME (MIME) message to bio.
SMIME_write_PKCS7	Write a PKCS#7 object in S/MIME (PEM/CMS) form to a BIO.
SRP_Calc_A [deprecated]	Compute the client public value A = g^a mod N.
SRP_Calc_A_param [deprecated]	Compute the SRP client public value A for s (deprecated).
SRP_Calc_B [deprecated]	Compute the server public value B = g^b + k*v (mod N) for TLS-SRP (default library context; deprecated).
SRP_Calc_B_ex [deprecated]	Compute the server public value B = g^b + k*v (mod N) for TLS-SRP.
SRP_Calc_client_key [deprecated]	Compute the client session key K for TLS-SRP (deprecated).
SRP_Calc_client_key_ex [deprecated]	Compute the client session key K for TLS-SRP.
SRP_Calc_server_key [deprecated]	Compute the SRP server shared secret S = (A*v^u)^b mod N (deprecated).
SRP_Calc_u [deprecated]	Compute the SRP scrambling parameter u = H(A, B) using the default library context (deprecated).
SRP_Calc_u_ex [deprecated]	Compute the SRP scrambling parameter u = H(PAD(A) || PAD(B)).
SRP_Calc_x [deprecated]	Compute x = H(s, H(user:pass)) using the default library context (deprecated).
SRP_Calc_x_ex [deprecated]	Compute the private exponent x = H(s, H(user:pass)) for TLS-SRP.
SRP_VBASE_add0_user [deprecated]	Append a user entry to an SRP verifier database (ownership transfers on success).
SRP_VBASE_free [deprecated]	Free an SRP verifier database and its contents.
SRP_VBASE_get1_by_user [deprecated]	Look up an SRP user entry, synthesizing one from seed_key when absent.
SRP_VBASE_get_by_user [deprecated]	Look up an SRP user entry without transferring ownership (deprecated).
SRP_VBASE_init [deprecated]	Load SRP verifier entries from a text verifier file into a database.
SRP_VBASE_new [deprecated]	Allocate an SRP verifier database, optionally copying seed_key for unknown-user simulation (deprecated).
SRP_Verify_A_mod_N [deprecated]	Verify that the client public value A is non-zero modulo N.
SRP_Verify_B_mod_N [deprecated]	Verify that the server public value B is non-zero modulo N.
SRP_check_known_gN_param [deprecated]	Test whether g and N match a built-in RFC 5054 SRP group.
SRP_create_verifier [deprecated]	Create base64-encoded SRP salt and verifier strings (default library context; deprecated).
SRP_create_verifier_BN [deprecated]	Create SRP salt and verifier BIGNUMs for a user/password.
SRP_create_verifier_BN_ex [deprecated]	Create SRP salt and verifier BIGNUMs for a user/password.
SRP_create_verifier_ex [deprecated]	Create base64-encoded SRP salt and verifier strings for a user/password.
SRP_get_default_gN [deprecated]	Return built-in RFC 5054 SRP group parameters for a textual group id (deprecated).
SRP_user_pwd_free [deprecated]	Free an SRP_user_pwd structure and owned fields.
SRP_user_pwd_new [deprecated]	Allocate an empty SRP_user_pwd structure.
SRP_user_pwd_set0_sv [deprecated]	Assign salt and verifier BIGNUMs to an SRP_user_pwd (ownership transfers on success).
SRP_user_pwd_set1_ids [deprecated]	Set the user identifier and optional info string on an SRP_user_pwd.
SRP_user_pwd_set_gN [deprecated]	Set the SRP group parameters on a user verifier entry (caller retains ownership of g/N; deprecated).
SSL_CIPHER_description	Write a human-readable description of a cipher suite into a buffer.
SSL_CIPHER_find	Look up a cipher suite by its two-byte TLS cipher ID.
SSL_CIPHER_get_auth_nid	Return the NID of the authentication method used by a cipher suite.
SSL_CIPHER_get_bits	Return the number of secret bits used by a cipher suite.
SSL_CIPHER_get_cipher_nid	Return the NID of the bulk cipher algorithm used by a cipher suite.
SSL_CIPHER_get_digest_nid	Return the NID of the MAC digest used by a cipher for record protection.
SSL_CIPHER_get_handshake_digest	Return the handshake digest used by a cipher suite.
SSL_CIPHER_get_id	Return the OpenSSL-internal 32-bit identifier for cipher c.
SSL_CIPHER_get_kx_nid	Return the NID of the key-exchange method used by a cipher suite.
SSL_CIPHER_get_name	Return the OpenSSL display name of a cipher suite.
SSL_CIPHER_get_protocol_id	Return the two-octet TLS protocol cipher suite identifier.
SSL_CIPHER_get_version	Return the protocol version name associated with a cipher suite (for example "TLSv1.2").
SSL_CIPHER_is_aead	Report whether a cipher suite uses an AEAD construction.
SSL_CIPHER_standard_name	Return the standard RFC name of a cipher suite.
SSL_COMP_add_compression_method	Register a compression method globally for all SSL operations in the process.
SSL_COMP_get0_name	Return the name of an SSL_COMP compression method entry.
SSL_COMP_get_compression_methods	Return the global stack of available SSL/TLS integrated compression methods.
SSL_COMP_get_id	Return the wire identifier of an SSL_COMP compression method entry.
SSL_COMP_get_name	Return the display name of a compression COMP_METHOD.
SSL_COMP_set0_compression_methods	Replace the global stack of SSL/TLS compression methods, transferring ownership of meths.
SSL_CONF_CTX_clear_flags	Clear selected SSL_CONF_FLAG_* bits on a configuration context.
SSL_CONF_CTX_finish	Finalise configuration on an SSL_CONF_CTX after all SSL_CONF_cmd() calls.
SSL_CONF_CTX_free	Free an SSL_CONF_CTX and any associated command state.
SSL_CONF_CTX_new	Allocate and initialise an SSL_CONF_CTX for SSL_CONF_* configuration commands.
SSL_CONF_CTX_set1_prefix	Set the command-name prefix recognised by subsequent SSL_CONF_cmd() calls.
SSL_CONF_CTX_set_flags	Set SSL_CONF_FLAG_* bits on a configuration context.
SSL_CONF_CTX_set_ssl	Bind an SSL_CONF_CTX so subsequent SSL_CONF_cmd calls apply to ssl.
SSL_CONF_CTX_set_ssl_ctx	Bind an SSL_CTX so subsequent SSL_CONF_cmd() calls configure that context.
SSL_CONF_cmd	Apply a configuration command (option plus optional value) to an SSL_CONF_CTX.
SSL_CONF_cmd_argv	Process at most two SSL configuration command-line arguments from pargv/pargc.
SSL_CONF_cmd_value_type	Return the value type expected by SSL_CONF_cmd() for a given command name.
SSL_CTX_SRP_CTX_free [deprecated]	Free SRP parameters stored on an SSL_CTX (deprecated).
SSL_CTX_SRP_CTX_init [deprecated]	Initialize the deprecated SRP context embedded in an SSL_CTX.
SSL_CTX_add1_to_CA_list	Append a CA subject name from a certificate to an SSL context's peer CA list.
SSL_CTX_add_client_CA	Add a CA subject name to the context's client-CA list sent when requesting a client certificate.
SSL_CTX_add_client_custom_ext	Register older-style custom extension handlers for TLS/DTLS clients.
SSL_CTX_add_custom_ext	Register a custom TLS extension for client and/or server using the extended callback API.
SSL_CTX_add_server_custom_ext	Register a custom TLS extension handler for the server role on an SSL context.
SSL_CTX_add_session	Add a session to an SSL context's internal session cache.
SSL_CTX_callback_ctrl	Perform a low-level control operation that takes a function-pointer argument on an SSL context.
SSL_CTX_check_private_key	Verify that the private key configured on an SSL_CTX matches its certificate.
SSL_CTX_clear_options	Clear selected SSL_OP_* option bits on an SSL context.
SSL_CTX_compress_certs	Pre-compress all certificates configured on a server SSL_CTX with algorithm alg.
SSL_CTX_config	Apply a named configuration section from a previously loaded config file to an SSL_CTX.
SSL_CTX_ct_is_enabled	Report whether Certificate Transparency validation is enabled on an SSL context.
SSL_CTX_ctrl	Perform a low-level control operation on an SSL context.
SSL_CTX_dane_clear_flags	Clear selected DANE option flags on an SSL_CTX.
SSL_CTX_dane_enable	Initialize shared DANE TLSA authentication state on an SSL context.
SSL_CTX_dane_mtype_set	Map a DANE TLSA matching type to a digest algorithm for a context.
SSL_CTX_dane_set_flags	Set selected DANE option flags on an SSL_CTX.
SSL_CTX_enable_ct	Enable Certificate Transparency validation on an SSL context (inherited by new connections).
SSL_CTX_flush_sessions	Remove sessions from the context's internal cache that have expired by tm.
SSL_CTX_free	Decrement the reference count of an SSL_CTX and free it when it reaches zero.
SSL_CTX_get0_CA_list	Return the list of CA names the context will advertise to peers.
SSL_CTX_get0_certificate	Return the local certificate configured on an SSL context (if any).
SSL_CTX_get0_client_cert_type	Retrieve the local client certificate type extension values configured on an SSL context.
SSL_CTX_get0_ctlog_store	Return the CT log store installed on an SSL context.
SSL_CTX_get0_param	Return a non-owning pointer to an SSL context's verification parameters.
SSL_CTX_get0_privatekey	Return the private key configured on an SSL context (if any).
SSL_CTX_get0_security_ex_data	Return the application pointer passed as ex to the context security callback.
SSL_CTX_get0_server_cert_type	Retrieve the local server certificate type extension values configured on an SSL context.
SSL_CTX_get1_compressed_cert	Get a copy of a compressed certificate configured on an SSL_CTX.
SSL_CTX_get_cert_store	Return the certificate verification store associated with an SSL_CTX.
SSL_CTX_get_ciphers	Return the preference-ordered stack of ciphers configured on an SSL context.
SSL_CTX_get_client_CA_list	Return the stack of CA names the context will send when requesting a client certificate.
SSL_CTX_get_client_cert_cb	Return the client-certificate callback installed on an SSL_CTX.
SSL_CTX_get_default_passwd_cb	Return the default PEM password callback currently set on an SSL context.
SSL_CTX_get_default_passwd_cb_userdata	Return the userdata pointer passed to the context's default PEM password callback.
SSL_CTX_get_ex_data	Retrieve application-specific data previously stored on an SSL_CTX.
SSL_CTX_get_info_callback	Return the information callback currently set on an SSL context.
SSL_CTX_get_keylog_callback	Return the TLS key-logging callback previously set on an SSL context.
SSL_CTX_get_max_early_data	Return the maximum early-data bytes configured on an SSL context.
SSL_CTX_get_num_tickets	Return how many TLSv1.3 session tickets servers from a context are configured to send.
SSL_CTX_get_options	Return the option bitmask currently set on an SSL context.
SSL_CTX_get_quiet_shutdown	Return the quiet-shutdown setting of an SSL context.
SSL_CTX_get_record_padding_callback_arg	Return the opaque argument passed to the context's TLS 1.3 record-padding callback.
SSL_CTX_get_recv_max_early_data	Return the recv_max_early_data limit configured on an SSL context.
SSL_CTX_get_security_callback	Return the security callback currently installed on an SSL context.
SSL_CTX_get_security_level	Return the security level currently configured on an SSL context.
SSL_CTX_get_ssl_method	Return the SSL_METHOD used to create an SSL context.
SSL_CTX_get_timeout	Return the default session lifetime configured on ctx.
SSL_CTX_get_verify_callback	Return the certificate verification callback set on an SSL context.
SSL_CTX_get_verify_depth	Return the maximum depth of certificate chain verification for an SSL context.
SSL_CTX_get_verify_mode	Return the peer certificate verification mode currently set on an SSL context.
SSL_CTX_has_client_custom_ext	Return whether a client custom extension of type ext_type is registered on ctx.
SSL_CTX_load_verify_dir	Load trusted CA certificates from a hashed directory into an SSL context.
SSL_CTX_load_verify_file	Load trusted CA certificates from a PEM file into an SSL context.
SSL_CTX_load_verify_locations	Load trusted CA certificates from a PEM file and/or hashed directory into an SSL context.
SSL_CTX_load_verify_store	Load trusted CA certificates from a store URI into an SSL context.
SSL_CTX_new	Create a new SSL_CTX for connections using method meth.
SSL_CTX_new_ex	Create an SSL_CTX using an explicit library context and property query.
SSL_CTX_remove_session	Remove a session from an SSL context's internal session cache and mark it non-resumable.
SSL_CTX_sess_get_get_cb	Return the external session-cache lookup callback installed on an SSL_CTX.
SSL_CTX_sess_get_new_cb	Return the new-session callback previously set on ctx.
SSL_CTX_sess_get_remove_cb	Return the session-remove callback previously set on an SSL context.
SSL_CTX_sess_set_get_cb	Set the external session-lookup callback used when a session id is not in the internal cache.
SSL_CTX_sess_set_new_cb	Set the callback invoked when a new session is negotiated for caching.
SSL_CTX_sess_set_remove_cb	Set the callback invoked when a session is removed from an SSL context cache.
SSL_CTX_sessions	Return a pointer to the context's internal SSL_SESSION LHASH cache.
SSL_CTX_set0_CA_list	Set the list of CA names sent to the peer for an SSL context (takes ownership).
SSL_CTX_set0_ctlog_store	Install a CT log store on an SSL context, transferring ownership of logs.
SSL_CTX_set0_security_ex_data	Set the application pointer passed as ex to the context security callback.
SSL_CTX_set0_tmp_dh_pkey	Set ephemeral DH parameters for a context, transferring ownership of dhpkey.
SSL_CTX_set1_cert_comp_preference	Set the preferred TLSv1.3 certificate compression algorithms for an SSL context (RFC 8879).
SSL_CTX_set1_cert_store	Replace the context certificate store, incrementing store's reference count.
SSL_CTX_set1_client_cert_type	Set the client certificate type extension values for an SSL context (RFC 7250).
SSL_CTX_set1_compressed_cert	Install a pre-compressed certificate blob on a server SSL context.
SSL_CTX_set1_param	Copy verification parameters into an SSL context.
SSL_CTX_set1_server_cert_type	Set the server certificate type values advertised by an SSL_CTX (RFC 7250).
SSL_CTX_set_allow_early_data_cb	Set a server callback that decides whether to accept TLSv1.3 early data for a context.
SSL_CTX_set_alpn_protos	Set the ALPN protocol list advertised or offered by an SSL context.
SSL_CTX_set_alpn_select_cb	Register the server callback that selects an ALPN protocol during the handshake.
SSL_CTX_set_async_callback	Set the asynchronous completion callback inherited by SSL objects from a context.
SSL_CTX_set_async_callback_arg	Set the user argument passed to the context's asynchronous completion callback.
SSL_CTX_set_block_padding	Pad TLS 1.3 records written from a context up to a multiple of a block size.
SSL_CTX_set_cert_cb	Install a certificate-selection callback invoked during handshake certificate setup.
SSL_CTX_set_cert_store	Replace the context certificate store, taking ownership of store.
SSL_CTX_set_cert_verify_callback	Replace the built-in peer certificate verification procedure with an application callback.
SSL_CTX_set_cipher_list	Set the TLSv1.2-and-below cipher list for an SSL context.
SSL_CTX_set_ciphersuites	Set the TLSv1.3 ciphersuite list for an SSL context.
SSL_CTX_set_client_CA_list	Set the list of CA names sent to clients when requesting a client certificate.
SSL_CTX_set_client_cert_cb	Install a callback that supplies a client certificate during handshake.
SSL_CTX_set_client_cert_engine	Set an ENGINE used to obtain a client certificate when a server requests one.
SSL_CTX_set_client_hello_cb	Install a server callback invoked after each ClientHello is parsed.
SSL_CTX_set_cookie_generate_cb	Set the callback that generates DTLS HelloVerifyRequest cookies.
SSL_CTX_set_cookie_verify_cb	Set the callback that verifies DTLS HelloVerifyRequest cookies.
SSL_CTX_set_ct_validation_callback	Register a Certificate Transparency validation callback for an SSL context.
SSL_CTX_set_ctlog_list_file	Load a Certificate Transparency log list from a file and append it to the context store.
SSL_CTX_set_default_ctlog_list_file	Load the default Certificate Transparency log list file into the context store.
SSL_CTX_set_default_passwd_cb	Set the default password callback used when loading encrypted PEM material into a context.
SSL_CTX_set_default_passwd_cb_userdata	Set userdata passed to the context's default PEM password callback.
SSL_CTX_set_default_read_buffer_len	Set the default read-buffer size used for new connections from a context (pipelining).
SSL_CTX_set_default_verify_dir	Load only the default hashed CA directory into an SSL context's trust store.
SSL_CTX_set_default_verify_file	Load only the default CA certificate file into an SSL context's trust store.
SSL_CTX_set_default_verify_paths	Load the default CA file, directory, and store into an SSL context's trust store.
SSL_CTX_set_default_verify_store	Load the default trusted certificate store into an SSL context.
SSL_CTX_set_ex_data	Store application-specific data on an SSL_CTX at a previously allocated index.
SSL_CTX_set_generate_session_id	Set the callback used to generate new session IDs for server SSL objects from a context.
SSL_CTX_set_info_callback	Set the information callback used by SSL objects created from a context.
SSL_CTX_set_keylog_callback	Configure a callback that logs TLS key material for debugging (e.g. Wireshark).
SSL_CTX_set_max_early_data	Set the maximum early-data bytes a server context may accept or advertise.
SSL_CTX_set_msg_callback	Install a callback that observes SSL/TLS/QUIC protocol messages on new connections.
SSL_CTX_set_next_proto_select_cb	Set the Next Protocol Negotiation (NPN) selection callback for clients.
SSL_CTX_set_next_protos_advertised_cb	Set the Next Protocol Negotiation (NPN) advertisement callback for servers.
SSL_CTX_set_not_resumable_session_callback	Register a context-wide callback that decides whether new sessions may be resumed.
SSL_CTX_set_num_tickets	Set how many TLSv1.3 session tickets servers created from a context send after a full handshake.
SSL_CTX_set_options	Set additional SSL_OP_* option bits on an SSL context (bitwise OR).
SSL_CTX_set_post_handshake_auth	Enable or disable sending the TLSv1.3 Post-Handshake Authentication ClientHello extension.
SSL_CTX_set_psk_client_callback	Set the client PSK identity/key callback used by connections from ctx.
SSL_CTX_set_psk_find_session_callback	Set the TLSv1.3 PSK find-session callback for SSL objects created from a context (server).
SSL_CTX_set_psk_server_callback	Set the PSK identity callback used by server SSL objects from a context.
SSL_CTX_set_psk_use_session_callback	Set the PSK use-session callback for client SSL objects from a context.
SSL_CTX_set_purpose	Set the X509 purpose on an SSL context's verification parameters.
SSL_CTX_set_quiet_shutdown	Set quiet-shutdown mode for SSL objects created from a context.
SSL_CTX_set_record_padding_callback	Install a callback that chooses TLS 1.3 record padding for connections from a context.
SSL_CTX_set_record_padding_callback_arg	Set the opaque argument passed to the context's TLS 1.3 record-padding callback.
SSL_CTX_set_recv_max_early_data	Set how many rejected early-data bytes a server context will skip before aborting.
SSL_CTX_set_security_callback	Install a security-policy callback used by connections created from a context.
SSL_CTX_set_security_level	Set the security level used to constrain algorithms and parameters on an SSL context.
SSL_CTX_set_session_id_context	Set the server-side session-id context within which sessions may be reused for a context.
SSL_CTX_set_session_ticket_cb	Register callbacks that attach and consume application data in TLS session tickets.
SSL_CTX_set_srp_cb_arg [deprecated]	Set the user argument passed to all SRP callbacks on a context (deprecated).
SSL_CTX_set_srp_client_pwd_callback [deprecated]	Set a client callback that supplies the SRP password (deprecated).
SSL_CTX_set_srp_password [deprecated]	Set the default SRP password for clients created from a context (deprecated).
SSL_CTX_set_srp_strength [deprecated]	Set the minimum acceptable SRP prime length in bits for a context (deprecated).
SSL_CTX_set_srp_username [deprecated]	Set the default SRP username for clients created from a context (deprecated).
SSL_CTX_set_srp_username_callback [deprecated]	Set the server callback invoked when an SRP username appears in ClientHello (deprecated).
SSL_CTX_set_srp_verify_param_callback [deprecated]	Set a client callback that verifies server SRP group parameters (deprecated).
SSL_CTX_set_ssl_version [deprecated]	Replace the SSL_METHOD used by an SSL_CTX (deprecated).
SSL_CTX_set_stateless_cookie_generate_cb	Register the callback that generates cookies for TLS 1.3 HelloRetryRequest / DTLS cookie exchange.
SSL_CTX_set_stateless_cookie_verify_cb	Set the callback that verifies a TLS 1.3 stateless HelloRetryRequest cookie.
SSL_CTX_set_timeout	Set the default session timeout for ctx in seconds.
SSL_CTX_set_tlsext_max_fragment_length	Set the maximum fragment length mode advertised by an SSL context (RFC 6066).
SSL_CTX_set_tlsext_ticket_key_evp_cb	Set the TLS session-ticket key callback using EVP cipher and MAC contexts.
SSL_CTX_set_tlsext_use_srtp	Set the DTLS use_srtp extension protection profiles for a context.
SSL_CTX_set_tmp_dh_callback [deprecated]	Set a deprecated callback that supplies ephemeral DH parameters for server connections from a context.
SSL_CTX_set_trust	Set the default X509 trust purpose NID for certificate verification on a context.
SSL_CTX_set_verify	Set peer certificate verification mode and optional callback for an SSL context.
SSL_CTX_set_verify_depth	Set the maximum depth of CA certificates allowed above the peer for context-wide verification.
SSL_CTX_up_ref	Increment the reference count on an SSL_CTX.
SSL_CTX_use_PrivateKey	Assign an EVP_PKEY private key to an SSL context.
SSL_CTX_use_PrivateKey_ASN1	Install a private key of type pk from a DER buffer on an SSL context.
SSL_CTX_use_PrivateKey_file	Load a private key from a file into an SSL context.
SSL_CTX_use_RSAPrivateKey [deprecated]	Assign an RSA private key to an SSL context (deprecated; use SSL_CTX_use_PrivateKey).
SSL_CTX_use_RSAPrivateKey_ASN1 [deprecated]	Load an RSA private key from a DER buffer into an SSL context (deprecated).
SSL_CTX_use_RSAPrivateKey_file [deprecated]	Load the first RSA private key from a file into an SSL context (deprecated).
SSL_CTX_use_cert_and_key	Assign a certificate, private key, and optional chain onto an SSL context.
SSL_CTX_use_certificate	Set the end-entity certificate used by an SSL context.
SSL_CTX_use_certificate_ASN1	Load a certificate into an SSL context from a DER encoding.
SSL_CTX_use_certificate_chain_file	Load a PEM certificate chain from file into ctx.
SSL_CTX_use_certificate_file	Load a certificate from a file into an SSL context.
SSL_CTX_use_psk_identity_hint	Set the PSK identity hint advertised by a TLS server context.
SSL_CTX_use_serverinfo	Load serverinfo TLS extensions (SSL_SERVERINFOV1 format) into an SSL context.
SSL_CTX_use_serverinfo_ex	Load serverinfo TLS extensions in V1 or V2 format into an SSL context.
SSL_CTX_use_serverinfo_file	Load PEM-encoded serverinfo TLS extensions from a file into an SSL context.
SSL_SESSION_dup	Duplicate an SSL_SESSION; the copy is not owned by any session cache.
SSL_SESSION_free	Decrement the reference count of an SSL_SESSION and free it when it reaches zero.
SSL_SESSION_get0_alpn_selected	Retrieve the ALPN protocol selected for a session and its length.
SSL_SESSION_get0_cipher	Return the cipher suite stored on an SSL_SESSION.
SSL_SESSION_get0_hostname	Return the SNI hostname associated with a session, if the server acknowledged SNI.
SSL_SESSION_get0_id_context	Return the session-id context bytes associated with a session.
SSL_SESSION_get0_peer	Return the peer certificate stored in an SSL session (borrowed pointer).
SSL_SESSION_get0_peer_rpk	Return the peer's raw public key (RFC 7250) stored on an SSL session, if any.
SSL_SESSION_get0_ticket	Obtain a pointer to the session ticket bytes stored on a session.
SSL_SESSION_get0_ticket_appdata	Retrieve application data previously stored with a session ticket.
SSL_SESSION_get_compress_id	Return the compression method identifier negotiated for a session.
SSL_SESSION_get_ex_data	Retrieve application data previously stored on an SSL_SESSION.
SSL_SESSION_get_id	Return the session identifier bytes of an SSL_SESSION.
SSL_SESSION_get_master_key	Copy the session master secret into a caller buffer (sensitive; avoid exposing).
SSL_SESSION_get_max_early_data	Return the maximum early-data (0-RTT) size allowed for a session.
SSL_SESSION_get_max_fragment_length	Return the Maximum Fragment Length extension mode negotiated for a session.
SSL_SESSION_get_protocol_version	Return the protocol version number recorded in an SSL session.
SSL_SESSION_get_ticket_lifetime_hint	Return the session-ticket lifetime hint in seconds.
SSL_SESSION_get_time	Return the session creation time as seconds since the Epoch.
SSL_SESSION_get_time_ex	Return the session creation time as a time_t (Y2038-safe counterpart to SSL_SESSION_get_time).
SSL_SESSION_get_timeout	Return the inactivity timeout (in seconds) configured for an SSL session.
SSL_SESSION_has_ticket	Report whether a session ticket is present on a session.
SSL_SESSION_is_resumable	Report whether a session may be used for resumption / PSK.
SSL_SESSION_new	Allocate a new empty SSL_SESSION structure.
SSL_SESSION_print	Print a human-readable summary of an SSL_SESSION to a BIO.
SSL_SESSION_print_fp	Print a human-readable summary of an SSL_SESSION to a FILE.
SSL_SESSION_print_keylog	Print session keying material to a BIO in NSS keylog format.
SSL_SESSION_set1_alpn_selected	Set the ALPN protocol recorded on a session to a copy of alpn.
SSL_SESSION_set1_hostname	Set the SNI hostname stored on a session to a copy of hostname.
SSL_SESSION_set1_id	Set the session ID bytes stored on an SSL_SESSION.
SSL_SESSION_set1_id_context	Set the session ID context used to restrict session reuse.
SSL_SESSION_set1_master_key	Set the master secret on an SSL session by copying in.
SSL_SESSION_set1_ticket_appdata	Attach application data that will be stored inside a TLS session ticket.
SSL_SESSION_set_cipher	Associate a cipher suite with an SSL_SESSION (for example when building a PSK session).
SSL_SESSION_set_ex_data	Store application data on an SSL_SESSION at a CRYPTO_EX index.
SSL_SESSION_set_max_early_data	Set the maximum early-data (0-RTT) size advertised for a session.
SSL_SESSION_set_protocol_version	Set the protocol version recorded on an SSL_SESSION.
SSL_SESSION_set_time	Set the creation time of an SSL_SESSION (seconds since the Unix epoch).
SSL_SESSION_set_time_ex	Set the session creation time as a time_t (Y2038-safe counterpart to SSL_SESSION_set_time).
SSL_SESSION_set_timeout	Set the inactivity timeout recorded on an SSL session.
SSL_SESSION_up_ref	Increment the reference count of an SSL_SESSION.
SSL_SRP_CTX_free [deprecated]	Free SRP parameters stored on an SSL connection (deprecated).
SSL_SRP_CTX_init [deprecated]	Initialise SRP fields inside SSL object s (deprecated).
SSL_accept	Wait for a TLS/SSL client to initiate the handshake on a server connection.
SSL_accept_stream	Dequeue an incoming remotely initiated QUIC stream from a connection.
SSL_add1_host	Add an additional expected DNS hostname for peer certificate name checks.
SSL_add1_to_CA_list	Append a CA subject name from a certificate to this connection's peer CA list.
SSL_add_client_CA	Add a CA subject name to the client-CA list sent when requesting a client certificate.
SSL_add_dir_cert_subjects_to_stack	Append subject names from every certificate file in dir to stackCAs.
SSL_add_expected_rpk	Add a DANE TLSA record matching raw public key rpk to the connection's validation policy.
SSL_add_file_cert_subjects_to_stack	Append subject names from PEM certificates in a file to an existing stack.
SSL_add_ssl_module	Historical no-op retained for compatibility; the SSL config module registers automatically.
SSL_add_store_cert_subjects_to_stack	Load certificate subjects from an OSSL_STORE URI into a name stack.
SSL_alert_desc_string	Return a short letter code for a TLS/SSL alert description.
SSL_alert_desc_string_long	Return a long human-readable description of a TLS/SSL alert reason code.
SSL_alert_type_string	Return a short string for an SSL/TLS alert level.
SSL_alert_type_string_long	Return a long human-readable description of a TLS/SSL alert type.
SSL_alloc_buffers	Allocate (or keep) the read and write record buffers for an SSL connection.
SSL_as_poll_descriptor	Build a BIO_POLL_DESCRIPTOR that refers to SSL object s.
SSL_bytes_to_cipher_list	Parse a wire-format cipher suite list into SSL_CIPHER and SCSV stacks.
SSL_callback_ctrl	Perform a low-level control operation that takes a function-pointer argument on an SSL connection.
SSL_certs_clear	Clear certificates and related chain material configured on an SSL connection.
SSL_check_chain	Check whether certificate x, key pk, and chain suit the current TLS session.
SSL_check_private_key	Verify that the private key configured on an SSL matches its certificate.
SSL_clear	Reset an SSL object so it can be reused for another connection.
SSL_clear_options	Clear selected SSL_OP_* option bits on an SSL connection.
SSL_client_hello_get0_ciphers	Return the cipher_suites field from the ClientHello being processed.
SSL_client_hello_get0_compression_methods	Return the raw compression_methods field from a parsed ClientHello.
SSL_client_hello_get0_ext	Return a pointer to a specific extension's payload in a parsed ClientHello.
SSL_client_hello_get0_legacy_version	Return the legacy_version field from the ClientHello being processed.
SSL_client_hello_get0_random	Return the ClientHello Random field from a client-hello callback context.
SSL_client_hello_get0_session_id	Return the session_id field from the ClientHello being processed.
SSL_client_hello_get1_extensions_present	Allocate and return the list of extension types present in a ClientHello.
SSL_client_hello_get_extension_order	Copy ClientHello extension type values in the order they appeared.
SSL_client_hello_isv2	Report whether the ClientHello being processed used the SSLv2 wire format.
SSL_client_version	Return the numeric protocol version advertised by the client in ClientHello.
SSL_compress_certs	Pre-compress all certificates configured on a server SSL connection with algorithm alg.
SSL_config	Apply a named configuration section from a previously loaded config file to an SSL.
SSL_connect	Initiate the TLS/SSL handshake as a client on an already configured connection.
SSL_copy_session_id	Copy the session, method, certificate, and session-id context from one SSL object to another.
SSL_ct_is_enabled	Report whether Certificate Transparency validation is enabled on an SSL connection.
SSL_ctrl	Perform a low-level control operation on an SSL connection (prefer typed helpers/macros).
SSL_dane_clear_flags	Clear DANE authentication feature flags on an SSL connection.
SSL_dane_enable	Enable DANE TLSA authentication for a connection (must be called before the handshake).
SSL_dane_set_flags	Set selected DANE option flags on an SSL connection.
SSL_dane_tlsa_add	Add a DANE TLSA record used to authenticate the peer on a connection.
SSL_do_handshake	Drive the TLS/SSL handshake to completion on a connection already set to connect or accept state.
SSL_dup	Duplicate an SSL object that is still in its initial (pre-handshake) state.
SSL_dup_CA_list	Deep-copy a stack of CA subject names.
SSL_enable_ct	Enable Certificate Transparency validation on an SSL connection.
SSL_export_keying_material	Export keying material derived from the connection's exporter secret.
SSL_export_keying_material_early	Export keying material derived from the early exporter master secret.
SSL_extension_supported	Report whether OpenSSL has built-in handling for a TLS extension type.
SSL_free	Decrement the reference count of an SSL connection and free it when it reaches zero.
SSL_free_buffers	Free the read and write record buffers associated with an SSL connection.
SSL_get0_CA_list	Return the list of CA names configured to be sent to the peer.
SSL_get0_alpn_selected	Return the ALPN protocol selected during the handshake.
SSL_get0_client_cert_type	Retrieve the local client certificate type extension values configured on an SSL connection.
SSL_get0_connection	Return the QUIC connection SSL for a stream, or s itself for connection / non-QUIC objects.
SSL_get0_dane	Return the internal SSL_DANE state for ssl (libcrypto/libssl bridge).
SSL_get0_dane_authority	Return the matching DANE-TA / DANE-EE authority depth and optional anchors.
SSL_get0_dane_tlsa	Return the matching DANE TLSA record fields after successful authentication.
SSL_get0_group_name	Return the name of the key-exchange group negotiated on s.
SSL_get0_next_proto_negotiated	Return the Next Protocol Negotiation (NPN) protocol selected on this connection.
SSL_get0_param	Return a non-owning pointer to an SSL connection's verification parameters.
SSL_get0_peer_CA_list	Return the list of CA names the peer advertised for client authentication.
SSL_get0_peer_certificate	Return the peer's leaf certificate without incrementing its reference count.
SSL_get0_peer_rpk	Return the peer's negotiated raw public key (RFC 7250), if any.
SSL_get0_peer_scts	Return the signed certificate timestamps (SCTs) received on this connection.
SSL_get0_peername	Return the peer certificate DNS name or subject CN that matched a configured reference identifier.
SSL_get0_security_ex_data	Return the application pointer passed as ex to the connection security callback.
SSL_get0_server_cert_type	Retrieve the local server certificate type extension values configured on an SSL connection.
SSL_get0_verified_chain	Return the verified peer certificate chain including the end-entity certificate.
SSL_get1_compressed_cert	Copy the pre-compressed certificate stored for algorithm alg on a server SSL connection.
SSL_get1_peer_certificate	Return the peer's end-entity X509 certificate, incrementing its reference count.
SSL_get1_session	Return the current SSL_SESSION for ssl with an incremented reference count.
SSL_get1_supported_ciphers	Return the preference-ordered stack of enabled ciphers that would be sent in a ClientHello.
SSL_get_SSL_CTX	Return the SSL_CTX from which an SSL connection was created.
SSL_get_accept_stream_queue_len	Return how many incoming QUIC streams are waiting to be accepted.
SSL_get_all_async_fds	Retrieve every file descriptor an async SSL operation is waiting on.
SSL_get_async_status	Query the current asynchronous operation status for an SSL connection.
SSL_get_blocking_mode	Return whether a QUIC connection SSL object is in blocking mode.
SSL_get_certificate	Return the local certificate selected (or most recently set) for a connection.
SSL_get_changed_async_fds	Retrieve async wait fds added or removed since the previous query.
SSL_get_cipher_list	Return the name of the n-th enabled cipher for a connection (0-based preference order).
SSL_get_ciphers	Return the preference-ordered stack of ciphers available on an SSL connection.
SSL_get_client_CA_list	Return the CA names offered for client authentication on this connection.
SSL_get_client_ciphers	Return the stack of ciphers offered by the client (server-side only).
SSL_get_client_random	Copy the TLS ClientHello random value from a connection.
SSL_get_conn_close_info	Retrieve why a terminated QUIC connection was closed.
SSL_get_current_cipher	Return the cipher suite currently in use on an established connection.
SSL_get_current_compression	Return the compression method negotiated for sending on a connection.
SSL_get_current_expansion	Return the compression method used for expanding (decompressing) received records.
SSL_get_default_passwd_cb	Return the default PEM password callback currently set on an SSL connection.
SSL_get_default_passwd_cb_userdata	Return the user-data pointer passed to an SSL object's PEM password callback.
SSL_get_default_timeout	Return the default session timeout for the protocol negotiated on a connection.
SSL_get_early_data_status	Report whether early data was accepted, rejected, or never sent on a connection.
SSL_get_error	Map a TLS/SSL I/O return value to a detailed error / retry code.
SSL_get_event_timeout	Report when an SSL object next needs timer-driven processing (DTLS/QUIC).
SSL_get_ex_data	Retrieve application-specific data previously stored on an SSL object.
SSL_get_ex_data_X509_STORE_CTX_idx	Return the ex_data index used to retrieve the SSL pointer from an X509_STORE_CTX.
SSL_get_fd	Return the file descriptor linked to an SSL object's read BIO (or the shared fd).
SSL_get_finished	Copy up to count bytes of the local Finished message into buf.
SSL_get_handshake_rtt	Return the measured TLS handshake round-trip time in microseconds when available.
SSL_get_info_callback	Return the info callback previously set on an SSL with SSL_set_info_callback().
SSL_get_key_update_type	Return the type of any pending TLS 1.3 / QUIC key update that has not yet been sent.
SSL_get_max_early_data	Return the maximum early-data bytes configured on an SSL connection.
SSL_get_negotiated_client_cert_type	Return the negotiated client certificate type for a connection (RFC 7250).
SSL_get_negotiated_server_cert_type	Return the negotiated server certificate type for a connection (RFC 7250).
SSL_get_num_tickets	Return how many TLSv1.3 session tickets a server connection will send after a full handshake.
SSL_get_options	Return the option bitmask currently set on an SSL connection.
SSL_get_peer_cert_chain	Return the certificate chain as sent by the peer (not necessarily the verified chain).
SSL_get_peer_finished	Copy the peer's Finished handshake message hash into buf.
SSL_get_peer_signature_type_nid	Get the NID of the signature type the peer used to sign TLS handshake messages.
SSL_get_pending_cipher	Return the cipher suite negotiated for upcoming use but not yet active.
SSL_get_privatekey	Return the local private key configured on ssl (borrowed pointer).
SSL_get_psk_identity	Return the PSK identity used during the connection setup.
SSL_get_psk_identity_hint	Return the PSK identity hint used during the connection setup.
SSL_get_quiet_shutdown	Return whether quiet-shutdown mode is enabled on an SSL connection.
SSL_get_rbio	Return the read BIO currently attached to an SSL connection.
SSL_get_read_ahead	Report whether an SSL connection will read ahead on its underlying BIO.
SSL_get_record_padding_callback_arg	Return the opaque argument passed to a connection's TLS 1.3 record-padding callback.
SSL_get_recv_max_early_data	Return the recv_max_early_data limit configured on an SSL connection.
SSL_get_rfd	Return the file descriptor linked to an SSL object's read BIO.
SSL_get_rpoll_descriptor	Fill desc with the poll descriptor used to wait for readable SSL/QUIC data.
SSL_get_security_callback	Return the security callback currently installed on a connection.
SSL_get_security_level	Return the security level that constrains algorithms on a connection.
SSL_get_selected_srtp_profile	Return the SRTP protection profile negotiated on an SSL/DTLS connection.
SSL_get_server_random	Copy the TLS server random value from an SSL connection into a buffer.
SSL_get_servername	Return the server name indication (SNI) hostname associated with an SSL connection.
SSL_get_servername_type	Return the type of the server name indication currently associated with a connection.
SSL_get_session	Return the SSL_SESSION currently associated with a connection (no reference bump).
SSL_get_shared_ciphers	Format the shared (mutually supported) ciphers into a colon-separated name string.
SSL_get_shared_sigalgs	Get a shared (mutually supported) signature algorithm by index.
SSL_get_shutdown	Return the shutdown state bit-mask of an SSL connection.
SSL_get_sigalgs	Get a peer-supported signature algorithm by index.
SSL_get_signature_type_nid	Get the NID of the signature type used locally to sign TLS handshake messages.
SSL_get_srp_N [deprecated]	Return the SRP prime N configured on a connection (deprecated).
SSL_get_srp_g [deprecated]	Return the SRP generator configured on a connection (deprecated).
SSL_get_srp_userinfo [deprecated]	Return the optional SRP user-info string for a connection (deprecated).
SSL_get_srp_username [deprecated]	Return the SRP username associated with a connection (deprecated).
SSL_get_srtp_profiles	Return the stack of SRTP protection profiles configured on an SSL connection.
SSL_get_ssl_method	Return the SSL_METHOD currently associated with an SSL connection.
SSL_get_state	Return the current TLS/DTLS/QUIC handshake state enumeration for ssl.
SSL_get_stream_id	Return the QUIC stream ID for a stream SSL, or for a connection with a default stream.
SSL_get_stream_read_error_code	Get the application error code from a non-normal QUIC stream receive abort.
SSL_get_stream_read_state	Return the overall state of the receiving part of a QUIC stream.
SSL_get_stream_type	Return the QUIC stream type of an SSL connection or stream object.
SSL_get_stream_write_error_code	Get the application error code from a non-normal QUIC stream send abort.
SSL_get_stream_write_state	Return the overall state of the sending part of a QUIC stream.
SSL_get_value_uint	Read a uint64 feature/value identified by class_ / id from SSL s.
SSL_get_verify_callback	Return the certificate verification callback set on an SSL connection.
SSL_get_verify_depth	Return the maximum depth of the peer certificate chain that will be verified.
SSL_get_verify_mode	Return the peer certificate verification mode currently set on an SSL connection.
SSL_get_verify_result	Return the result code from verifying the peer's X509 certificate.
SSL_get_version	Return the protocol version name negotiated on a connection.
SSL_get_wbio	Return the write BIO currently attached to an SSL connection.
SSL_get_wfd	Return the file descriptor linked to an SSL object's write BIO.
SSL_get_wpoll_descriptor	Obtain a poll descriptor indicating when the SSL object can usefully write to the network.
SSL_group_to_name	Return the TLS group name registered for a group identifier on this connection.
SSL_handle_events	Advance an SSL object's event state (DTLS timers, QUIC event loop helper).
SSL_has_matching_session_id	Test whether a session ID is already present in the parent context's internal session cache.
SSL_has_pending	Check whether an SSL object has any buffered record data (processed or not).
SSL_in_before	Return whether no SSL/TLS handshake has been initiated yet on a connection.
SSL_in_init	Test whether an SSL object is currently performing a handshake.
SSL_inject_net_dgram	Inject a received UDP datagram into a QUIC SSL object's network BIO path.
SSL_is_connection	Test whether an SSL object is a connection (or non-QUIC) rather than a QUIC stream.
SSL_is_dtls	Test whether an SSL object is using the DTLS protocol.
SSL_is_init_finished	Test whether the connection is ready for fully protected application data.
SSL_is_quic	Report whether a connection is using QUIC (as opposed to TLS or DTLS).
SSL_is_server	Report whether an SSL object was created as a server endpoint.
SSL_is_stream_local	Test whether a QUIC stream SSL object was created locally (client-initiated locally).
SSL_is_tls	Report whether a connection is using SSL/TLS (as opposed to DTLS or QUIC).
SSL_key_update	Schedule a TLS 1.3 / QUIC key update of the requested type on s.
SSL_load_client_CA_file	Read certificates from a file and return a stack of their subject names.
SSL_load_client_CA_file_ex	Read certificates from a file and return a stack of their subject names (provider-aware).
SSL_net_read_desired	Report whether the SSL object wants to read from the network BIO.
SSL_net_write_desired	Report whether the SSL object wants to write to the network BIO.
SSL_new	Create a new SSL connection object that inherits settings from an SSL_CTX.
SSL_new_session_ticket	Queue generation of a new TLSv1.3 NewSessionTicket message on a server connection.
SSL_new_stream	Create a new locally initiated QUIC stream on a QUIC connection.
SSL_peek	Copy up to num pending application bytes without consuming them.
SSL_peek_ex	Peek at application data from an SSL/TLS connection without consuming it.
SSL_pending	Return how many processed application-data bytes are buffered and ready to read.
SSL_poll	Poll readiness conditions for one or more SSL/BIO poll descriptors (e.g. QUIC).
SSL_read	Read application data from a TLS/SSL connection into a buffer.
SSL_read_early_data	Read TLSv1.3 early data on a server connection (must be the first I/O call).
SSL_read_ex	Read application data from a TLS/SSL connection, reporting the byte count via an out parameter.
SSL_renegotiate	Schedule a full renegotiation of the current TLS ≤ 1.2 connection.
SSL_renegotiate_abbreviated	Schedule a renegotiation that attempts to resume the current session (TLS ≤ 1.2).
SSL_renegotiate_pending	Test whether a renegotiation (or renegotiation request) is scheduled but not yet performed.
SSL_rstate_string	Return a short two-letter string for the SSL object's current read state.
SSL_rstate_string_long	Return a long descriptive string for the SSL object's current read state.
SSL_select_next_proto	Select an ALPN/NPN protocol from a server list given client preferences.
SSL_sendfile	Send file contents over TLS using kernel sendfile where available.
SSL_session_reused	Query whether the handshake reused an existing SSL session.
SSL_set0_CA_list	Set the list of CA names sent to the peer on this connection (takes ownership).
SSL_set0_rbio	Set the read BIO for an SSL connection, transferring ownership of rbio.
SSL_set0_security_ex_data	Set the application pointer passed as ex to the connection security callback.
SSL_set0_tmp_dh_pkey	Set ephemeral DH parameters for a connection, transferring ownership of dhpkey.
SSL_set0_wbio	Set the write BIO for an SSL connection, transferring ownership of wbio.
SSL_set1_cert_comp_preference	Set the preferred certificate-compression algorithms for an SSL connection.
SSL_set1_client_cert_type	Set the client certificate type extension values for an SSL connection (RFC 7250).
SSL_set1_compressed_cert	Install a pre-compressed certificate blob on a server SSL connection.
SSL_set1_host	Set the expected DNS hostname used for certificate name checks (and SNI).
SSL_set1_initial_peer_addr	Set the initial UDP peer address used to establish a QUIC client connection.
SSL_set1_param	Copy verification parameters into an SSL connection.
SSL_set1_server_cert_type	Set the list of server certificate types this connection is willing to use.
SSL_set_SSL_CTX	Replace the SSL_CTX associated with an existing SSL connection object.
SSL_set_accept_state	Configure an SSL object to behave as a server (accept) endpoint.
SSL_set_allow_early_data_cb	Set a server callback that decides whether to accept TLSv1.3 early data on a connection.
SSL_set_alpn_protos	Set the ALPN protocol list advertised by a client SSL connection.
SSL_set_async_callback	Set the asynchronous completion callback on an SSL connection.
SSL_set_async_callback_arg	Set the user argument passed to an SSL object's asynchronous completion callback.
SSL_set_bio	Attach read and write BIOs to an SSL connection, transferring ownership as appropriate.
SSL_set_block_padding	Pad TLS 1.3 application records for ssl to a multiple of block_size.
SSL_set_blocking_mode	Enable or disable blocking mode on a QUIC connection SSL object.
SSL_set_cert_cb	Install a certificate-selection callback invoked before a cert is used in the handshake.
SSL_set_cipher_list	Set the TLSv1.2-and-below cipher list for a single SSL connection.
SSL_set_ciphersuites	Set the TLSv1.3 ciphersuite list for an SSL connection.
SSL_set_client_CA_list	Set the list of CA names sent when requesting a client certificate on a connection.
SSL_set_connect_state	Configure an SSL object to operate as a TLS client.
SSL_set_ct_validation_callback	Register a Certificate Transparency validation callback for an SSL connection. Invoked after ServerHelloDone to validate received SCTs; a non-positive callback result aborts the handshake. Setting a CT callback also requests an OCSP stapled response.
SSL_set_debug [deprecated]	Deprecated no-op retained for ABI compatibility; previously toggled SSL debug output.
SSL_set_default_passwd_cb	Set the default PEM password callback used when loading keys on an SSL.
SSL_set_default_passwd_cb_userdata	Set the user-data pointer passed to an SSL object's PEM password callback.
SSL_set_default_read_buffer_len	Set the default read-buffer size used for pipelined reads on a connection.
SSL_set_default_stream_mode	Configure how the default QUIC stream behaves for an SSL connection.
SSL_set_ex_data	Store application-specific data on an SSL connection at an ex_data index.
SSL_set_fd	Attach a bidirectional file descriptor as the I/O channel of an SSL connection.
SSL_set_generate_session_id	Set the callback used to generate new session IDs for a server SSL connection.
SSL_set_hostflags	Set X509_CHECK_FLAG_* host-checking flags for certificate hostname matching.
SSL_set_incoming_stream_policy	Configure whether a QUIC connection automatically accepts or rejects peer-initiated streams.
SSL_set_info_callback	Set the information callback used to observe state changes, alerts, and errors on a connection.
SSL_set_max_early_data	Set the maximum early-data bytes for a single SSL connection.
SSL_set_msg_callback	Install a callback that observes SSL/TLS/QUIC protocol messages on one connection.
SSL_set_not_resumable_session_callback	Register a callback that decides whether a session may be resumed.
SSL_set_num_tickets	Set how many NewSessionTicket messages a TLSv1.3 server connection should send.
SSL_set_options	Set additional SSL_OP_* option bits on an SSL connection (bitwise OR).
SSL_set_post_handshake_auth	Enable or disable TLSv1.3 post-handshake authentication on a connection.
SSL_set_psk_client_callback	Set the TLSv1.2-and-below PSK client callback on an SSL connection.
SSL_set_psk_find_session_callback	Set the TLSv1.3 PSK find-session callback on an SSL connection (server).
SSL_set_psk_server_callback	Set the PSK identity callback used by a TLS server SSL object.
SSL_set_psk_use_session_callback	Set the TLSv1.3 PSK use-session callback on an SSL connection (client).
SSL_set_purpose	Set the X509 purpose on an SSL connection's verification parameters.
SSL_set_quiet_shutdown	Enable or disable quiet shutdown (skip sending close_notify) on a connection.
SSL_set_read_ahead	Enable or disable read-ahead buffering on SSL s.
SSL_set_record_padding_callback	Install a TLS 1.3 record-padding callback on a connection.
SSL_set_record_padding_callback_arg	Set the opaque argument passed to a connection's TLS 1.3 record-padding callback.
SSL_set_recv_max_early_data	Set how many rejected early-data bytes a server SSL will skip before aborting.
SSL_set_rfd	Attach a file descriptor as the read channel of an SSL connection.
SSL_set_security_callback	Install a callback that filters crypto choices according to security policy.
SSL_set_security_level	Set the security level used to constrain algorithms and parameters on a connection.
SSL_set_session	Attach a session to an SSL object for client-side resumption.
SSL_set_session_id_context	Set the server-side session-id context for a single SSL connection.
SSL_set_session_secret_cb	Install an EAP-FAST session-secret callback that supplies the TLS master secret.
SSL_set_session_ticket_ext	Attach opaque session-ticket extension data to a client SSL connection.
SSL_set_session_ticket_ext_cb	Install a callback that processes the TLS session-ticket extension on an SSL.
SSL_set_shutdown	Set the shutdown state bit-mask on an SSL connection.
SSL_set_srp_server_param [deprecated]	Set SRP group parameters, salt, verifier, and info on a server connection (deprecated).
SSL_set_srp_server_param_pw [deprecated]	Set SRP server parameters for s from a username, password, and group id (deprecated).
SSL_set_ssl_method	Replace the TLS/SSL method used by an existing SSL connection.
SSL_set_tlsext_max_fragment_length	Set the maximum fragment length mode for an SSL connection.
SSL_set_tlsext_use_srtp	Set the DTLS use_srtp extension protection profiles for a connection.
SSL_set_tmp_dh_callback [deprecated]	Set a deprecated callback that supplies ephemeral DH parameters for a server connection.
SSL_set_trust	Set the X509 trust setting on an SSL connection's verification parameters.
SSL_set_value_uint	Set a configurable uint64 parameter on an SSL object (feature negotiation or generic).
SSL_set_verify	Set peer certificate verification mode and optional verify callback on a connection.
SSL_set_verify_depth	Set the maximum depth of the peer certificate chain that will be verified on a connection.
SSL_set_verify_result	Override the stored peer-certificate verification result on a connection.
SSL_set_wfd	Attach a file descriptor as the write channel of an SSL connection.
SSL_shutdown	Shut down an active TLS/DTLS or QUIC connection (close_notify / connection close).
SSL_shutdown_ex	Shut down a TLS/DTLS or QUIC connection with optional extended arguments.
SSL_srp_server_param_with_username [deprecated]	Finish server-side SRP parameter setup after the username is known (deprecated).
SSL_state_string	Return a short string describing the current overall state of an SSL connection.
SSL_state_string_long	Return a long descriptive string for the current SSL state.
SSL_stateless	Attempt a stateless (cookie) DTLS listen / HelloVerifyRequest exchange.
SSL_stream_conclude	Signal normal end-of-stream on the sending part of a QUIC stream.
SSL_stream_reset	Reset a QUIC stream associated with ssl, optionally sending an app error code.
SSL_trace	Message-callback style tracer for SSL/TLS protocol records (for SSL_CTX_set_msg_callback).
SSL_up_ref	Increment the reference count of an SSL connection object.
SSL_use_PrivateKey	Assign a private key to an SSL connection (reference count incremented).
SSL_use_PrivateKey_ASN1	Load a private key of type pk from ASN.1 DER into an SSL connection.
SSL_use_PrivateKey_file	Load the first private key from a file into an SSL connection.
SSL_use_RSAPrivateKey [deprecated]	Assign an RSA private key to an SSL connection (deprecated; use SSL_use_PrivateKey).
SSL_use_RSAPrivateKey_ASN1 [deprecated]	Load an RSA private key from a DER encoding into an SSL connection (deprecated).
SSL_use_RSAPrivateKey_file [deprecated]	Load an RSA private key from a PEM/DER file into an SSL connection (deprecated).
SSL_use_cert_and_key	Configure an SSL object's certificate, private key, and optional chain.
SSL_use_certificate	Assign an X509 certificate to an SSL connection (reference count incremented).
SSL_use_certificate_ASN1	Load a DER-encoded X.509 certificate into an SSL connection.
SSL_use_certificate_chain_file	Load a PEM certificate chain from file into ssl.
SSL_use_certificate_file	Load the first certificate from a file into an SSL connection.
SSL_use_psk_identity_hint	Set the PSK identity hint advertised by a TLS server connection.
SSL_verify_client_post_handshake	Request TLSv1.3 post-handshake client authentication from a server SSL.
SSL_version	Return the numeric protocol version negotiated on a connection.
SSL_waiting_for_async	Report whether an SSL connection is paused waiting for an async crypto job.
SSL_want	Return the non-blocking I/O want state of an SSL connection.
SSL_write	Write application data from a buffer to a TLS/SSL connection.
SSL_write_early_data	Write early data (0-RTT) on a client SSL connection before the handshake completes.
SSL_write_ex	Write application data from a buffer to a TLS/SSL connection (size_t length).
SSL_write_ex2	Write application data to a TLS/SSL/QUIC connection with extended write flags.
SXNETID_free	Free a Strong Extranet (SXNET) identifier and its contents.
SXNETID_it	Return the ASN.1 item descriptor for SXNETID.
SXNETID_new	Allocate a new Strong Extranet (SXNET) identifier.
SXNET_add_id_INTEGER	Add a Strong Extranet zone/user id using an ASN.1 INTEGER zone number.
SXNET_add_id_asc	Add a Strong Extranet zone/user id using an ASCII zone number.
SXNET_add_id_ulong	Add a Strong Extranet zone/user id using an unsigned long zone number.
SXNET_free	Free an SXNET structure and its contents.
SXNET_get_id_INTEGER	Look up the user id for a zone given as an ASN.1 INTEGER.
SXNET_get_id_asc	Look up the user id for a zone given as an ASCII decimal string.
SXNET_get_id_ulong	Look up the user id for a zone given as an unsigned long.
SXNET_it	Return the ASN.1 item descriptor for SXNET.
SXNET_new	Allocate a new Strong Extranet (SXNET) extension value.
TLS_FEATURE_free	Free a TLS Feature extension value and its contents.
TLS_FEATURE_new	Allocate an empty TLS Feature extension value (stack of feature integers).
TLS_client_method	Return a client-only SSL_METHOD that negotiates the highest mutually supported TLS version.
TLS_method	Return an SSL_METHOD that negotiates the highest mutually supported TLS version.
TLS_server_method	Return a server-only SSL_METHOD that negotiates the highest mutually supported TLS version.
TLSv1_1_client_method [deprecated]	Return the deprecated TLSv1.1 client-only method (prefer TLS_client_method).
TLSv1_1_method [deprecated]	Return the deprecated TLSv1.1 client-or-server method (prefer TLS_method).
TLSv1_1_server_method [deprecated]	Return the deprecated TLSv1.1 server-only method (prefer TLS_server_method).
TLSv1_2_client_method [deprecated]	Return the SSL_METHOD for a TLS 1.2 client-only stack (deprecated).
TLSv1_2_method [deprecated]	Return an SSL_METHOD for TLSv1.2 only (client and server; deprecated).
TLSv1_2_server_method [deprecated]	Return a server-only SSL_METHOD restricted to TLS 1.2 (deprecated; prefer TLS_server_method).
TLSv1_client_method [deprecated]	Return the deprecated TLSv1.0 client-only method (prefer TLS_client_method).
TLSv1_method [deprecated]	Return a client-or-server SSL_METHOD restricted to TLS 1.0 (deprecated; prefer TLS_method).
TLSv1_server_method [deprecated]	Return the deprecated TLSv1.0 server-only method (prefer TLS_server_method).
TS_ACCURACY_dup	Duplicate a time-stamp Accuracy.
TS_ACCURACY_free	Free a time-stamp Accuracy and its contents.
TS_ACCURACY_get_micros	Return the optional microseconds component of a time-stamp accuracy.
TS_ACCURACY_get_millis	Return the optional milliseconds component of a time-stamp accuracy.
TS_ACCURACY_get_seconds	Return the seconds component of a time-stamp accuracy structure.
TS_ACCURACY_new	Allocate an empty time-stamp Accuracy.
TS_ACCURACY_set_micros	Set the optional microseconds component of a time-stamp accuracy.
TS_ACCURACY_set_millis	Set the optional milliseconds component of a time-stamp accuracy.
TS_ACCURACY_set_seconds	Set the seconds component of a time-stamp accuracy structure.
TS_ASN1_INTEGER_print_bio	Print an ASN.1 INTEGER in decimal form to a BIO.
TS_CONF_get_tsa_section	Resolve the CONF section name used for TSA settings.
TS_CONF_load_cert	Load a single X.509 certificate from a PEM file for TSA configuration.
TS_CONF_load_certs	Load a stack of X.509 certificates from a PEM file for TSA configuration.
TS_CONF_load_key	Load a private key from a PEM file for TSA signing.
TS_CONF_set_accuracy	Set TSTInfo Accuracy seconds/millis/micros on a response context from CONF.
TS_CONF_set_certs	Load and set additional certificates included with TSA responses from CONF.
TS_CONF_set_clock_precision_digits	Set genTime clock precision digits on a response context from CONF.
TS_CONF_set_crypto_device	Set the ENGINE crypto device name from configuration for TSA operations.
TS_CONF_set_def_policy	Set the default TSA policy OID on a response context from CONF.
TS_CONF_set_default_engine	Set the default OpenSSL ENGINE by name for time-stamp configuration helpers.
TS_CONF_set_digests	Add acceptable request digests listed in CONF to a response context.
TS_CONF_set_ess_cert_id_chain	Configure whether ESS cert-id attributes include the certificate chain from CONF.
TS_CONF_set_ess_cert_id_digest	Set the ESS signing-certificate digest algorithm from CONF.
TS_CONF_set_ordering	Enable or disable the TSTInfo ordering flag from CONF.
TS_CONF_set_policies	Add acceptable TSA policies listed in CONF to a response context.
TS_CONF_set_serial	Configure the serial-number callback on a response context from CONF.
TS_CONF_set_signer_cert	Load and set the TSA signer certificate on a response context from CONF.
TS_CONF_set_signer_digest	Set the TSA signer digest on a response context from CONF.
TS_CONF_set_signer_key	Load and set the TSA signer private key on a response context from CONF.
TS_CONF_set_tsa_name	Enable including the TSA name in generated TSTInfo structures from CONF.
TS_MSG_IMPRINT_dup	Duplicate a time-stamp message imprint.
TS_MSG_IMPRINT_free	Free a time-stamp message imprint and its contents.
TS_MSG_IMPRINT_get_algo	Return the hash AlgorithmIdentifier from a message imprint (borrowed).
TS_MSG_IMPRINT_get_msg	Return the hashed message octets from a message imprint.
TS_MSG_IMPRINT_new	Allocate an empty time-stamp message imprint.
TS_MSG_IMPRINT_print_bio	Print a message imprint (algorithm and hash) to a BIO.
TS_MSG_IMPRINT_set_algo	Set the hash AlgorithmIdentifier of a message imprint.
TS_MSG_IMPRINT_set_msg	Set the hashed message octets of a message imprint.
TS_OBJ_print_bio	Print an ASN.1 object identifier in textual form to a BIO.
TS_REQ_add_ext	Insert an extension into a time-stamp request.
TS_REQ_delete_ext	Remove and return the request extension at index loc.
TS_REQ_dup	Duplicate a time-stamp request.
TS_REQ_ext_free	Free all extensions attached to a time-stamp request.
TS_REQ_free	Free a time-stamp request (TS_REQ) and its contents.
TS_REQ_get_cert_req	Return whether the request asks the TSA to include certificates.
TS_REQ_get_ext	Return the time-stamp request extension at index loc.
TS_REQ_get_ext_by_NID	Find the next request extension with NID nid.
TS_REQ_get_ext_by_OBJ	Find the next request extension with object identifier obj.
TS_REQ_get_ext_by_critical	Find the next request extension with criticality crit.
TS_REQ_get_ext_count	Return the number of extensions in a time-stamp request.
TS_REQ_get_ext_d2i	Decode the first request extension of type nid into its native structure.
TS_REQ_get_exts	Return the extension stack from a time-stamp request.
TS_REQ_get_msg_imprint	Return the message imprint from a time-stamp request.
TS_REQ_get_nonce	Return the optional nonce from a time-stamp request (borrowed).
TS_REQ_get_policy_id	Return the optional TSA policy OID from a time-stamp request.
TS_REQ_get_version	Return the version field of a time-stamp request.
TS_REQ_new	Allocate an empty time-stamp request (TS_REQ).
TS_REQ_print_bio	Print a human-readable dump of a time-stamp request to a BIO.
TS_REQ_set_cert_req	Set whether the TSA should include its signing certificate in the response.
TS_REQ_set_msg_imprint	Set the message imprint of a time-stamp request.
TS_REQ_set_nonce	Set the optional nonce in a time-stamp request.
TS_REQ_set_policy_id	Set the optional TSA policy OID requested in a time-stamp request.
TS_REQ_set_version	Set the version field of a time-stamp request (typically 1).
TS_REQ_to_TS_VERIFY_CTX	Initialise a verification context from the imprint, policy, and nonce of a request.
TS_RESP_CTX_add_failure_info	Add a PKIFailureInfo bit to the status info of a response context.
TS_RESP_CTX_add_flags	OR additional TS_RESP_CTX_* behaviour flags into a response context.
TS_RESP_CTX_add_md	Add an acceptable message-digest algorithm for incoming requests.
TS_RESP_CTX_add_policy	Add an acceptable TSA policy OID in addition to the default policy.
TS_RESP_CTX_free	Free a time-stamp response context and associated resources.
TS_RESP_CTX_get_request	Return the parsed time-stamp request associated with a response context.
TS_RESP_CTX_get_tst_info	Return the TSTInfo being built in a response context (for extension callbacks).
TS_RESP_CTX_new	Allocate a time-stamp response context using the default library context.
TS_RESP_CTX_new_ex	Allocate a time-stamp response context with an explicit library context.
TS_RESP_CTX_set_accuracy	Set the Accuracy values included in generated TSTInfo structures.
TS_RESP_CTX_set_certs	Set additional certificates included with generated time-stamp responses.
TS_RESP_CTX_set_clock_precision_digits	Set how many fractional-second digits are included in genTime.
TS_RESP_CTX_set_def_policy	Set the default TSA policy OID used when the request omits a policy.
TS_RESP_CTX_set_ess_cert_id_digest	Set the digest used for ESS signing-certificate attributes in responses.
TS_RESP_CTX_set_extension_cb	Install a callback that handles request extensions while building TSTInfo.
TS_RESP_CTX_set_serial_cb	Install the callback that supplies serial numbers for new TSTInfo structures.
TS_RESP_CTX_set_signer_cert	Set the TSA signing certificate used when creating responses.
TS_RESP_CTX_set_signer_digest	Set the message digest used when signing the PKCS#7 time-stamp token.
TS_RESP_CTX_set_signer_key	Set the private key used to sign time-stamp responses.
TS_RESP_CTX_set_status_info	Set the response status and optional statusString text (unconditionally).
TS_RESP_CTX_set_status_info_cond	Set status info only while the current status is still TS_STATUS_GRANTED.
TS_RESP_CTX_set_time_cb	Install the callback that supplies the genTime value for new TSTInfo structures.
TS_RESP_create_response	Create a signed time-stamp response for the DER request read from req_bio.
TS_RESP_dup	Duplicate a time-stamp response.
TS_RESP_free	Free a time-stamp response (TS_RESP) and its contents.
TS_RESP_get_status_info	Return the PKIStatusInfo from a time-stamp response.
TS_RESP_get_token	Return the PKCS#7 time-stamp token from a response.
TS_RESP_get_tst_info	Return the parsed TSTInfo from a time-stamp response.
TS_RESP_new	Allocate an empty time-stamp response (TS_RESP).
TS_RESP_print_bio	Print a human-readable dump of a time-stamp response to a BIO.
TS_RESP_set_status_info	Set the PKIStatusInfo of a time-stamp response.
TS_RESP_set_tst_info	Attach a signed time-stamp token and parsed TSTInfo to a response.
TS_RESP_verify_response	Verify a time-stamp response against the criteria in ctx.
TS_RESP_verify_signature	Verify the signer certificate and signature of a PKCS#7 time-stamp token.
TS_RESP_verify_token	Verify a PKCS#7 time-stamp token against the criteria in ctx.
TS_STATUS_INFO_dup	Duplicate a time-stamp PKIStatusInfo.
TS_STATUS_INFO_free	Free a time-stamp PKIStatusInfo and its contents.
TS_STATUS_INFO_get0_failure_info	Return the optional PKIFailureInfo bit string from a status-info structure.
TS_STATUS_INFO_get0_status	Return the PKIStatus integer from a status-info structure.
TS_STATUS_INFO_get0_text	Return the optional statusString texts from a status-info structure.
TS_STATUS_INFO_new	Allocate an empty time-stamp PKIStatusInfo.
TS_STATUS_INFO_print_bio	Print a human-readable dump of a TS_STATUS_INFO structure to a BIO.
TS_STATUS_INFO_set_status	Set the PKIStatus integer in a status-info structure.
TS_TST_INFO_add_ext	Insert an extension into a TSTInfo structure.
TS_TST_INFO_delete_ext	Remove and return the TSTInfo extension at index loc.
TS_TST_INFO_dup	Duplicate a time-stamp token info.
TS_TST_INFO_ext_free	Free all extensions attached to a TSTInfo structure.
TS_TST_INFO_free	Free a time-stamp token info (TSTInfo) and its contents.
TS_TST_INFO_get_accuracy	Return the optional accuracy field from a TSTInfo structure.
TS_TST_INFO_get_ext	Return the TSTInfo extension at index loc.
TS_TST_INFO_get_ext_by_NID	Find the next TSTInfo extension with NID nid.
TS_TST_INFO_get_ext_by_OBJ	Find the next TSTInfo extension with object identifier obj.
TS_TST_INFO_get_ext_by_critical	Find the next TSTInfo extension with criticality crit.
TS_TST_INFO_get_ext_count	Return the number of extensions in a TSTInfo structure.
TS_TST_INFO_get_ext_d2i	Decode the first TSTInfo extension of type nid into its native structure.
TS_TST_INFO_get_exts	Return the extension stack from a TSTInfo structure.
TS_TST_INFO_get_msg_imprint	Return the message imprint from a TSTInfo structure.
TS_TST_INFO_get_nonce	Return the optional nonce echoed from the request in a TSTInfo structure.
TS_TST_INFO_get_ordering	Return the ordering flag from a TSTInfo structure.
TS_TST_INFO_get_policy_id	Return the TSA policy OID from a TSTInfo structure.
TS_TST_INFO_get_serial	Return the serial number from a TSTInfo structure.
TS_TST_INFO_get_time	Return the genTime time-stamp instant from a TSTInfo structure.
TS_TST_INFO_get_tsa	Return the optional TSA name from a TSTInfo structure.
TS_TST_INFO_get_version	Return the version field from a TSTInfo structure.
TS_TST_INFO_new	Allocate an empty time-stamp token info (TSTInfo).
TS_TST_INFO_print_bio	Print a human-readable dump of a TSTInfo structure to a BIO.
TS_TST_INFO_set_accuracy	Set the optional accuracy field of a TSTInfo structure.
TS_TST_INFO_set_msg_imprint	Set the message imprint in a TSTInfo structure.
TS_TST_INFO_set_nonce	Set the optional nonce echoed from the request in a TSTInfo structure.
TS_TST_INFO_set_ordering	Set the ordering flag indicating whether time-stamps from this TSA are ordered.
TS_TST_INFO_set_policy_id	Set the TSA policy OID in a TSTInfo structure.
TS_TST_INFO_set_serial	Set the serial number uniquely identifying a time-stamp token.
TS_TST_INFO_set_time	Set the genTime time-stamp instant in a TSTInfo structure.
TS_TST_INFO_set_tsa	Set the optional TSA name in a TSTInfo structure.
TS_TST_INFO_set_version	Set the version field of a TSTInfo structure (typically 1).
TS_VERIFY_CTX_add_flags	Add TS_VFY_* bits to the verification flags.
TS_VERIFY_CTX_cleanup	Release resources held by a verification context and clear it for reuse.
TS_VERIFY_CTX_free	Free a verification context allocated by TS_VERIFY_CTX_new().
TS_VERIFY_CTX_init	Initialize a verification context to a cleared empty state.
TS_VERIFY_CTX_new	Allocate an empty time-stamp verification context.
TS_VERIFY_CTX_set_certs	Set the untrusted certificate stack used when verifying a time-stamp token.
TS_VERIFY_CTX_set_data	Set the BIO of raw data used when TS_VFY_DATA is enabled.
TS_VERIFY_CTX_set_flags	Replace the verification flags with f.
TS_VERIFY_CTX_set_imprint	Set the expected message imprint used when TS_VFY_IMPRINT is enabled.
TS_VERIFY_CTX_set_store	Set the trusted certificate store used when verifying a time-stamp token.
TS_X509_ALGOR_print_bio	Print an X509_ALGOR AlgorithmIdentifier to a BIO.
TS_ext_print_bio	Print a stack of X.509 extensions in human-readable form to a BIO.
TXT_DB_create_index	Build a hash index on column field of a text database.
TXT_DB_free	Free a text database and all stored rows.
TXT_DB_get_by_index	Look up a row by the value of indexed field idx.
TXT_DB_insert	Insert a row into a text database and update any indexes.
TXT_DB_read	Read a text database from a BIO into memory.
TXT_DB_write	Write a text database to a BIO in comma-separated row format.
UI_OpenSSL	Return OpenSSL's built-in console UI_METHOD (machine/OS-dependent prompting).
UI_UTIL_read_pw	Prompt for a passphrase, using buff as the verification scratch buffer.
UI_UTIL_read_pw_string	Prompt for a passphrase into buf using the default UI_METHOD.
UI_UTIL_wrap_read_pem_callback	Build a temporary UI_METHOD that wraps a PEM password callback.
UI_add_error_string	Add an error message string to a UI for display (pointer stored, not copied).
UI_add_info_string	Add informational text shown with other prompts (pointer used verbatim).
UI_add_input_boolean	Add a yes/no prompt that stores one OK or Cancel character in result_buf.
UI_add_input_string	Add a prompt that collects a string into a caller-owned result buffer.
UI_add_user_data	Store application user data on a UI, replacing any previous pointer.
UI_add_verify_string	Add a string prompt whose result must match test_buf (for example password confirm).
UI_construct_prompt	Build a heap-allocated prompt string for an input description and optional object name.
UI_create_method	Allocate a new UI_METHOD with the given name.
UI_ctrl	Send a parameterised control command to a UI (or query UI state).
UI_destroy_method	Destroy a UI_METHOD created with UI_create_method().
UI_dup_error_string	Add an error/info string, duplicating text into UI-owned storage.
UI_dup_info_string	Add informational text after copying text into UI-owned storage.
UI_dup_input_boolean	Add a boolean prompt, copying the prompt strings into ui.
UI_dup_input_string	Add a string prompt, duplicating prompt into UI-owned storage.
UI_dup_user_data	Duplicate user_data via the method's duplicator and store it on the UI.
UI_dup_verify_string	Add a password prompt that must match test_buf, copying the prompt string.
UI_free	Free a UI and any duplicated strings, results, and related storage.
UI_get0_action_string	Return the optional action description for a boolean UI_STRING.
UI_get0_output_string	Return the string to present to the user for a UI_STRING (prompt, info, or error).
UI_get0_result	Return the result text for a UI prompt by its add-index.
UI_get0_result_string	Return the user-entered result string stored on a prompt UI_STRING.
UI_get0_test_string	Return the reference string a verify prompt's result must match.
UI_get0_user_data	Return the application user data last set with UI_add_user_data or UI_dup_user_data.
UI_get_default_method	Return the process-wide default UI_METHOD used by UI_new().
UI_get_ex_data	Retrieve application-specific ex_data previously stored on a UI.
UI_get_input_flags	Return the input flags associated with a UI_STRING.
UI_get_method	Return the UI_METHOD currently associated with a UI instance.
UI_get_result_length	Return the length in bytes of the result text for a UI prompt by its add-index.
UI_get_result_maxsize	Return the maximum allowed length of the result for a prompt UI_STRING.
UI_get_result_minsize	Return the minimum accepted result length for a UI string prompt.
UI_get_result_string_length	Return the length in bytes of the result stored on a prompt UI_STRING.
UI_get_string_type	Return which kind of UI prompt or message a UI_STRING represents.
UI_method_get_closer	Return the closer callback previously set on a UI_METHOD.
UI_method_get_data_destructor	Return the user-data destructor callback previously set on a UI_METHOD.
UI_method_get_data_duplicator	Return the user-data duplicator callback previously set on a UI_METHOD.
UI_method_get_ex_data	Return application ex_data previously stored on a UI_METHOD.
UI_method_get_flusher	Return the flusher callback previously set on a UI_METHOD.
UI_method_get_opener	Return the opener callback previously set on a UI_METHOD.
UI_method_get_prompt_constructor	Return the prompt-constructor callback previously set on a UI_METHOD.
UI_method_get_reader	Return the reader callback previously set on a UI_METHOD.
UI_method_get_writer	Return the writer callback previously set on a UI_METHOD.
UI_method_set_closer	Set the closer callback that ends a UI session (for example closes a tty or window).
UI_method_set_data_duplicator	Set callbacks used by UI_dup_user_data() to copy and free method user data.
UI_method_set_ex_data	Store application-specific ex_data on a UI_METHOD at index idx.
UI_method_set_flusher	Set the flusher callback that presents accumulated UI output (for example shows a dialog).
UI_method_set_opener	Set the opener callback that starts a UI session (for example opens a tty or window).
UI_method_set_prompt_constructor	Set the callback that builds prompt strings for a UI_METHOD.
UI_method_set_reader	Set the reader callback that collects input for each UI_STRING prompt.
UI_method_set_writer	Set the writer callback that outputs each UI_STRING (prompt label, info, or error).
UI_new	Allocate a new UI that uses the process-wide default UI_METHOD.
UI_new_method	Create a new UI that uses the given method instead of the default.
UI_null	Return a no-op UI_METHOD that performs no prompting.
UI_process	Run the UI method to present prompts and collect answers for all added strings.
UI_set_default_method	Change the process-wide default UI_METHOD used by UI_new().
UI_set_ex_data	Store application-specific ex_data on a UI at index idx.
UI_set_method	Replace the UI_METHOD associated with an existing UI instance.
UI_set_result	Store a NUL-terminated prompt result on a UI_STRING (length taken from the string).
UI_set_result_ex	Store a prompt result of explicit length on a UI_STRING.
USERNOTICE_free	Free a user notice policy qualifier and its contents.
USERNOTICE_it	Return the ASN.1 item descriptor for USERNOTICE.
USERNOTICE_new	Allocate an empty user notice policy qualifier.
UTF8_getc	Decode one Unicode code point from a UTF-8 byte sequence.
UTF8_putc	Encode one Unicode code point as UTF-8.
WHIRLPOOL [deprecated]	Compute the WHIRLPOOL digest of bytes at inp in one shot (deprecated; prefer EVP_Digest).
WHIRLPOOL_BitUpdate [deprecated]	Absorb bits bits of message data into a WHIRLPOOL context (deprecated).
WHIRLPOOL_Final [deprecated]	Finalise a WHIRLPOOL digest into a 64-byte buffer (deprecated; prefer EVP_DigestFinal_ex).
WHIRLPOOL_Init [deprecated]	Initialize a low-level WHIRLPOOL digest context (deprecated; prefer EVP_DigestInit_ex).
WHIRLPOOL_Update [deprecated]	Absorb more message bytes into a WHIRLPOOL digest context (deprecated).
X509V3_EXT_CRL_add_conf	Add CRL extensions described by a config section to a CRL.
X509V3_EXT_CRL_add_nconf	Add all extensions from a configuration section to a CRL.
X509V3_EXT_REQ_add_conf	Add all extensions from an LHASH configuration section to a certificate request (legacy).
X509V3_EXT_REQ_add_nconf	Add all extensions from a configuration section to a certificate request.
X509V3_EXT_add	Register a custom X.509v3 extension method.
X509V3_EXT_add_alias	Alias an existing X.509v3 extension method under a new NID.
X509V3_EXT_add_conf	Add all extensions from an LHASH configuration section to a certificate (legacy).
X509V3_EXT_add_list	Register a NULL-terminated list of custom X.509v3 extension methods.
X509V3_EXT_add_nconf	Add all extensions from a configuration section to a certificate.
X509V3_EXT_add_nconf_sk	Add all extensions from a configuration section to an extension stack.
X509V3_EXT_cleanup	Unregister and free all dynamically added custom X.509v3 extension methods.
X509V3_EXT_conf	Create an X.509v3 extension from a named LHASH configuration value (legacy).
X509V3_EXT_conf_nid	Create an X.509v3 extension from an LHASH configuration by NID (legacy).
X509V3_EXT_d2i	Decode the ASN.1 value of an X509_EXTENSION into its extension-specific C structure.
X509V3_EXT_get	Look up the registered X509V3_EXT_METHOD for an X509_EXTENSION by its OID.
X509V3_EXT_get_nid	Look up the registered X509V3_EXT_METHOD for an extension NID.
X509V3_EXT_i2d	Build an X509_EXTENSION by encoding an extension-specific structure.
X509V3_EXT_nconf	Create an X.509v3 extension from a named configuration value.
X509V3_EXT_nconf_nid	Create an X.509v3 extension from a configuration value identified by NID.
X509V3_EXT_print	Print a single X.509v3 extension in human-readable form to a BIO.
X509V3_EXT_print_fp	Print a single X.509v3 extension in human-readable form to a FILE stream.
X509V3_EXT_val_prn	Print a stack of CONF_VALUE extension values to a BIO with indentation.
X509V3_NAME_from_section	Populate an X509_NAME from a stack of configuration DN name/value pairs.
X509V3_add1_i2d	Encode extension structure value and add/replace it on stack *x.
X509V3_add_standard_extensions	Add the built-in standard X509v3 extension definitions (legacy compatibility).
X509V3_add_value	Append a name/value pair to a CONF_VALUE stack used by X509v3 helpers.
X509V3_add_value_bool	Append a boolean CONF_VALUE named name with value "TRUE" or "FALSE".
X509V3_add_value_bool_nf	Append a boolean CONF_VALUE named name only when asn1_bool is true ("TRUE").
X509V3_add_value_int	Append a name/value pair whose value is the decimal form of an ASN1_INTEGER.
X509V3_add_value_uchar	Append a name/value pair whose value is an unsigned-char C string to a CONF_VALUE stack.
X509V3_conf_free	Free a CONF_VALUE previously produced for X.509v3 configuration helpers.
X509V3_extensions_print	Print a stack of X.509v3 extensions to a BIO with an optional section title.
X509V3_get_d2i	Decode the first (or next) extension of type nid from a stack into its native structure.
X509V3_get_section	Load a named configuration section via the context's CONF method.
X509V3_get_string	Look up a configuration string via the X509V3_CTX database method.
X509V3_get_value_bool	Parse a CONF_VALUE as a boolean into an ASN.1 boolean integer.
X509V3_get_value_int	Parse a CONF_VALUE as an integer into a newly allocated ASN1_INTEGER.
X509V3_parse_list	Parse a comma-separated name[=value]list into a stack of CONF_VALUE entries.
X509V3_section_free	Free a CONF_VALUE section previously returned by X509V3_get_section().
X509V3_set_conf_lhash	Attach a legacy LHASH configuration database to an extension context.
X509V3_set_ctx	Fill an X509V3_CTX with the certificates, request, CRL, and flags used when building extensions.
X509V3_set_issuer_pkey	Set the issuer private key used as a fallback when building authority key identifiers.
X509V3_set_nconf	Attach an NCONF configuration database to an extension context.
X509V3_string_free	Free a string previously returned by X509V3_get_string() using the context's conf method.
X509_ALGORS_it	Return the ASN.1 item descriptor for X509_ALGORS.
X509_ALGOR_cmp	Compare two AlgorithmIdentifier values for equality.
X509_ALGOR_copy	Copy an AlgorithmIdentifier into an existing X509_ALGOR object.
X509_ALGOR_dup	Deep-copy an X509_ALGOR (AlgorithmIdentifier).
X509_ALGOR_free	Free an X.509 AlgorithmIdentifier and its contents.
X509_ALGOR_get0	Borrow pointers to the algorithm OID and parameter from an X509_ALGOR.
X509_ALGOR_it	Return the ASN.1 item descriptor for X509_ALGOR.
X509_ALGOR_new	Allocate an empty X.509 AlgorithmIdentifier.
X509_ALGOR_set0	Set the algorithm OID and parameter of an X509_ALGOR, transferring ownership.
X509_ALGOR_set_md	Set an X509_ALGOR to identify a message digest algorithm.
X509_ATTRIBUTE_count	Return the number of values held by an X509_ATTRIBUTE.
X509_ATTRIBUTE_create	Create an X.509 Attribute from a NID and a single ASN.1 value.
X509_ATTRIBUTE_create_by_NID	Create or reuse an X.509 Attribute identified by NID with typed data.
X509_ATTRIBUTE_create_by_OBJ	Create or reuse an X.509 Attribute identified by OID with typed data.
X509_ATTRIBUTE_create_by_txt	Create an X509_ATTRIBUTE from a textual OID/name and value bytes.
X509_ATTRIBUTE_dup	Deep-copy an X.509 Attribute.
X509_ATTRIBUTE_free	Free an X.509 Attribute and its contents.
X509_ATTRIBUTE_get0_data	Return the typed value pointer for attribute entry idx.
X509_ATTRIBUTE_get0_object	Return the object identifier that names an X509_ATTRIBUTE.
X509_ATTRIBUTE_get0_type	Return the ASN.1 value at index idx within a multi-valued X509_ATTRIBUTE.
X509_ATTRIBUTE_it	Return the ASN.1 item descriptor for X509_ATTRIBUTE.
X509_ATTRIBUTE_new	Allocate an empty X.509 Attribute structure.
X509_ATTRIBUTE_set1_data	Set the attribute value from typed bytes (copies data).
X509_ATTRIBUTE_set1_object	Set the OID of attribute attr to a copy of obj.
X509_CERT_AUX_free	Free certificate auxiliary info and its contents.
X509_CERT_AUX_it	Return the ASN.1 item descriptor for X509_CERT_AUX.
X509_CERT_AUX_new	Allocate empty certificate auxiliary info (trust/reject/alias/keyid).
X509_CINF_free	Free a X.509 TBSCertificate (X509_CINF) structure and its contents.
X509_CINF_it	Return the ASN.1 item descriptor for X509_CINF.
X509_CINF_new	Allocate an empty X.509 TBSCertificate (X509_CINF) structure.
X509_CRL_INFO_free	Free a X.509 CRL information (tbsCertList) structure and its contents.
X509_CRL_INFO_it	Return the ASN.1 item descriptor for X509_CRL_INFO.
X509_CRL_INFO_new	Allocate an empty X.509 CRL information (tbsCertList) structure.
X509_CRL_METHOD_free	Free a custom CRL method allocated by X509_CRL_METHOD_new().
X509_CRL_METHOD_new	Allocate a custom CRL method with optional init, free, lookup, and verify callbacks.
X509_CRL_add0_revoked	Append revoked-certificate entry rev to CRL crl, transferring ownership.
X509_CRL_add1_ext_i2d	Encode value as a CRL extension of type nid and append it.
X509_CRL_add_ext	Insert a duplicate of extension ex into a CRL at loc.
X509_CRL_check_suiteb	Check that a CRL satisfies Suite B signature/algorithm constraints.
X509_CRL_cmp	Compare two CRLs by issuer name.
X509_CRL_delete_ext	Remove and return the extension at index loc from a CRL.
X509_CRL_diff	Construct a delta CRL listing revocations in newer that are absent from base.
X509_CRL_digest	Compute a digest of the DER encoding of an entire X.509 CRL.
X509_CRL_dup	Deep-copy an X.509 certificate revocation list.
X509_CRL_free	Free an X.509 CRL and its contents.
X509_CRL_get0_by_cert	Find a revoked-certificate entry in a CRL matching certificate x's serial.
X509_CRL_get0_by_serial	Find a revoked-certificate entry in a CRL by serial number.
X509_CRL_get0_extensions	Return the stack of extensions on a CRL (crlExtensions), if any.
X509_CRL_get0_lastUpdate	Return the thisUpdate (lastUpdate) time of a CRL without copying.
X509_CRL_get0_nextUpdate	Return the nextUpdate time of a CRL, if present.
X509_CRL_get0_signature	Obtain internal pointers to a CRL's signature value and signature algorithm.
X509_CRL_get_REVOKED	Return the mutable stack of revoked-certificate entries in a CRL.
X509_CRL_get_ext	Return the CRL extension at index loc without removing it.
X509_CRL_get_ext_by_NID	Find the next extension on a CRL with the given NID.
X509_CRL_get_ext_by_OBJ	Find the next CRL extension whose OID equals obj.
X509_CRL_get_ext_by_critical	Find a CRL extension by criticality flag, searching after lastpos.
X509_CRL_get_ext_count	Return the number of extensions on a CRL.
X509_CRL_get_ext_d2i	Decode the first (or next) CRL extension with NID nid into its ASN.1 type.
X509_CRL_get_issuer	Return the issuer X509_NAME of a certificate revocation list.
X509_CRL_get_lastUpdate [deprecated]	Return the CRL thisUpdate time (deprecated alias of X509_CRL_get0_lastUpdate).
X509_CRL_get_meth_data	Return the method-specific application data previously set on a CRL.
X509_CRL_get_nextUpdate [deprecated]	Return the nextUpdate field of a CRL (deprecated; prefer X509_CRL_get0_nextUpdate).
X509_CRL_get_signature_nid	Return the NID of the signature algorithm used on CRL crl.
X509_CRL_get_version	Return the numerical version field of an X.509 CRL.
X509_CRL_it	Return the ASN.1 item descriptor for X509_CRL.
X509_CRL_load_http	Load an X.509 CRL in ASN.1/DER form via HTTP from url.
X509_CRL_match	Compare two CRLs by issuer name and signature value.
X509_CRL_new	Allocate an empty X.509 Certificate Revocation List.
X509_CRL_new_ex	Allocate an empty X509_CRL associated with a library context.
X509_CRL_print	Print a human-readable CRL dump to BIO bp.
X509_CRL_print_ex	Print a human-readable CRL to a BIO, with name-printing flags.
X509_CRL_print_fp	Print a CRL to a FILE using default formatting.
X509_CRL_set1_lastUpdate	Set the thisUpdate field of a certificate revocation list.
X509_CRL_set1_nextUpdate	Set the nextUpdate time on a certificate revocation list by copying tm.
X509_CRL_set_default_method	Install the default custom CRL method used when looking up revoked entries.
X509_CRL_set_issuer_name	Set the issuer distinguished name on a certificate revocation list.
X509_CRL_set_meth_data	Attach method-specific application data to a CRL for its X509_CRL_METHOD callbacks.
X509_CRL_set_version	Set the version field of a certificate revocation list.
X509_CRL_sign	Sign a certificate revocation list with a private key and digest.
X509_CRL_sign_ctx	Sign a CRL using an initialized digest/signing context.
X509_CRL_sort	Sort the revoked-certificate entries of a CRL by serial number.
X509_CRL_up_ref	Increment the reference count on a CRL.
X509_CRL_verify	Verify a CRL's signature with the issuer public key r.
X509_EXTENSIONS_it	Return the ASN.1 item descriptor for X509_EXTENSIONS.
X509_EXTENSION_create_by_NID	Create (or reuse) an X509_EXTENSION with the given NID, criticality, and octet data.
X509_EXTENSION_create_by_OBJ	Create (or reuse) an X509_EXTENSION with OID obj and octet data.
X509_EXTENSION_dup	Deep-copy an X.509 certificate extension.
X509_EXTENSION_free	Free a X.509 extension and its contents.
X509_EXTENSION_get_critical	Report whether an X.509 extension is marked critical.
X509_EXTENSION_get_data	Return the OCTET STRING payload of an X.509 extension.
X509_EXTENSION_get_object	Return the OID identifying an X.509v3 extension's type.
X509_EXTENSION_it	Return the ASN.1 item descriptor for X509_EXTENSION.
X509_EXTENSION_new	Allocate an empty X.509 extension.
X509_EXTENSION_set_critical	Set whether an X.509v3 extension is marked critical.
X509_EXTENSION_set_data	Set the OCTET STRING data of an X.509v3 extension (duplicated internally).
X509_EXTENSION_set_object	Set the extension OID on an X509_EXTENSION, copying obj.
X509_INFO_free	Free an X509_INFO and any certificate, CRL, or key it owns.
X509_INFO_new	Allocate an empty X509_INFO (certificate/CRL/key PEM bundle entry).
X509_LOOKUP_by_alias	Look up a certificate or CRL by alias / friendly name through a lookup method.
X509_LOOKUP_by_fingerprint	Look up a certificate or CRL in a lookup method by fingerprint.
X509_LOOKUP_by_issuer_serial	Look up a certificate in a lookup method by issuer name and serial number.
X509_LOOKUP_by_subject	Look up a certificate or CRL by subject name via a lookup method.
X509_LOOKUP_by_subject_ex	Look up a certificate or CRL by subject name with an explicit library context.
X509_LOOKUP_ctrl	Invoke the control method of an X509_LOOKUP (no explicit library context).
X509_LOOKUP_ctrl_ex	Invoke the control method of an X509_LOOKUP with an explicit library context.
X509_LOOKUP_file	Return the built-in lookup method that loads certificates and CRLs from PEM/DER files.
X509_LOOKUP_free	Free an X509_LOOKUP and its method-specific state.
X509_LOOKUP_get_method_data	Return the method-specific opaque data attached to an X509_LOOKUP.
X509_LOOKUP_get_store	Return the X509_STORE that owns a lookup object.
X509_LOOKUP_hash_dir	Return the built-in lookup method that loads certificates and CRLs from a hashed directory.
X509_LOOKUP_init	Initialize an X509_LOOKUP by invoking its method's init callback.
X509_LOOKUP_meth_free	Free an X509_LOOKUP_METHOD previously created with X509_LOOKUP_meth_new().
X509_LOOKUP_meth_get_ctrl	Return the control callback registered on an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_get_free	Return the free callback registered on an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_get_get_by_alias	Return the get-by-alias callback from an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_get_get_by_fingerprint	Return the get-by-fingerprint function pointer installed on a lookup method.
X509_LOOKUP_meth_get_get_by_issuer_serial	Return the get-by-issuer-and-serial callback from an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_get_get_by_subject	Return the get-by-subject callback from an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_get_init	Return the initialization callback registered on an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_get_new_item	Return the new-item callback from an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_get_shutdown	Return the shutdown callback registered on an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_new	Allocate a new custom X509_LOOKUP_METHOD with the given method name.
X509_LOOKUP_meth_set_ctrl	Install the control callback on an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_set_free	Set the method callback that frees a lookup context's method-specific state.
X509_LOOKUP_meth_set_get_by_alias	Set the get-by-alias callback on an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_set_get_by_fingerprint	Set the get-by-fingerprint callback on an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_set_get_by_issuer_serial	Set the get-by-issuer-and-serial callback on an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_set_get_by_subject	Set the get-by-subject callback on an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_set_init	Set the initialization callback on an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_set_new_item	Set the per-LOOKUP instance constructor callback on an X509_LOOKUP_METHOD.
X509_LOOKUP_meth_set_shutdown	Set the shutdown callback for a custom X509_LOOKUP_METHOD.
X509_LOOKUP_new	Create a new X509_LOOKUP using the given lookup method.
X509_LOOKUP_set_method_data	Attach method-specific opaque data to an X509_LOOKUP.
X509_LOOKUP_shutdown	Shut down a lookup object, releasing method-specific resources via its shutdown callback.
X509_LOOKUP_store	Return the X509_LOOKUP_METHOD that loads certificates/CRLs via OSSL_STORE URIs.
X509_NAME_ENTRY_create_by_NID	Create an X509_NAME_ENTRY from an attribute NID and value bytes.
X509_NAME_ENTRY_create_by_OBJ	Create an X509_NAME_ENTRY from an ASN1_OBJECT, string type, and value.
X509_NAME_ENTRY_create_by_txt	Create an X509_NAME_ENTRY from a textual attribute name and value bytes.
X509_NAME_ENTRY_dup	Deep-copy an X509_NAME_ENTRY.
X509_NAME_ENTRY_free	Free a X.509 Name entry (AttributeTypeAndValue) and its contents.
X509_NAME_ENTRY_get_data	Return the attribute value string of an X509_NAME_ENTRY.
X509_NAME_ENTRY_get_object	Return the attribute type OID of an X509_NAME_ENTRY.
X509_NAME_ENTRY_it	Return the ASN.1 item descriptor for X509_NAME_ENTRY.
X509_NAME_ENTRY_new	Allocate an empty X.509 Name entry (AttributeTypeAndValue).
X509_NAME_ENTRY_set	Return the RDN set index of a name entry within its X509_NAME.
X509_NAME_ENTRY_set_data	Set the attribute value of an X509_NAME_ENTRY.
X509_NAME_ENTRY_set_object	Set the attribute type OID of an X509_NAME_ENTRY.
X509_NAME_add_entry	Insert a copy of name entry ne into name at the given location/set.
X509_NAME_add_entry_by_NID	Add an RDN attribute identified by nid to name.
X509_NAME_add_entry_by_OBJ	Add an RDN attribute identified by ASN.1 object obj to name.
X509_NAME_add_entry_by_txt	Add a name entry identified by field name field to an X509_NAME.
X509_NAME_cmp	Compare two X.509 distinguished names for equality.
X509_NAME_delete_entry	Remove and return the name entry at index loc.
X509_NAME_digest	Compute a digest of the DER encoding of an X.509 Name (DN).
X509_NAME_dup	Deep-copy an X.509 Name (distinguished name).
X509_NAME_entry_count	Return the number of X509_NAME_ENTRY values in a distinguished name.
X509_NAME_free	Free a X.509 distinguished name (Name) and its contents.
X509_NAME_get0_der	Return a pointer to the cached DER encoding of an X509_NAME.
X509_NAME_get_entry	Return the name entry at index loc in an X509_NAME.
X509_NAME_get_index_by_NID	Find the next X509_NAME entry matching a NID after lastpos.
X509_NAME_get_index_by_OBJ	Find the next name entry whose attribute type matches an ASN1_OBJECT.
X509_NAME_get_text_by_NID	Copy the UTF-8/text value of the first name entry with NID nid into buf.
X509_NAME_get_text_by_OBJ	Copy the first RDN text matching OID obj from name into buf.
X509_NAME_hash_ex	Hash an X.509 Name for directory lookup using SHA-1 via libctx.
X509_NAME_hash_old	Return the legacy MD5-based hash of an X509_NAME (old subject_hash algorithm).
X509_NAME_it	Return the ASN.1 item descriptor for X509_NAME.
X509_NAME_new	Allocate an empty X.509 distinguished name (Name).
X509_NAME_oneline	Format an X509_NAME as a legacy one-line slash-separated string.
X509_NAME_print	Print an X.509 distinguished name to a BIO with legacy oneline-style wrapping.
X509_NAME_print_ex	Print a human-readable X509_NAME to a BIO with customizable formatting flags.
X509_NAME_print_ex_fp	Print an X509_NAME to a FILE with indentation and XN_FLAG_* formatting.
X509_NAME_set	Replace *xn with a duplicate of name, freeing any previous value.
X509_OBJECT_free	Free an X509_OBJECT and release any referenced certificate or CRL.
X509_OBJECT_get0_X509	Return the certificate stored in an X509_OBJECT, if any.
X509_OBJECT_get0_X509_CRL	Return the CRL stored in an X509_OBJECT, if any.
X509_OBJECT_get_type	Return whether an X509_OBJECT holds a certificate, CRL, or nothing.
X509_OBJECT_idx_by_subject	Find the first X509_OBJECT in a stack whose subject matches name and type.
X509_OBJECT_new	Allocate an empty X509_OBJECT container for a certificate or CRL.
X509_OBJECT_retrieve_by_subject	Find the first X509_OBJECT in h matching type and subject name.
X509_OBJECT_retrieve_match	Find an X509_OBJECT in h that matches the type and identity of x.
X509_OBJECT_set1_X509	Store a certificate in an X509_OBJECT, taking a reference to obj.
X509_OBJECT_set1_X509_CRL	Store a CRL in an X509_OBJECT, taking a reference to obj.
X509_OBJECT_up_ref_count	Increment the reference count on the certificate or CRL held by an X509_OBJECT.
X509_PKEY_free	Free an X509_PKEY and its encrypted-key contents.
X509_PKEY_new	Allocate an empty X509_PKEY structure for encrypted private-key packaging.
X509_POLICY_NODE_print	Print a certificate policy tree node (OID, criticality, qualifiers) to a BIO.
X509_PUBKEY_dup	Deep-copy an X509_PUBKEY (SubjectPublicKeyInfo) structure.
X509_PUBKEY_eq	Compare two X509_PUBKEY structures for equality.
X509_PUBKEY_free	Free a X.509 SubjectPublicKeyInfo (X509_PUBKEY) and its contents.
X509_PUBKEY_get	Decode an X509_PUBKEY into an EVP_PKEY with an incremented reference count.
X509_PUBKEY_get0	Return the EVP_PKEY decoded from an X509_PUBKEY without incrementing its refcount.
X509_PUBKEY_get0_param	Return pointers to the algorithm and bit-string components of a SubjectPublicKeyInfo.
X509_PUBKEY_it	Return the ASN.1 item descriptor for X509_PUBKEY.
X509_PUBKEY_new	Allocate an empty X.509 SubjectPublicKeyInfo (X509_PUBKEY).
X509_PUBKEY_new_ex	Allocate an empty X509_PUBKEY associated with a library context and property query.
X509_PUBKEY_set	Set an X509_PUBKEY from an EVP_PKEY, allocating or replacing *x as needed.
X509_PUBKEY_set0_param	Set algorithm and encoded public-key bits on pub, transferring ownership.
X509_PUBKEY_set0_public_key	Set the encoded public-key bit string on an X509_PUBKEY, transferring ownership of penc.
X509_PURPOSE_add	Register or replace a certificate purpose entry in the purpose table.
X509_PURPOSE_cleanup	Free all dynamically registered purpose table entries.
X509_PURPOSE_get0	Return the purpose table entry at a numeric index.
X509_PURPOSE_get0_name	Return the long human-readable name of a purpose table entry.
X509_PURPOSE_get0_sname	Return the short name of a purpose table entry.
X509_PURPOSE_get_by_id	Look up a purpose table index by purpose identifier.
X509_PURPOSE_get_by_sname	Look up a purpose table index by short name.
X509_PURPOSE_get_count	Return how many entries are in the X509_PURPOSE table.
X509_PURPOSE_get_id	Return the purpose identifier from a purpose table entry.
X509_PURPOSE_get_trust	Return the default trust identifier associated with a purpose entry.
X509_PURPOSE_set	Store a purpose identifier after validating it against the purpose table.
X509_REQ_INFO_free	Free an X.509 certificate request info structure and its contents.
X509_REQ_INFO_it	Return the ASN.1 item descriptor for X509_REQ_INFO.
X509_REQ_INFO_new	Allocate an empty X.509 certificate request info (tbsRequest) structure.
X509_REQ_add1_attr	Append a duplicate of attr to a certificate request's attribute list.
X509_REQ_add1_attr_by_NID	Append an attribute identified by NID to a certificate request.
X509_REQ_add1_attr_by_OBJ	Append an attribute identified by OID obj to a certificate request.
X509_REQ_add1_attr_by_txt	Add an attribute named by attrname to a certificate request.
X509_REQ_add_extensions	Embed a copy of extension stack ext as request attributes on req.
X509_REQ_add_extensions_nid	Add a stack of extensions to a certificate request under attribute OID nid.
X509_REQ_check_private_key	Check that pkey matches the public key in a certificate request.
X509_REQ_delete_attr	Remove and return the attribute at index loc from a certificate request.
X509_REQ_digest	Digest the DER encoding of a certificate request with hash type.
X509_REQ_dup	Deep-copy an X.509 certificate signing request.
X509_REQ_extension_nid	Test whether nid is recognized as a certificate-request extension attribute NID.
X509_REQ_free	Free a X.509 certificate signing request and its contents.
X509_REQ_get0_distinguishing_id	Return the Distinguishing ID attached to a certificate request, if any.
X509_REQ_get0_pubkey	Return the request subject public key without incrementing its reference count.
X509_REQ_get0_signature	Return internal pointers to a request's signature value and AlgorithmIdentifier.
X509_REQ_get1_email	Collect email addresses from a certificate request's subject and subjectAltName.
X509_REQ_get_X509_PUBKEY	Return the X509_PUBKEY structure holding the request's subject public key.
X509_REQ_get_attr	Return the X.509 request attribute at index loc.
X509_REQ_get_attr_by_NID	Find the next X.509 request attribute with the given NID.
X509_REQ_get_attr_by_OBJ	Find the next certificate-request attribute whose OID equals obj.
X509_REQ_get_attr_count	Return the number of attributes in a certificate request.
X509_REQ_get_extension_nids	Return the NID list used when locating extensions embedded in a certificate request.
X509_REQ_get_extensions	Return the first stack of X.509 extensions found in a certificate request's attributes.
X509_REQ_get_pubkey	Return a new EVP_PKEY copy of the public key from a certificate request.
X509_REQ_get_signature_nid	Return the NID of the digest used in a request's signature AlgorithmIdentifier.
X509_REQ_get_subject_name	Return the subject name of a certificate request.
X509_REQ_get_version	Return the version field of a certificate request (0 for v1).
X509_REQ_it	Return the ASN.1 item descriptor for X509_REQ.
X509_REQ_new	Allocate an empty X.509 certificate signing request.
X509_REQ_new_ex	Allocate an empty X509_REQ associated with a library context and property query.
X509_REQ_print	Print a certificate request to a BIO using default name/content flags.
X509_REQ_print_ex	Print a certificate request to a BIO with name and content formatting flags.
X509_REQ_print_fp	Print a certificate request to a FILE using default formatting.
X509_REQ_set0_distinguishing_id	Attach a Distinguishing ID to a certificate request, transferring ownership of d_id.
X509_REQ_set0_signature	Set the request signature bit string, transferring ownership of psig.
X509_REQ_set1_signature_algo	Set the signature AlgorithmIdentifier on a certificate request by copying palg.
X509_REQ_set_extension_nids	Set the global list of NIDs recognized as certificate-request extension attributes.
X509_REQ_set_pubkey	Set the public key on a certificate request from pkey.
X509_REQ_set_subject_name	Set the subject name of a certificate request by copying name.
X509_REQ_set_version	Set the version field of a certificate request.
X509_REQ_sign	Sign a certificate request with a private key and message digest.
X509_REQ_sign_ctx	Sign certificate request x using an already-initialized digest/signing context.
X509_REQ_to_X509	Build a self-signed X.509 certificate from a certificate request.
X509_REQ_verify	Verify a certificate request's signature with public key r.
X509_REQ_verify_ex	Verify a certificate request's signature with an explicit library context.
X509_REVOKED_add1_ext_i2d	Encode an extension value and add it to a revoked-certificate entry.
X509_REVOKED_add_ext	Insert a copy of extension ex into a revoked-entry extension stack.
X509_REVOKED_delete_ext	Remove and return the extension at index loc from a revoked entry.
X509_REVOKED_dup	Deep-copy a CRL revoked-certificate entry.
X509_REVOKED_free	Free a CRL revoked-certificate entry and its contents.
X509_REVOKED_get0_extensions	Return the stack of extensions on a CRL revoked-entry, if any.
X509_REVOKED_get0_revocationDate	Return the revocation date of a revoked-certificate entry.
X509_REVOKED_get0_serialNumber	Return the serial number of a revoked-certificate entry without copying it.
X509_REVOKED_get_ext	Return the extension at index loc on a revoked entry.
X509_REVOKED_get_ext_by_NID	Find the next revoked-entry extension whose NID equals nid.
X509_REVOKED_get_ext_by_OBJ	Find the next revoked-entry extension whose OID equals obj.
X509_REVOKED_get_ext_by_critical	Find the next revoked-entry extension with criticality crit.
X509_REVOKED_get_ext_count	Return the number of X.509v3 extensions on a revoked-certificate entry.
X509_REVOKED_get_ext_d2i	Decode the first matching extension of type nid from a revoked entry.
X509_REVOKED_it	Return the ASN.1 item descriptor for X509_REVOKED.
X509_REVOKED_new	Allocate an empty CRL revoked-certificate entry.
X509_REVOKED_set_revocationDate	Set the revocation time on a revoked-entry object, copying tm.
X509_REVOKED_set_serialNumber	Set the certificate serial number on a revoked-entry object, copying serial.
X509_SIG_INFO_get	Read digest NID, public-key NID, security bits, and flags from X509_SIG_INFO.
X509_SIG_INFO_set	Populate an X509_SIG_INFO with digest NID, public-key NID, security bits, and flags.
X509_SIG_free	Free an X.509 signature structure and its contents.
X509_SIG_get0	Borrow const pointers to the AlgorithmIdentifier and digest octets of an X509_SIG.
X509_SIG_getm	Borrow mutable pointers to the AlgorithmIdentifier and digest octets of an X509_SIG.
X509_SIG_it	Return the ASN.1 item descriptor for X509_SIG.
X509_SIG_new	Allocate an empty X.509 signature (algorithm + digest) structure.
X509_STORE_CTX_cleanup	Release verification state inside ctx so it can be re-initialised or freed.
X509_STORE_CTX_free	Free an X509_STORE_CTX and release resources it owns.
X509_STORE_CTX_get0_cert	Return an internal pointer to the certificate being verified.
X509_STORE_CTX_get0_chain	Return the verified certificate chain built for ctx without transferring ownership.
X509_STORE_CTX_get0_current_crl	Return the CRL currently being considered during revocation checking.
X509_STORE_CTX_get0_current_issuer	Return the issuer certificate currently being considered during chain building.
X509_STORE_CTX_get0_param	Return the verification parameters associated with a store context.
X509_STORE_CTX_get0_parent_ctx	Return the parent store context when ctx is used for a nested check (for example CRL).
X509_STORE_CTX_get0_policy_tree	Return the policy tree built during verification of ctx (borrowed).
X509_STORE_CTX_get0_rpk	Return the raw public key being verified, if any.
X509_STORE_CTX_get0_store	Return the X509_STORE associated with a verification context.
X509_STORE_CTX_get0_untrusted	Return the stack of untrusted certificates associated with a verification context.
X509_STORE_CTX_get1_certs	Return certificates from the store whose subject name matches nm.
X509_STORE_CTX_get1_chain	Return a new reference to the verified certificate chain built for ctx.
X509_STORE_CTX_get1_crls	Retrieve CRLs from the store behind st whose issuer matches nm.
X509_STORE_CTX_get1_issuer	Find a candidate issuer certificate for x using the store context.
X509_STORE_CTX_get_by_subject	Look up a certificate or CRL by subject name via the store of vs.
X509_STORE_CTX_get_cert_crl	Return the cert-against-CRL check callback installed on a store context.
X509_STORE_CTX_get_check_crl	Return the check_crl callback currently installed on a verification context.
X509_STORE_CTX_get_check_issued	Return the check_issued callback currently installed on a verification context.
X509_STORE_CTX_get_check_policy	Return the certificate-policy check callback installed on a store context.
X509_STORE_CTX_get_check_revocation	Return the revocation-checking callback installed on a verification context.
X509_STORE_CTX_get_cleanup	Return the cleanup callback installed on a store context.
X509_STORE_CTX_get_current_cert	Return the certificate currently being examined during verification.
X509_STORE_CTX_get_error	Return the verification error code stored in a context.
X509_STORE_CTX_get_error_depth	Return the certificate-chain depth at which the current verification error occurred.
X509_STORE_CTX_get_ex_data	Retrieve application-specific ex_data previously stored on a verification context.
X509_STORE_CTX_get_explicit_policy	Return whether an explicit certificate policy was required/found during verification.
X509_STORE_CTX_get_get_crl	Return the get_crl callback currently installed on a verification context.
X509_STORE_CTX_get_get_issuer	Return the get_issuer callback currently installed on a verification context.
X509_STORE_CTX_get_lookup_certs	Return the lookup_certs callback currently installed on a verification context.
X509_STORE_CTX_get_lookup_crls	Return the CRL-lookup callback installed on a store context.
X509_STORE_CTX_get_num_untrusted	Return how many certificates at the start of the chain were untrusted.
X509_STORE_CTX_get_obj_by_subject	Look up a certificate or CRL by subject name and return a new X509_OBJECT wrapper.
X509_STORE_CTX_get_verify	Return the chain-verification callback installed on a store context.
X509_STORE_CTX_get_verify_cb	Return the verify-result callback installed on a store context.
X509_STORE_CTX_init	Initialize a verification context for validating target against trust_store.
X509_STORE_CTX_init_rpk	Initialise a verification context to validate raw public key rpk.
X509_STORE_CTX_new	Allocate an empty X509_STORE_CTX using the default library context.
X509_STORE_CTX_new_ex	Allocate an empty X509_STORE_CTX using an explicit library context.
X509_STORE_CTX_print_verify_cb	Default verify callback that prints diagnosis details when verification fails.
X509_STORE_CTX_purpose_inherit	Inherit purpose and trust onto a store context, falling back to defaults when unset.
X509_STORE_CTX_set0_crls	Provide an additional CRL stack for revocation checks on ctx.
X509_STORE_CTX_set0_dane	Attach DANE authentication state to a certificate verification context.
X509_STORE_CTX_set0_param	Transfer ownership of verification parameters to a store context.
X509_STORE_CTX_set0_rpk	Set a raw public key as the verification target, transferring ownership of target.
X509_STORE_CTX_set0_trusted_stack	Use a stack of certificates as the trusted set for a verification context.
X509_STORE_CTX_set0_untrusted	Set the untrusted intermediate certificate stack used during chain building.
X509_STORE_CTX_set0_verified_chain	Transfer ownership of a verified certificate chain into a store context.
X509_STORE_CTX_set_cert	Set the end-entity certificate that ctx will verify.
X509_STORE_CTX_set_current_cert	Set the certificate in ctx that caused the current verification error.
X509_STORE_CTX_set_current_reasons	Set the CRL reason bitmask associated with the current revocation check on ctx.
X509_STORE_CTX_set_default	Apply a named built-in X509_VERIFY_PARAM set to a store context.
X509_STORE_CTX_set_depth	Limit how deep an X509_STORE_CTX certificate chain may grow during verification.
X509_STORE_CTX_set_error	Set the current verification error code on a store context.
X509_STORE_CTX_set_error_depth	Set the certificate-chain depth associated with the current verification error.
X509_STORE_CTX_set_ex_data	Store application ex_data on a verification context at index idx.
X509_STORE_CTX_set_flags	OR additional X509_V_FLAG_* verification flags into ctx.
X509_STORE_CTX_set_get_crl	Override the get-CRL callback on a verification context.
X509_STORE_CTX_set_purpose	Set the intended certificate purpose for a verification context.
X509_STORE_CTX_set_time	Override the validation time used when checking certificate/CRL validity on ctx.
X509_STORE_CTX_set_trust	Set the trust setting used when verifying with a store context.
X509_STORE_CTX_set_verify	Override the default chain-verify function on a verification context.
X509_STORE_CTX_set_verify_cb	Install a verify callback on a store context (overrides the store default).
X509_STORE_CTX_verify	Verify the certificate chain prepared in an X509_STORE_CTX.
X509_STORE_add_cert	Add a certificate to an X509_STORE's trusted-certificate cache.
X509_STORE_add_crl	Add a CRL to an X509_STORE's cache.
X509_STORE_add_lookup	Attach a new X509_LOOKUP of method m to a certificate store.
X509_STORE_free	Free an X509_STORE and release its references to certificates, CRLs, and lookups.
X509_STORE_get0_objects	Return the internal cache of certificates and CRLs held by a store.
X509_STORE_get0_param	Return the verification parameters associated with a certificate store.
X509_STORE_get1_all_certs	Return a new stack of every X.509 certificate currently cached in a store.
X509_STORE_get1_objects	Return a deep-copied snapshot of every object cached in an X509_STORE.
X509_STORE_get_cert_crl	Return the cert-against-CRL check callback installed on a store.
X509_STORE_get_check_crl	Return the CRL-check callback installed on a certificate store.
X509_STORE_get_check_issued	Return the check-issued callback installed on a certificate store.
X509_STORE_get_check_policy	Return the certificate-policy check callback installed on a store.
X509_STORE_get_check_revocation	Return the certificate-revocation check callback installed on a store.
X509_STORE_get_cleanup	Return the cleanup callback installed on X509_STORE xs.
X509_STORE_get_ex_data	Retrieve application data previously stored on an X509_STORE.
X509_STORE_get_get_crl	Return the get-CRL callback installed on a certificate store.
X509_STORE_get_get_issuer	Return the get-issuer callback currently installed on a certificate store.
X509_STORE_get_lookup_certs	Return the certificate-by-name lookup callback installed on an X509_STORE.
X509_STORE_get_lookup_crls	Return the CRL-lookup callback installed on a certificate store.
X509_STORE_get_verify	Return the chain-verify callback installed on a certificate store.
X509_STORE_get_verify_cb	Return the verify-result callback installed on a certificate store.
X509_STORE_load_file	Load trusted certificates from a PEM/DER file into a store.
X509_STORE_load_file_ex	Load trusted certificates from a PEM/DER file into a store, with provider selection.
X509_STORE_load_locations	Load trusted certificates from a PEM file and/or a hashed certificate directory.
X509_STORE_load_locations_ex	Load trusted certificates from file and/or hashed dir into a store.
X509_STORE_load_path	Load trusted certificates from every file in a hashed directory into a store.
X509_STORE_load_store	Load trusted certificates from an OSSL_STORE URI into a store.
X509_STORE_load_store_ex	Load trusted certificates from an OSSL_STORE URI, with provider selection.
X509_STORE_lock	Acquire a write lock on an X509_STORE for thread-safe mutation.
X509_STORE_new	Allocate a new X.509 certificate store for trusted certificates and CRLs.
X509_STORE_set1_param	Copy verification parameters from pm onto a certificate store.
X509_STORE_set_cert_crl	Install the cert-against-CRL check callback used by verifications from this store.
X509_STORE_set_check_crl	Install a callback that verifies CRLs for a certificate store.
X509_STORE_set_check_issued	Install the check-issued callback used by verifications from this store.
X509_STORE_set_check_policy	Install the certificate-policy check callback used by verifications from this store.
X509_STORE_set_check_revocation	Install the certificate-revocation check callback used by verifications from this store.
X509_STORE_set_cleanup	Install a cleanup callback inherited by X509_STORE_CTX objects from this store.
X509_STORE_set_default_paths	Load the default system CA file and directory into certificate store xs.
X509_STORE_set_default_paths_ex	Load the default CA file, directory, and store into xs, with provider selection.
X509_STORE_set_depth	Set the maximum untrusted chain depth for verifications using store.
X509_STORE_set_ex_data	Store application ex_data on an X509_STORE at index idx.
X509_STORE_set_flags	Set verification behaviour flags on an X509_STORE (OR of X509_V_FLAG_*).
X509_STORE_set_get_crl	Install the CRL-retrieval callback inherited by contexts created from this store.
X509_STORE_set_get_issuer	Set the get-issuer callback used by store contexts created from xs.
X509_STORE_set_lookup_certs	Install the certificate-by-name lookup callback used by verifications from this store.
X509_STORE_set_lookup_crls	Install the CRL-by-name lookup callback used by verifications from this store.
X509_STORE_set_purpose	Set the default certificate purpose applied when verifying with this store.
X509_STORE_set_trust	Set the default trust setting applied when verifying with this store.
X509_STORE_set_verify	Install the chain-verify callback used by store contexts created from xs.
X509_STORE_set_verify_cb	Install the verify-result callback inherited by contexts created from this store.
X509_STORE_unlock	Release a write lock previously taken with X509_STORE_lock().
X509_STORE_up_ref	Increment the reference count on an X509_STORE.
X509_TRUST_add	Register a custom X509_TRUST checking method under id.
X509_TRUST_cleanup	Free all dynamically registered X509_TRUST table entries.
X509_TRUST_get0	Return the X509_TRUST table entry at index idx.
X509_TRUST_get0_name	Return the short name of an X509_TRUST table entry.
X509_TRUST_get_by_id	Return the table index of the X509_TRUST entry with trust id id.
X509_TRUST_get_count	Return the number of entries in the global X509_TRUST table.
X509_TRUST_get_flags	Return the flag bits associated with an X509_TRUST table entry.
X509_TRUST_get_trust	Return the trust purpose identifier of an X509_TRUST table entry.
X509_TRUST_set	Store a trust identifier if it is a known X509_TRUST id.
X509_TRUST_set_default	Install a process-wide default trust-checking callback.
X509_VAL_free	Free an X509_VAL structure and its contents.
X509_VAL_it	Return the ASN.1 item descriptor for X509_VAL.
X509_VAL_new	Allocate a new X509_VAL (notBefore/notAfter validity interval).
X509_VERIFY_PARAM_add0_policy	Append a certificate policy OID to a verification parameter set (takes ownership).
X509_VERIFY_PARAM_add0_table	Register param in the global named X509_VERIFY_PARAM table (takes ownership).
X509_VERIFY_PARAM_add1_host	Append an expected DNS/IP hostname for name checks without clearing existing hosts.
X509_VERIFY_PARAM_clear_flags	Clear X509_V_FLAG_* bits from verification parameters.
X509_VERIFY_PARAM_free	Free an X509_VERIFY_PARAM and any associated host/email/IP data.
X509_VERIFY_PARAM_get0	Return a built-in X509_VERIFY_PARAM by table index.
X509_VERIFY_PARAM_get0_email	Return the expected RFC822 email address set on verification parameters.
X509_VERIFY_PARAM_get0_host	Return an expected hostname previously set for name checks.
X509_VERIFY_PARAM_get0_name	Return the name associated with an X509_VERIFY_PARAM object.
X509_VERIFY_PARAM_get0_peername	Return the peer DNS hostname or subject CN that matched a configured name check.
X509_VERIFY_PARAM_get1_ip_asc	Return a newly allocated ASCII form of the expected IP address for name checks.
X509_VERIFY_PARAM_get_auth_level	Return the authentication security level required by verification parameters.
X509_VERIFY_PARAM_get_count	Return how many named entries are in the global X509_VERIFY_PARAM table.
X509_VERIFY_PARAM_get_depth	Return the maximum certificate-chain depth allowed by verification parameters.
X509_VERIFY_PARAM_get_flags	Return the verification flag mask stored in param.
X509_VERIFY_PARAM_get_hostflags	Return the hostname-checking flags stored in verification parameters.
X509_VERIFY_PARAM_get_inh_flags	Return the inheritance-control flags stored in param.
X509_VERIFY_PARAM_get_time	Return the verification time stored in a parameter set.
X509_VERIFY_PARAM_inherit	Copy unset fields from from into to according to inheritance flags.
X509_VERIFY_PARAM_lookup	Look up a built-in named X509_VERIFY_PARAM by name.
X509_VERIFY_PARAM_move_peername	Move the peername string from from onto to, clearing the source.
X509_VERIFY_PARAM_new	Allocate a new certificate-verification parameter object with default settings.
X509_VERIFY_PARAM_set1	Copy all verification settings from from into to.
X509_VERIFY_PARAM_set1_email	Set the expected RFC822 mailbox for certificate name checks.
X509_VERIFY_PARAM_set1_host	Set the expected DNS/IP hostname for name checks, clearing any previous hosts.
X509_VERIFY_PARAM_set1_ip	Set the expected IP address for certificate name checks (binary form).
X509_VERIFY_PARAM_set1_ip_asc	Set the expected IP address from a NUL-terminated ASCII string.
X509_VERIFY_PARAM_set1_name	Set the name of an X509_VERIFY_PARAM (used when inheriting named defaults).
X509_VERIFY_PARAM_set1_policies	Replace the user certificate-policy OID set on verification parameters.
X509_VERIFY_PARAM_set_auth_level	Set the authentication security level required during verification.
X509_VERIFY_PARAM_set_depth	Set the maximum depth of untrusted CA certificates allowed above the leaf.
X509_VERIFY_PARAM_set_flags	OR additional X509_V_FLAG_* bits into verification parameters.
X509_VERIFY_PARAM_set_hostflags	Set hostname-checking flags used with X509_VERIFY_PARAM_set1_host().
X509_VERIFY_PARAM_set_inh_flags	Set inheritance flags controlling which fields copy from param to others.
X509_VERIFY_PARAM_set_purpose	Set the certificate purpose checked during verification.
X509_VERIFY_PARAM_set_time	Set the verification reference time used as "now" for validity checks.
X509_VERIFY_PARAM_set_trust	Set the trust setting used when verifying certificates with param.
X509_VERIFY_PARAM_table_cleanup	Free the global table of named X509_VERIFY_PARAM entries.
X509_add1_ext_i2d	Encode value as an extension with NID nid and append/replace it on a certificate.
X509_add1_reject_object	Append an OID to a certificate's auxiliary reject list.
X509_add1_trust_object	Append an OID to a certificate's auxiliary trust list.
X509_add_cert	Add a certificate to a stack of X.509 certificates under flags.
X509_add_certs	Append certificates from certs onto stack sk according to flags.
X509_add_ext	Insert a duplicate of extension ex into a certificate at loc.
X509_alias_get0	Return the friendly-name alias attached to a certificate, if any.
X509_alias_set1	Set the friendly-name alias on a certificate's auxiliary data (copied).
X509_aux_print	Print certificate auxiliary trust/reject/alias information to a BIO.
X509_build_chain	Build a certificate chain for target using untrusted certs and trusted store.
X509_certificate_type [deprecated]	Classify the key usage / type bits implied by a certificate and key (deprecated).
X509_chain_check_suiteb	Verify that certificate x and chain comply with Suite B constraints.
X509_chain_up_ref	Duplicate a certificate stack and up-ref every certificate it contains.
X509_check_akid	Verify that an Authority Key Identifier matches an issuer certificate.
X509_check_ca	Report whether a certificate appears to be a CA certificate.
X509_check_email	Check whether a certificate's subjectAltName/subject email matches chk.
X509_check_host	Check whether a certificate matches a DNS host name.
X509_check_ip	Check whether a certificate's subjectAltName contains an IP address in binary form.
X509_check_ip_asc	Check whether a certificate's subjectAltName contains an IP address given as text.
X509_check_issued	Check whether issuer appears to have issued subject (name and AKID match).
X509_check_private_key	Verify that pkey is the private key matching certificate cert.
X509_check_purpose	Check whether a certificate is suitable for a given purpose (or as a CA for that purpose).
X509_check_trust	Evaluate whether a certificate is trusted for a given trust id.
X509_cmp	Compare two X.509 certificates by hash and canonical DER encoding.
X509_cmp_current_time	Compare an ASN.1 Time against the current time.
X509_cmp_time	Compare an ASN.1 Time against time_t t (or the current time if t is NULL).
X509_cmp_timeframe	Compare a verification reference time against a notBefore/notAfter window.
X509_delete_ext	Remove and return the certificate extension at index loc.
X509_digest	Compute a message digest of the DER encoding of an X.509 certificate.
X509_digest_sig	Digest a certificate using its signature hash (or a documented fallback).
X509_dup	Deep-copy an X.509 certificate.
X509_email_free	Free a stack of email strings returned by X509_get1_email or X509_REQ_get1_email.
X509_find_by_issuer_and_serial	Find a certificate in a stack by issuer name and serial number.
X509_find_by_subject	Find the first certificate in a stack whose subject name equals name.
X509_free	Free an X.509 certificate and its contents.
X509_get0_authority_issuer	Return the authorityCertIssuer names from the Authority Key Identifier extension.
X509_get0_authority_key_id	Return the authorityKeyIdentifier keyIdentifier value from a certificate.
X509_get0_authority_serial	Return the authorityCertSerialNumber from the Authority Key Identifier extension.
X509_get0_distinguishing_id	Return the distinguishing id OCTET STRING attached to certificate x, if any.
X509_get0_extensions	Return the certificate extensions stack without duplicating it.
X509_get0_notAfter	Return the notAfter validity time of a certificate.
X509_get0_notBefore	Return the notBefore validity time of a certificate without copying it.
X509_get0_pubkey	Return the certificate subject public key without incrementing its reference count.
X509_get0_pubkey_bitstr	Return the subject public key BIT STRING from a certificate.
X509_get0_reject_objects	Return the stack of reject OIDs from a certificate's auxiliary data.
X509_get0_serialNumber	Return a borrowed pointer to certificate x's serial number.
X509_get0_signature	Return internal pointers to a certificate's signature value and AlgorithmIdentifier.
X509_get0_subject_key_id	Return the subjectKeyIdentifier extension value from a certificate.
X509_get0_tbs_sigalg	Return the signature AlgorithmIdentifier from the TBSCertificate.
X509_get0_trust_objects	Return the stack of explicit trust object identifiers attached to a certificate.
X509_get0_uids	Return pointers to the issuer and subject unique identifiers, if present.
X509_get1_email	Collect email addresses from a certificate's subject and subjectAltName.
X509_get1_ocsp	Extract OCSP responder URIs from a certificate's Authority Information Access extension.
X509_get_X509_PUBKEY	Return the certificate's SubjectPublicKeyInfo as an X509_PUBKEY (for i2d_X509_PUBKEY).
X509_get_default_cert_area	Return the default OpenSSL certificates area directory path.
X509_get_default_cert_dir	Return the default colon-separated list of hashed CA certificate directories.
X509_get_default_cert_dir_env	Return the environment variable name for overriding the default CA directory list.
X509_get_default_cert_file	Return the default path of the trusted CA certificate file (SSL_CERT_FILE default).
X509_get_default_cert_file_env	Return the environment-variable name that overrides the default certificate file path.
X509_get_default_private_dir	Return the default directory path used for private-key files.
X509_get_ex_data	Retrieve application ex_data previously stored on a certificate.
X509_get_ext	Return the extension at index loc on a certificate.
X509_get_ext_by_NID	Find the next extension on a certificate matching NID nid.
X509_get_ext_by_OBJ	Find the next extension on a certificate matching ASN.1 object obj.
X509_get_ext_by_critical	Find a certificate extension by criticality flag, searching after lastpos.
X509_get_ext_count	Return the number of extensions present on a certificate.
X509_get_ext_d2i	Decode the first (or next) certificate extension with NID nid into its ASN.1 type.
X509_get_extended_key_usage	Return the cached Extended Key Usage bits from a certificate.
X509_get_extension_flags	Return the cached X.509v3 extension summary flags for a certificate.
X509_get_issuer_name	Return the issuer distinguished name of an X.509 certificate.
X509_get_key_usage	Return the cached Key Usage bits from a certificate.
X509_get_pathlen	Return the basicConstraints pathLenConstraint of a certificate.
X509_get_proxy_pathlen	Return the proxy path length constraint from a proxy certificate.
X509_get_pubkey	Decode and return the certificate subject public key with an incremented reference count.
X509_get_pubkey_parameters	Copy missing algorithm parameters into pkey from certificates in chain.
X509_get_serialNumber	Return the mutable serial number field of a certificate.
X509_get_signature_info	Retrieve digest NID, public-key NID, security bits, and flags for a certificate signature.
X509_get_signature_nid	Return the NID of the digest used in a certificate's signature AlgorithmIdentifier.
X509_get_signature_type	Return the EVP public-key type implied by a certificate's signature algorithm.
X509_get_subject_name	Return the subject name of a certificate.
X509_get_version	Return the X.509 version field of a certificate.
X509_getm_notAfter	Return a mutable pointer to the certificate's notAfter validity time.
X509_getm_notBefore	Return the mutable notBefore validity time of a certificate.
X509_gmtime_adj	Set an ASN1_TIME to the current time plus a second offset (GMT).
X509_issuer_and_serial_cmp	Compare two certificates by issuer name and serial number.
X509_issuer_and_serial_hash	Hash a certificate's issuer name and serial number into a 32-bit value.
X509_issuer_name_cmp	Compare the issuer names of two certificates.
X509_issuer_name_hash	Return a hash of a certificate's issuer distinguished name.
X509_issuer_name_hash_old	Return the legacy MD5-based hash of a certificate's issuer name.
X509_it	Return the ASN.1 item descriptor for X509.
X509_keyid_get0	Return the subject key identifier attached to a certificate, if any.
X509_keyid_set1	Set the key identifier on a certificate's auxiliary data (copied).
X509_load_cert_crl_file	Load certificates and CRLs from file into the store associated with a lookup.
X509_load_cert_crl_file_ex	Load certificates and CRLs from a PEM file with an explicit library context.
X509_load_cert_file	Load certificates from file into the store behind ctx.
X509_load_cert_file_ex	Load certificates from file into the store behind ctx with an explicit libctx.
X509_load_crl_file	Load CRLs from file into the store behind ctx.
X509_load_http	Download an X.509 certificate from url over HTTP(S).
X509_new	Allocate an empty X.509 certificate.
X509_new_ex	Allocate an empty X.509 certificate with an explicit library context.
X509_ocspid_print	Print OCSP subject/public-key hashes for a certificate to a BIO.
X509_policy_check	Build an X.509 certificate policy tree for a chain and optional user policy OIDs.
X509_policy_level_get0_node	Return a policy node at index i within a policy-tree level.
X509_policy_level_node_count	Return how many policy nodes are present at a policy-tree level.
X509_policy_node_get0_parent	Return the parent policy-tree node of node, if any.
X509_policy_node_get0_policy	Return the policy OID associated with a certificate policy tree node.
X509_policy_node_get0_qualifiers	Return the policy qualifiers associated with a policy-tree node.
X509_policy_tree_free	Free a certificate policy tree allocated by X509_policy_check().
X509_policy_tree_get0_level	Return a level of a certificate policy tree by index.
X509_policy_tree_get0_policies	Return the authority-constrained policy set (valid policy nodes) of a policy tree.
X509_policy_tree_get0_user_policies	Return the user-policy nodes from a certificate policy tree.
X509_policy_tree_level_count	Return how many levels a certificate policy tree contains.
X509_print	Print an X.509 certificate to a BIO using default formatting.
X509_print_ex	Print an X.509 certificate to a BIO with name and content flags.
X509_print_ex_fp	Print an X.509 certificate to a FILE with name and content flags.
X509_print_fp	Print a human-readable certificate dump to a stdio FILE.
X509_pubkey_digest	Compute a digest of the DER-encoded public key of an X.509 certificate.
X509_reject_clear	Clear all auxiliary reject-object OIDs attached to a certificate.
X509_self_signed	Test whether cert is self-issued, optionally verifying its signature.
X509_set0_distinguishing_id	Attach a SMIME/CMS distinguishing identifier to a certificate, transferring ownership of d_id.
X509_set1_notAfter	Set the notAfter validity time on an X.509 certificate.
X509_set1_notBefore	Set the notBefore validity instant on a certificate (copies tm).
X509_set_ex_data	Store application ex_data on a certificate at index idx.
X509_set_issuer_name	Set a certificate's issuer name by copying name.
X509_set_proxy_flag	Mark a certificate as a proxy certificate (EXFLAG_PROXY) for non-RFC3820 proxies.
X509_set_proxy_pathlen	Set the proxy path length constraint on a certificate marked as a proxy.
X509_set_pubkey	Set the public key on an X.509 certificate.
X509_set_serialNumber	Set a certificate's serial number by copying serial.
X509_set_subject_name	Set the subject distinguished name on an X.509 certificate.
X509_set_version	Set the X.509 certificate version field.
X509_sign	Sign an X509 certificate with a private key and message digest.
X509_sign_ctx	Sign certificate x using an already-initialized digest/signing context.
X509_signature_dump	Hex-dump an ASN.1 signature BIT/OCTET STRING to a BIO with indentation.
X509_signature_print	Print a signature algorithm and optional signature value to a BIO.
X509_subject_name_cmp	Compare the subject names of two certificates.
X509_subject_name_hash	Hash a certificate's subject name for OpenSSL certificate-directory lookup.
X509_subject_name_hash_old	Return the legacy MD5-based hash of a certificate's subject name.
X509_supported_extension	Report whether an extension OID is one that OpenSSL's verifier critically understands.
X509_time_adj	Adjust an ASN1_TIME by a second offset relative to t (or the current time).
X509_time_adj_ex	Adjust an ASN.1 Time by day and second offsets from a reference time_t.
X509_to_X509_REQ	Build a certificate request from a certificate's subject and public key.
X509_trust_clear	Clear all explicit trust object identifiers previously set on a certificate.
X509_trusted	Report whether a certificate has auxiliary trust information attached.
X509_up_ref	Increment the reference count on an X509 certificate.
X509_verify	Verify a certificate's signature with the issuer public key r.
X509_verify_cert	Discover and validate a certificate chain based on parameters in ctx.
X509_verify_cert_error_string	Return a human-readable string for an X509_V_ERR_* verification error code.
X509at_add1_attr	Append a duplicate of attr to an X509_ATTRIBUTE stack, creating the stack if needed.
X509at_add1_attr_by_NID	Create an attribute by NID and append a copy to a STACK_OF(X509_ATTRIBUTE).
X509at_add1_attr_by_OBJ	Create an attribute by OID and append a copy to a STACK_OF(X509_ATTRIBUTE).
X509at_add1_attr_by_txt	Create an attribute by name and append a copy to a STACK_OF(X509_ATTRIBUTE).
X509at_delete_attr	Remove and return the attribute at index loc from an attribute stack.
X509at_get0_data_by_OBJ	Return attribute data matching an OID from a stack of X509_ATTRIBUTE values.
X509at_get_attr	Return the attribute at a zero-based index in an attribute stack.
X509at_get_attr_by_NID	Find the next attribute in a stack with the given NID.
X509at_get_attr_by_OBJ	Find the next attribute in a stack whose OID equals obj.
X509at_get_attr_count	Return the number of attributes in an X509_ATTRIBUTE stack.
X509v3_add_ext	Insert a duplicate of an extension into an X.509v3 extension stack.
X509v3_addr_add_inherit	Mark an address family in an IPAddrBlocks value as inheriting from the issuer.
X509v3_addr_add_prefix	Add an IP address prefix to an IPAddrBlocks (RFC 3779) extension value.
X509v3_addr_add_range	Add an inclusive IP address range to an IPAddrBlocks value.
X509v3_addr_canonize	Sort and merge an IPAddrBlocks value into RFC 3779 canonical form.
X509v3_addr_get_afi	Return the Address Family Identifier from an IPAddressFamily entry.
X509v3_addr_get_range	Expand an IPAddressOrRange into inclusive min/max address bytes for afi.
X509v3_addr_inherits	Report whether an IPAddrBlocks value uses inheritance from the issuer.
X509v3_addr_is_canonical	Test whether an IPAddrBlocks value is already in RFC 3779 canonical form.
X509v3_addr_subset	Test whether IP address block set a is covered by set b.
X509v3_addr_validate_path	Validate RFC 3779 IP address blocks along the certification path in ctx.
X509v3_addr_validate_resource_set	Validate that IP address blocks in ext are covered by ancestors in chain.
X509v3_asid_add_id_or_range	Add a single AS number or an inclusive AS number range to an ASIdentifiers value.
X509v3_asid_add_inherit	Mark an ASIdentifiers choice as inheriting from the issuer.
X509v3_asid_canonize	Sort and merge an ASIdentifiers value into RFC 3779 canonical form.
X509v3_asid_inherits	Test whether an ASIdentifiers value uses inheritance for ASNUM or RDI.
X509v3_asid_is_canonical	Test whether an ASIdentifiers value is already in RFC 3779 canonical form.
X509v3_asid_subset	Test whether AS identifier set a is covered by set b.
X509v3_asid_validate_path	Validate RFC 3779 AS identifier nesting along a certificate chain in a store context.
X509v3_asid_validate_resource_set	Validate that AS identifiers in ext are covered by ancestors in chain.
X509v3_delete_ext	Remove and return the extension at index loc from an extension stack.
X509v3_get_ext	Return the extension at index loc from a stack of X509_EXTENSION.
X509v3_get_ext_by_NID	Find an extension by NID in a stack of X509_EXTENSION.
X509v3_get_ext_by_OBJ	Find the next extension in x whose OID matches obj.
X509v3_get_ext_by_critical	Find the next X509 extension with a given critical flag in a stack.
X509v3_get_ext_count	Return the number of extensions in an X.509v3 extension stack.
_CONF_add_string	Insert a name/value pair into a CONF section (internal CONF helper).
_CONF_free_data	Free the internal LHASH and CONF_VALUE entries stored in conf.
_CONF_get_number	Look up a numeric value in the internal CONF data store (legacy helper).
_CONF_get_section	Look up a section CONF_VALUE in the internal CONF data store.
_CONF_get_section_values	Return the CONF_VALUE stack for section from the internal CONF data store.
_CONF_get_string	Look up a string in the internal CONF data store (legacy helper).
_CONF_new_data	Allocate the internal LHASH used to store CONF values (internal helper).
_CONF_new_section	Create a new named section in the internal CONF data store.
_openssl_ascii2ebcdic	Convert count bytes from ASCII to EBCDIC into dest (may equal srce).
_openssl_ebcdic2ascii	Convert count bytes from EBCDIC to ASCII into dest (may equal srce).
a2d_ASN1_OBJECT	Encode a dotted-decimal OID string into DER content octets.
a2i_ASN1_ENUMERATED	Read a colon-separated hex ENUMERATED from bp into bs (PEM helper).
a2i_ASN1_INTEGER	Read a colon-separated hex INTEGER from bp into bs (PEM helper).
a2i_ASN1_STRING	Read a colon-separated hex ASN.1 string from bp into bs (PEM helper).
a2i_GENERAL_NAME	Parse a string into a GENERAL_NAME of the requested type.
a2i_IPADDRESS	Convert an ASCII IPv4 or IPv6 address to an OCTET STRING for GeneralName iPAddress.
a2i_IPADDRESS_NC	Convert an ASCII IP address or CIDR prefix to an OCTET STRING for name constraints.
b2i_PVK_bio	Decode a Microsoft PVK private key from a BIO.
b2i_PVK_bio_ex	Decode a Microsoft PVK private key from a BIO with a library context.
b2i_PrivateKey	Decode a Microsoft MSBLOB private key from a memory buffer.
b2i_PrivateKey_bio	Decode a Microsoft MSBLOB private key from a BIO.
b2i_PublicKey	Decode a Microsoft MSBLOB public key from a memory buffer.
b2i_PublicKey_bio	Decode a Microsoft MSBLOB public key from a BIO.
d2i_ACCESS_DESCRIPTION	Decode an AccessDescription from DER.
d2i_ADMISSIONS	Decode an ADMISSIONS value from DER.
d2i_ADMISSION_SYNTAX	Decode an ADMISSION_SYNTAX from DER.
d2i_ASIdOrRange	Decode an ASIdOrRange from DER.
d2i_ASIdentifierChoice	Decode an ASIdentifierChoice from DER.
d2i_ASIdentifiers	Decode an ASIdentifiers extension from DER.
d2i_ASN1_BIT_STRING	Decode an ASN.1 BIT STRING from DER.
d2i_ASN1_BMPSTRING	Decode a ASN.1 BMPString from DER.
d2i_ASN1_ENUMERATED	Decode an ASN.1 ENUMERATED from DER.
d2i_ASN1_GENERALIZEDTIME	Decode an ASN.1 GeneralizedTime from DER.
d2i_ASN1_GENERALSTRING	Decode an ASN.1 GeneralString from DER.
d2i_ASN1_IA5STRING	Decode an ASN.1 IA5String from DER.
d2i_ASN1_INTEGER	Decode an ASN.1 INTEGER from DER.
d2i_ASN1_NULL	Decode an ASN.1 NULL from DER.
d2i_ASN1_OBJECT	Decode an ASN.1 OBJECT identifier from DER.
d2i_ASN1_OCTET_STRING	Decode an ASN.1 OCTET STRING from DER.
d2i_ASN1_PRINTABLE	Decode an ASN1_PRINTABLE string from DER.
d2i_ASN1_PRINTABLESTRING	Decode an ASN.1 PrintableString from DER.
d2i_ASN1_SEQUENCE_ANY	Decode an ASN.1 SEQUENCE OF ANY from DER into a stack of ASN1_TYPE values.
d2i_ASN1_SET_ANY	Decode an ASN.1 SET OF ANY from DER into a stack of ASN1_TYPE values.
d2i_ASN1_T61STRING	Decode a ASN.1 TeletexString (T61String) from DER.
d2i_ASN1_TIME	Decode a ASN.1 time value (UTCTime or GeneralizedTime) from DER.
d2i_ASN1_TYPE	Decode an ASN.1 ANY / ASN1_TYPE value from DER.
d2i_ASN1_UINTEGER	Decode an ASN.1 INTEGER that must be treated as unsigned (no leading 0x00 ignored).
d2i_ASN1_UNIVERSALSTRING	Decode an ASN.1 UniversalString from DER.
d2i_ASN1_UTCTIME	Decode an ASN.1 UTCTime from DER.
d2i_ASN1_UTF8STRING	Decode an ASN.1 UTF8String from DER.
d2i_ASN1_VISIBLESTRING	Decode an ASN.1 VisibleString from DER.
d2i_ASRange	Decode an AS number range from DER.
d2i_AUTHORITY_INFO_ACCESS	Decode an Authority Information Access extension value from DER.
d2i_AUTHORITY_KEYID	Decode an Authority Key Identifier extension value from DER.
d2i_AutoPrivateKey	Decode a private key from DER, detecting the algorithm automatically.
d2i_AutoPrivateKey_ex	Decode a private key from DER, auto-detecting the algorithm, using a library context.
d2i_BASIC_CONSTRAINTS	Decode a Basic Constraints extension value from DER.
d2i_CERTIFICATEPOLICIES	Decode a DER-encoded certificatePolicies extension into a CERTIFICATEPOLICIES stack.
d2i_CMS_ContentInfo	Decode a CMS ContentInfo from DER.
d2i_CMS_ReceiptRequest	Decode a CMS ReceiptRequest from DER.
d2i_CMS_bio	Decode a CMS ContentInfo from a BIO in DER form.
d2i_CRL_DIST_POINTS	Decode a CRL Distribution Points extension value from DER.
d2i_DHparams [deprecated]	Decode Diffie-Hellman domain parameters from DER (deprecated).
d2i_DHxparams [deprecated]	Decode Diffie-Hellman X9.42 domain parameters (with q/j/seed) from DER (deprecated).
d2i_DIRECTORYSTRING	Decode a DirectoryString from DER.
d2i_DISPLAYTEXT	Decode a DisplayText (ASN.1 string CHOICE) from DER.
d2i_DIST_POINT	Decode a CRL distribution point from DER.
d2i_DIST_POINT_NAME	Decode a distribution point name from DER.
d2i_DSAPrivateKey [deprecated]	Decode a DSA private key from DER (deprecated).
d2i_DSAPrivateKey_bio [deprecated]	Decode a DSA private key in DER form from a BIO (deprecated).
d2i_DSAPrivateKey_fp [deprecated]	Read a DER-encoded DSA private key from a FILE (deprecated).
d2i_DSAPublicKey [deprecated]	Decode a DSA public key from DER (deprecated).
d2i_DSA_PUBKEY [deprecated]	Decode a DSA public key from SubjectPublicKeyInfo DER (deprecated).
d2i_DSA_PUBKEY_bio [deprecated]	Read a DSA public key in SubjectPublicKeyInfo form from a BIO (deprecated).
d2i_DSA_PUBKEY_fp [deprecated]	Read a DSA public key in SubjectPublicKeyInfo DER form from a FILE (deprecated).
d2i_DSA_SIG	Decode a DSA signature (r, s) from DER.
d2i_DSAparams [deprecated]	Decode DSA domain parameters from DER (deprecated).
d2i_ECDSA_SIG	Decode an ECDSA signature from DER.
d2i_ECPKParameters	Decode EC domain parameters (EcpkParameters) from DER into an EC_GROUP.
d2i_ECParameters [deprecated]	Decodes ec parameter from a memory buffer.
d2i_ECPrivateKey [deprecated]	Decodes a private key from a memory buffer.
d2i_ECPrivateKey_bio [deprecated]	Read a DER-encoded EC private key from a BIO (deprecated).
d2i_ECPrivateKey_fp [deprecated]	Decode an EC private key in SEC1 DER form from a FILE (deprecated).
d2i_EC_PUBKEY [deprecated]	Decode an EC public key from SubjectPublicKeyInfo DER (deprecated).
d2i_EC_PUBKEY_bio [deprecated]	Read a DER-encoded SubjectPublicKeyInfo EC public key from a BIO (deprecated).
d2i_EC_PUBKEY_fp [deprecated]	Read an EC public key in SubjectPublicKeyInfo DER form from a FILE (deprecated).
d2i_EDIPARTYNAME	Decode an EDI party name from DER.
d2i_ESS_CERT_ID	Decode a ESS CertID from DER.
d2i_ESS_CERT_ID_V2	Decode a ESS CertIDv2 from DER.
d2i_ESS_ISSUER_SERIAL	Decode a ESS IssuerSerial from DER.
d2i_ESS_SIGNING_CERT	Decode a ESS SigningCertificate attribute from DER.
d2i_ESS_SIGNING_CERT_V2	Decode a ESS SigningCertificateV2 attribute from DER.
d2i_EXTENDED_KEY_USAGE	Decode an Extended Key Usage extension value from DER.
d2i_GENERAL_NAME	Decode a GeneralName from DER.
d2i_GENERAL_NAMES	Decode a GeneralNames value from DER.
d2i_IPAddressChoice	Decode an IPAddressChoice from DER.
d2i_IPAddressFamily	Decode an IPAddressFamily from DER.
d2i_IPAddressOrRange	Decode a IP address or address range (RFC 3779) from DER.
d2i_IPAddressRange	Decode an IPAddressRange from DER.
d2i_ISSUER_SIGN_TOOL	Decode an Issuer Signing Tool extension value from DER.
d2i_ISSUING_DIST_POINT	Decode an Issuing Distribution Point extension value from DER.
d2i_KeyParams	Decode algorithm parameters of the given key type from DER into an EVP_PKEY.
d2i_KeyParams_bio	Decode algorithm parameters from a BIO into an EVP_PKEY of the given type.
d2i_NAMING_AUTHORITY	Decode a NAMING_AUTHORITY from DER.
d2i_NETSCAPE_CERT_SEQUENCE	Decode a Netscape Certificate Sequence from DER.
d2i_NETSCAPE_SPKAC	Decode a Netscape SPKAC from DER.
d2i_NETSCAPE_SPKI	Decode a Netscape Signed Public Key and Challenge (SPKI) from DER.
d2i_NOTICEREF	Decode a certificate-policy notice reference from DER.
d2i_OCSP_BASICRESP	Decode an OCSP BasicOCSPResponse from DER.
d2i_OCSP_CERTID	Decode an OCSP CertID from DER.
d2i_OCSP_CERTSTATUS	Decode a OCSP CertStatus from DER.
d2i_OCSP_CRLID	Decode an OCSP CrlID extension value from DER.
d2i_OCSP_ONEREQ	Decode an OCSP single Request entry from DER.
d2i_OCSP_REQINFO	Decode a OCSP TBSRequest (OCSP_REQINFO) from DER.
d2i_OCSP_REQUEST	Decode an OCSP Request from DER.
d2i_OCSP_RESPBYTES	Decode an OCSP ResponseBytes from DER.
d2i_OCSP_RESPDATA	Decode a OCSP ResponseData from DER.
d2i_OCSP_RESPID	Decode a OCSP ResponderID from DER.
d2i_OCSP_RESPONSE	Decode a OCSP Response from DER.
d2i_OCSP_REVOKEDINFO	Decode an OCSP RevokedInfo from DER.
d2i_OCSP_SERVICELOC	Decode an OCSP ServiceLocator extension value from DER.
d2i_OCSP_SIGNATURE	Decode an OCSP Signature from DER.
d2i_OCSP_SINGLERESP	Decode an OCSP SingleResponse from DER.
d2i_OSSL_CMP_MSG	Decode an OSSL_CMP_MSG from DER.
d2i_OSSL_CMP_MSG_bio	Decode a DER-encoded CMP message from a BIO.
d2i_OSSL_CMP_PKIHEADER	Decode an OSSL_CMP_PKIHEADER from DER.
d2i_OSSL_CMP_PKISI	Decode an OSSL_CMP_PKISI from DER.
d2i_OSSL_CRMF_CERTID	Decode an OSSL_CRMF_CERTID from DER.
d2i_OSSL_CRMF_CERTTEMPLATE	Decode an OSSL_CRMF_CERTTEMPLATE from DER.
d2i_OSSL_CRMF_ENCRYPTEDVALUE	Decode an OSSL_CRMF_ENCRYPTEDVALUE from DER.
d2i_OSSL_CRMF_MSG	Decode an OSSL_CRMF_MSG from DER.
d2i_OSSL_CRMF_MSGS	Decode an OSSL_CRMF_MSGS sequence from DER.
d2i_OSSL_CRMF_PBMPARAMETER	Decode an OSSL_CRMF_PBMPARAMETER from DER.
d2i_OSSL_CRMF_PKIPUBLICATIONINFO	Decode an OSSL_CRMF_PKIPUBLICATIONINFO from DER.
d2i_OSSL_CRMF_SINGLEPUBINFO	Decode an OSSL_CRMF_SINGLEPUBINFO from DER.
d2i_OTHERNAME	Decode an otherName value from DER.
d2i_PBE2PARAM	Decode a PKCS#5 PBES2 parameter structure from DER.
d2i_PBEPARAM	Decode a PKCS#5 PBES1 parameter structure (salt and iteration count) from DER.
d2i_PBKDF2PARAM	Decode a PKCS#5 PBKDF2 parameter structure from DER.
d2i_PKCS12	Decode a PKCS12 structure from DER.
d2i_PKCS12_BAGS	Decode a PKCS12_BAGS structure from DER.
d2i_PKCS12_MAC_DATA	Decode a PKCS12_MAC_DATA structure from DER.
d2i_PKCS12_SAFEBAG	Decode a PKCS12_SAFEBAG structure from DER.
d2i_PKCS12_bio	Read and decode a PKCS12 structure from a BIO.
d2i_PKCS12_fp	Read and decode a PKCS12 structure from a FILE.
d2i_PKCS7	Decode a PKCS#7 structure from DER.
d2i_PKCS7_DIGEST	Decode a PKCS#7 DigestedData structure from DER.
d2i_PKCS7_ENCRYPT	Decode a PKCS#7 EncryptedData from DER.
d2i_PKCS7_ENC_CONTENT	Decode a PKCS#7 EncryptedContentInfo from DER.
d2i_PKCS7_ENVELOPE	Decode a PKCS#7 EnvelopedData structure from DER.
d2i_PKCS7_ISSUER_AND_SERIAL	Decode a PKCS#7 IssuerAndSerialNumber from DER.
d2i_PKCS7_RECIP_INFO	Decode a PKCS#7 recipient info structure from DER.
d2i_PKCS7_SIGNED	Decode a PKCS#7 SignedData from DER.
d2i_PKCS7_SIGNER_INFO	Decode a PKCS#7 SignerInfo from DER.
d2i_PKCS7_SIGN_ENVELOPE	Decode a PKCS#7 SignedAndEnvelopedData structure from DER.
d2i_PKCS7_bio	Decode a DER-encoded PKCS#7 structure from a BIO.
d2i_PKCS7_fp	Decode a PKCS#7 structure from a FILE stream in DER form.
d2i_PKCS8PrivateKey_bio	Decode a DER PKCS#8 private key (encrypted or plain) from a BIO.
d2i_PKCS8PrivateKey_fp	Decode a DER PKCS#8 private key (encrypted or plain) from a FILE.
d2i_PKCS8_PRIV_KEY_INFO	Decode a PKCS#8 PrivateKeyInfo from DER.
d2i_PKCS8_PRIV_KEY_INFO_bio	Decode a PKCS#8 PrivateKeyInfo structure in DER form from a BIO.
d2i_PKCS8_PRIV_KEY_INFO_fp	Decode a PKCS#8 PrivateKeyInfo structure from a FILE.
d2i_PKCS8_bio	Decode a PKCS#8 encrypted private key (X509_SIG) in DER form from a BIO.
d2i_PKCS8_fp	Decode a PKCS#8 encrypted private key (X509_SIG) in DER form from a FILE.
d2i_PKEY_USAGE_PERIOD	Decode a Private Key Usage Period extension value from DER.
d2i_POLICYINFO	Decode a certificate policy information value from DER.
d2i_POLICYQUALINFO	Decode a policy qualifier information value from DER.
d2i_PROFESSION_INFO	Decode a PROFESSION_INFO from DER.
d2i_PROXY_CERT_INFO_EXTENSION	Decode a PROXY_CERT_INFO_EXTENSION structure from DER.
d2i_PROXY_POLICY	Decode a PROXY_POLICY from DER.
d2i_PUBKEY	Decode an EVP_PKEY from SubjectPublicKeyInfo DER.
d2i_PUBKEY_bio	Read a DER-encoded SubjectPublicKeyInfo into an EVP_PKEY from a BIO.
d2i_PUBKEY_ex	Decode a SubjectPublicKeyInfo from DER with an explicit library context.
d2i_PUBKEY_ex_bio	Read a DER-encoded SubjectPublicKeyInfo into an EVP_PKEY from a BIO with library context.
d2i_PUBKEY_ex_fp	Decode an EVP_PKEY in SubjectPublicKeyInfo form from a FILE, with library context.
d2i_PUBKEY_fp	Decode an EVP_PKEY in SubjectPublicKeyInfo form from a FILE.
d2i_PrivateKey	Decode a private key of the given algorithm from DER using the default library context.
d2i_PrivateKey_bio	Read a private key in traditional or PKCS#8 DER form from a BIO.
d2i_PrivateKey_ex	Decode a private key of type type from DER using a library context.
d2i_PrivateKey_ex_bio	Read a private key from a BIO with an explicit library context and property query.
d2i_PrivateKey_ex_fp	Read a private key in traditional or PKCS#8 DER form from a FILE with library context.
d2i_PrivateKey_fp	Read a private key in traditional or PKCS#8 DER form from a FILE.
d2i_PublicKey	Decode a public key of the given type from DER into an EVP_PKEY.
d2i_RSAPrivateKey [deprecated]	Decode an RSA private key from DER in PKCS#1 RSAPrivateKey form (deprecated).
d2i_RSAPrivateKey_bio [deprecated]	Decode an RSA private key in PKCS#1 DER form from a BIO (deprecated).
d2i_RSAPrivateKey_fp [deprecated]	Read a DER-encoded RSA private key from a FILE (deprecated).
d2i_RSAPublicKey [deprecated]	Decode an RSA public key from DER in PKCS#1 RSAPublicKey form (deprecated).
d2i_RSAPublicKey_bio [deprecated]	Decode an RSA public key in PKCS#1 RSAPublicKey form from a BIO (deprecated).
d2i_RSAPublicKey_fp [deprecated]	Decode an RSA public key in PKCS#1 RSAPublicKey form from a FILE (deprecated).
d2i_RSA_OAEP_PARAMS	Decode RSA-OAEP parameters from DER.
d2i_RSA_PSS_PARAMS	Decode RSA-PSS parameters from DER.
d2i_RSA_PUBKEY [deprecated]	Decode an RSA public key from SubjectPublicKeyInfo DER (deprecated).
d2i_RSA_PUBKEY_bio [deprecated]	Decode an RSA public key (SubjectPublicKeyInfo) in DER form from a BIO (deprecated).
d2i_RSA_PUBKEY_fp [deprecated]	Read an RSA public key in SubjectPublicKeyInfo DER form from a FILE (deprecated).
d2i_SCRYPT_PARAMS	Decode a PKCS#5 scrypt parameter structure from DER.
d2i_SCT_LIST	Decode a DER-encoded list of Signed Certificate Timestamps.
d2i_SSL_SESSION	Decode an SSL_SESSION from its ASN.1 DER encoding.
d2i_SSL_SESSION_ex	Decode an SSL_SESSION from DER with an explicit library context.
d2i_SXNET	Decode an SXNET (Strong Extranet) value from DER.
d2i_SXNETID	Decode an SXNETID from DER.
d2i_TS_ACCURACY	Decode a time-stamp Accuracy from DER.
d2i_TS_MSG_IMPRINT	Decode a time-stamp message imprint from DER.
d2i_TS_MSG_IMPRINT_bio	Decode a message imprint from a BIO containing DER.
d2i_TS_MSG_IMPRINT_fp	Decode a message imprint from a FILE stream containing DER.
d2i_TS_REQ	Decode a time-stamp request from DER.
d2i_TS_REQ_bio	Decode a time-stamp request from a BIO containing DER.
d2i_TS_REQ_fp	Decode a time-stamp request from a FILE stream containing DER.
d2i_TS_RESP	Decode a time-stamp response from DER.
d2i_TS_RESP_bio	Decode a time-stamp response from a BIO containing DER.
d2i_TS_RESP_fp	Decode a time-stamp response from a FILE stream containing DER.
d2i_TS_STATUS_INFO	Decode a time-stamp PKIStatusInfo from DER.
d2i_TS_TST_INFO	Decode a time-stamp token info from DER.
d2i_TS_TST_INFO_bio	Decode TSTInfo from a BIO containing DER.
d2i_TS_TST_INFO_fp	Decode TSTInfo from a FILE stream containing DER.
d2i_USERNOTICE	Decode a user notice policy qualifier from DER.
d2i_X509	Decode an X.509 certificate from DER.
d2i_X509_ALGOR	Decode an X.509 AlgorithmIdentifier from DER.
d2i_X509_ALGORS	Decode a SEQUENCE OF X509_ALGOR (AlgorithmIdentifiers) from DER.
d2i_X509_ATTRIBUTE	Decode an X.509 Attribute from DER.
d2i_X509_AUX	Decode an X.509 certificate with trusted-certificate auxiliary data from DER.
d2i_X509_CERT_AUX	Decode certificate auxiliary info from DER.
d2i_X509_CINF	Decode a X.509 TBSCertificate (X509_CINF) structure from DER.
d2i_X509_CRL	Decode an X.509 CRL from DER.
d2i_X509_CRL_INFO	Decode a X.509 CRL information (tbsCertList) structure from DER.
d2i_X509_CRL_bio	Decode an X.509 CRL in DER form from a BIO.
d2i_X509_CRL_fp	Decode an X.509 CRL in DER form from a FILE.
d2i_X509_EXTENSION	Decode a X.509 extension from DER.
d2i_X509_EXTENSIONS	Decode a SEQUENCE OF X509_EXTENSION from DER.
d2i_X509_NAME	Decode a X.509 distinguished name (Name) from DER.
d2i_X509_NAME_ENTRY	Decode a X.509 Name entry (AttributeTypeAndValue) from DER.
d2i_X509_PUBKEY	Decode a X.509 SubjectPublicKeyInfo (X509_PUBKEY) from DER.
d2i_X509_PUBKEY_bio	Decode an X509_PUBKEY (SubjectPublicKeyInfo) in DER form from a BIO.
d2i_X509_PUBKEY_fp	Read a DER-encoded SubjectPublicKeyInfo (X509_PUBKEY) from a FILE.
d2i_X509_REQ	Decode a X.509 certificate signing request from DER.
d2i_X509_REQ_INFO	Decode an X.509 certificate request info structure from DER.
d2i_X509_REQ_bio	Decode a DER-encoded certificate request from a BIO.
d2i_X509_REQ_fp	Decode an X.509 certificate request in DER form from a FILE.
d2i_X509_REVOKED	Decode a CRL revoked-certificate entry from DER.
d2i_X509_SIG	Decode an X.509 signature structure from DER.
d2i_X509_VAL	Decode an X509_VAL (certificate validity interval) from DER.
d2i_X509_bio	Decode an X.509 certificate in DER form from a BIO.
d2i_X509_fp	Decode an X.509 certificate in DER form from a FILE.
i2a_ACCESS_DESCRIPTION	Write the accessMethod OID of an AccessDescription to a BIO.
i2a_ASN1_ENUMERATED	Write an ASN.1 ENUMERATED to a BIO as hexadecimal ASCII text.
i2a_ASN1_INTEGER	Write an ASN.1 INTEGER to a BIO as hexadecimal ASCII text.
i2a_ASN1_OBJECT	Write an OBJECT IDENTIFIER to a BIO as a dotted name or numeric OID text.
i2a_ASN1_STRING	Write an ASN.1 string's content to a BIO as uppercase hexadecimal digits.
i2b_PVK_bio	Encode a private key in Microsoft PVK format and write it to a BIO.
i2b_PVK_bio_ex	Encode a private key in Microsoft PVK format using an explicit library context.
i2b_PrivateKey_bio	Encode a private key in Microsoft MSBLOB format and write it to a BIO.
i2b_PublicKey_bio	Encode a public key in Microsoft MSBLOB format and write it to a BIO.
i2d_ACCESS_DESCRIPTION	Encode an AccessDescription to DER.
i2d_ADMISSIONS	Encode an ADMISSIONS value to DER.
i2d_ADMISSION_SYNTAX	Encode an ADMISSION_SYNTAX to DER.
i2d_ASIdOrRange	Encode an ASIdOrRange to DER.
i2d_ASIdentifierChoice	Encode an ASIdentifierChoice to DER.
i2d_ASIdentifiers	Encode an ASIdentifiers extension to DER.
i2d_ASN1_BIT_STRING	Encode an ASN.1 BIT STRING to DER.
i2d_ASN1_BMPSTRING	Encode a ASN.1 BMPString to DER.
i2d_ASN1_ENUMERATED	Encode an ASN.1 ENUMERATED to DER.
i2d_ASN1_GENERALIZEDTIME	Encode an ASN.1 GeneralizedTime to DER.
i2d_ASN1_GENERALSTRING	Encode an ASN.1 GeneralString to DER.
i2d_ASN1_IA5STRING	Encode an ASN.1 IA5String to DER.
i2d_ASN1_INTEGER	Encode an ASN.1 INTEGER to DER.
i2d_ASN1_NULL	Encode an ASN.1 NULL to DER.
i2d_ASN1_OBJECT	Encode an ASN.1 OBJECT identifier to DER.
i2d_ASN1_OCTET_STRING	Encode an ASN.1 OCTET STRING to DER.
i2d_ASN1_PRINTABLE	Encode an ASN1_PRINTABLE string to DER.
i2d_ASN1_PRINTABLESTRING	Encode an ASN.1 PrintableString to DER.
i2d_ASN1_SEQUENCE_ANY	Encode a stack of ASN1_TYPE values as an ASN.1 SEQUENCE OF ANY in DER.
i2d_ASN1_SET_ANY	Encode a stack of ASN1_TYPE values as an ASN.1 SET OF ANY in DER.
i2d_ASN1_T61STRING	Encode a ASN.1 TeletexString (T61String) to DER.
i2d_ASN1_TIME	Encode a ASN.1 time value (UTCTime or GeneralizedTime) to DER.
i2d_ASN1_TYPE	Encode an ASN.1 ANY / ASN1_TYPE value to DER.
i2d_ASN1_UNIVERSALSTRING	Encode an ASN.1 UniversalString to DER.
i2d_ASN1_UTCTIME	Encode an ASN.1 UTCTime to DER.
i2d_ASN1_UTF8STRING	Encode an ASN.1 UTF8String to DER.
i2d_ASN1_VISIBLESTRING	Encode an ASN.1 VisibleString to DER.
i2d_ASN1_bio_stream	Stream-encode an ASN.1 value to out, optionally pulling content from in.
i2d_ASRange	Encode an AS number range to DER.
i2d_AUTHORITY_INFO_ACCESS	Encode an AuthorityInfoAccess syntax value to DER.
i2d_AUTHORITY_KEYID	Encode an Authority Key Identifier extension value to DER.
i2d_BASIC_CONSTRAINTS	Encode a Basic Constraints extension value to DER.
i2d_CERTIFICATEPOLICIES	Encode a Certificate Policies extension value to DER.
i2d_CMS_ContentInfo	Encode a CMS ContentInfo to DER.
i2d_CMS_ReceiptRequest	Encode a CMS ReceiptRequest to DER.
i2d_CMS_bio	Encode a CMS ContentInfo to a BIO in DER form.
i2d_CMS_bio_stream	Stream a CMS ContentInfo to out as BER, optionally pulling content from in.
i2d_CRL_DIST_POINTS	Encode a CRL Distribution Points extension value to DER.
i2d_DHparams [deprecated]	Encode Diffie-Hellman domain parameters to DER (deprecated).
i2d_DHxparams [deprecated]	Encode Diffie-Hellman X9.42 domain parameters (with q/j/seed) to DER (deprecated).
i2d_DIRECTORYSTRING	Encode a DirectoryString to DER.
i2d_DISPLAYTEXT	Encode a DisplayText (ASN.1 string CHOICE) to DER.
i2d_DIST_POINT	DER-encode a DistributionPoint structure.
i2d_DIST_POINT_NAME	Encode a distribution point name to DER.
i2d_DSAPrivateKey [deprecated]	Encode a DSA private key to DER (deprecated).
i2d_DSAPrivateKey_bio [deprecated]	Write a DER-encoded DSA private key to a BIO (deprecated).
i2d_DSAPrivateKey_fp [deprecated]	Write a DER-encoded DSA private key to a FILE stream (deprecated).
i2d_DSAPublicKey [deprecated]	Encode a DSA public key to DER (deprecated).
i2d_DSA_PUBKEY [deprecated]	Encode a DSA public key as SubjectPublicKeyInfo DER (deprecated).
i2d_DSA_PUBKEY_bio [deprecated]	Write a DSA public key as SubjectPublicKeyInfo DER to a BIO (deprecated).
i2d_DSA_PUBKEY_fp [deprecated]	Write a DSA public key in SubjectPublicKeyInfo DER form to a FILE (deprecated).
i2d_DSA_SIG	Encode a DSA signature (r, s) to DER.
i2d_DSAparams [deprecated]	Encode DSA domain parameters to DER (deprecated).
i2d_ECDSA_SIG	Encode an ECDSA signature (r, s) to DER.
i2d_ECPKParameters	Encode EC domain parameters (EcpkParameters) from an EC_GROUP to DER.
i2d_ECParameters [deprecated]	Encodes ec parameter and stores the result in a buffer.
i2d_ECPrivateKey [deprecated]	Encodes a private key object and stores the result in a buffer.
i2d_ECPrivateKey_bio [deprecated]	Write an EC private key in SEC1 ECPrivateKey DER form to a BIO (deprecated).
i2d_ECPrivateKey_fp [deprecated]	Write an EC private key in SEC1 ECPrivateKey DER form to a FILE (deprecated).
i2d_EC_PUBKEY [deprecated]	Encode an EC public key as SubjectPublicKeyInfo DER (deprecated).
i2d_EC_PUBKEY_bio [deprecated]	Write an EC public key as SubjectPublicKeyInfo DER to a BIO (deprecated).
i2d_EC_PUBKEY_fp [deprecated]	Write an EC public key in SubjectPublicKeyInfo DER form to a FILE (deprecated).
i2d_EDIPARTYNAME	Encode an EDI party name to DER.
i2d_ESS_CERT_ID	Encode a ESS CertID to DER.
i2d_ESS_CERT_ID_V2	Encode a ESS CertIDv2 to DER.
i2d_ESS_ISSUER_SERIAL	Encode a ESS IssuerSerial to DER.
i2d_ESS_SIGNING_CERT	Encode a ESS SigningCertificate attribute to DER.
i2d_ESS_SIGNING_CERT_V2	Encode a ESS SigningCertificateV2 attribute to DER.
i2d_EXTENDED_KEY_USAGE	Encode an Extended Key Usage extension value to DER.
i2d_GENERAL_NAME	Encode a GeneralName to DER.
i2d_GENERAL_NAMES	Encode a GeneralNames value to DER.
i2d_IPAddressChoice	Encode an IPAddressChoice to DER.
i2d_IPAddressFamily	Encode an IPAddressFamily to DER.
i2d_IPAddressOrRange	Encode a IP address or address range (RFC 3779) to DER.
i2d_IPAddressRange	Encode an IPAddressRange to DER.
i2d_ISSUER_SIGN_TOOL	Encode an ISSUER_SIGN_TOOL value to DER.
i2d_ISSUING_DIST_POINT	Encode an Issuing Distribution Point extension value to DER.
i2d_KeyParams	Encode algorithm parameters from an EVP_PKEY to DER.
i2d_KeyParams_bio	Encode algorithm parameters from an EVP_PKEY to a BIO in DER form.
i2d_NAMING_AUTHORITY	Encode a NAMING_AUTHORITY to DER.
i2d_NETSCAPE_CERT_SEQUENCE	Encode a Netscape Certificate Sequence to DER.
i2d_NETSCAPE_SPKAC	Encode a Netscape SPKAC to DER.
i2d_NETSCAPE_SPKI	Encode a Netscape Signed Public Key and Challenge (SPKI) to DER.
i2d_NOTICEREF	Encode a certificate-policy notice reference to DER.
i2d_OCSP_BASICRESP	Encode an OCSP BasicOCSPResponse to DER.
i2d_OCSP_CERTID	Encode an OCSP CertID to DER.
i2d_OCSP_CERTSTATUS	Encode a OCSP CertStatus to DER.
i2d_OCSP_CRLID	Encode an OCSP CrlID extension value to DER.
i2d_OCSP_ONEREQ	Encode an OCSP single Request entry to DER.
i2d_OCSP_REQINFO	Encode a OCSP TBSRequest (OCSP_REQINFO) to DER.
i2d_OCSP_REQUEST	Encode an OCSP Request to DER.
i2d_OCSP_RESPBYTES	Encode an OCSP ResponseBytes to DER.
i2d_OCSP_RESPDATA	Encode a OCSP ResponseData to DER.
i2d_OCSP_RESPID	Encode a OCSP ResponderID to DER.
i2d_OCSP_RESPONSE	Encode a OCSP Response to DER.
i2d_OCSP_REVOKEDINFO	Encode an OCSP RevokedInfo to DER.
i2d_OCSP_SERVICELOC	Encode an OCSP ServiceLocator extension value to DER.
i2d_OCSP_SIGNATURE	Encode an OCSP Signature to DER.
i2d_OCSP_SINGLERESP	Encode an OCSP SingleResponse to DER.
i2d_OSSL_CMP_MSG	Encode an OSSL_CMP_MSG to DER.
i2d_OSSL_CMP_MSG_bio	Encode a CMP message to DER and write it to a BIO.
i2d_OSSL_CMP_PKIHEADER	Encode an OSSL_CMP_PKIHEADER to DER.
i2d_OSSL_CMP_PKISI	Encode an OSSL_CMP_PKISI to DER.
i2d_OSSL_CRMF_CERTID	Encode an OSSL_CRMF_CERTID to DER.
i2d_OSSL_CRMF_CERTTEMPLATE	Encode an OSSL_CRMF_CERTTEMPLATE to DER.
i2d_OSSL_CRMF_ENCRYPTEDVALUE	Encode an OSSL_CRMF_ENCRYPTEDVALUE to DER.
i2d_OSSL_CRMF_MSG	Encode an OSSL_CRMF_MSG to DER.
i2d_OSSL_CRMF_MSGS	Encode an OSSL_CRMF_MSGS sequence to DER.
i2d_OSSL_CRMF_PBMPARAMETER	Encode an OSSL_CRMF_PBMPARAMETER to DER.
i2d_OSSL_CRMF_PKIPUBLICATIONINFO	Encode an OSSL_CRMF_PKIPUBLICATIONINFO to DER.
i2d_OSSL_CRMF_SINGLEPUBINFO	Encode an OSSL_CRMF_SINGLEPUBINFO to DER.
i2d_OTHERNAME	Encode an otherName value to DER.
i2d_PBE2PARAM	Encode a PKCS#5 PBES2 parameter structure to DER.
i2d_PBEPARAM	Encode a PKCS#5 PBES1 parameter structure (salt and iteration count) to DER.
i2d_PBKDF2PARAM	Encode a PKCS#5 PBKDF2 parameter structure to DER.
i2d_PKCS12	Encode a PKCS12 structure to DER.
i2d_PKCS12_BAGS	Encode a PKCS12_BAGS structure to DER.
i2d_PKCS12_MAC_DATA	Encode a PKCS12_MAC_DATA structure to DER.
i2d_PKCS12_SAFEBAG	Encode a PKCS12_SAFEBAG structure to DER.
i2d_PKCS12_bio	Encode a PKCS12 structure to DER and write it to a BIO.
i2d_PKCS12_fp	Encode a PKCS12 structure to DER and write it to a FILE.
i2d_PKCS7	Encode a PKCS#7 structure to DER.
i2d_PKCS7_DIGEST	Encode a PKCS#7 DigestedData structure to DER.
i2d_PKCS7_ENCRYPT	Encode a PKCS#7 EncryptedData to DER.
i2d_PKCS7_ENC_CONTENT	Encode a PKCS#7 EncryptedContentInfo to DER.
i2d_PKCS7_ENVELOPE	Encode a PKCS#7 EnvelopedData structure to DER.
i2d_PKCS7_ISSUER_AND_SERIAL	Encode a PKCS#7 IssuerAndSerialNumber to DER.
i2d_PKCS7_NDEF	Encode a PKCS#7 structure to DER using indefinite-length (NDEF) constructed encoding.
i2d_PKCS7_RECIP_INFO	Encode a PKCS#7 recipient info structure to DER.
i2d_PKCS7_SIGNED	Encode a PKCS#7 SignedData to DER.
i2d_PKCS7_SIGNER_INFO	Encode a PKCS#7 SignerInfo to DER.
i2d_PKCS7_SIGN_ENVELOPE	Encode a PKCS#7 SignedAndEnvelopedData structure to DER.
i2d_PKCS7_bio	Write a DER-encoded PKCS#7 structure to a BIO.
i2d_PKCS7_bio_stream	Output a PKCS#7 structure in BER format, streaming content from in when required.
i2d_PKCS7_fp	Write a DER-encoded PKCS#7 structure to a FILE.
i2d_PKCS8PrivateKeyInfo_bio	Write a private key as an unencrypted PKCS#8 PrivateKeyInfo DER blob to a BIO.
i2d_PKCS8PrivateKeyInfo_fp	Write key to a FILE as a PKCS#8 PrivateKeyInfo DER encoding.
i2d_PKCS8PrivateKey_bio	Encode a private key as DER PKCS#8 and write it to a BIO.
i2d_PKCS8PrivateKey_fp	Encode a private key as DER PKCS#8 and write it to a FILE.
i2d_PKCS8PrivateKey_nid_bio	Encode a private key as DER PKCS#8 using a PKCS#5 v1.5 / PKCS#12 PBE NID.
i2d_PKCS8PrivateKey_nid_fp	Encode a private key as DER PKCS#8 using a PKCS#5 v1.5 / PKCS#12 PBE NID.
i2d_PKCS8_PRIV_KEY_INFO	Encode a PKCS#8 PrivateKeyInfo to DER.
i2d_PKCS8_PRIV_KEY_INFO_bio	Write an unencrypted PKCS#8 PrivateKeyInfo structure to a BIO in DER form.
i2d_PKCS8_PRIV_KEY_INFO_fp	Write an unencrypted PKCS#8 PrivateKeyInfo structure to a FILE in DER form.
i2d_PKCS8_bio	Write an encrypted PKCS#8 private key (X509_SIG) in DER form to a BIO.
i2d_PKCS8_fp	Encode a PKCS#8 encrypted private key (X509_SIG) to DER and write it to a FILE.
i2d_PKEY_USAGE_PERIOD	Encode a Private Key Usage Period extension value to DER.
i2d_POLICYINFO	Encode a certificate policy information value to DER.
i2d_POLICYQUALINFO	Encode a policy qualifier information value to DER.
i2d_PROFESSION_INFO	Encode a PROFESSION_INFO to DER.
i2d_PROXY_CERT_INFO_EXTENSION	Encode a Proxy Certificate Information extension value to DER.
i2d_PROXY_POLICY	Encode a PROXY_POLICY to DER.
i2d_PUBKEY	Encode an EVP_PKEY as SubjectPublicKeyInfo DER.
i2d_PUBKEY_bio	Encode an EVP_PKEY as SubjectPublicKeyInfo DER and write it to a BIO.
i2d_PUBKEY_fp	Encode an EVP_PKEY as SubjectPublicKeyInfo DER and write it to a FILE.
i2d_PrivateKey	Encode the private key from an EVP_PKEY to DER in the algorithm-native private-key format.
i2d_PrivateKey_bio	Write a private key in traditional DER form to a BIO.
i2d_PrivateKey_fp	Write a private key to a FILE in traditional (type-specific) DER form.
i2d_PublicKey	Encode the public key from an EVP_PKEY to DER in the algorithm-native public-key format.
i2d_RSAPrivateKey [deprecated]	Encode an RSA private key to DER in PKCS#1 RSAPrivateKey form (deprecated).
i2d_RSAPrivateKey_bio [deprecated]	Write an RSA private key in PKCS#1 DER form to a BIO (deprecated).
i2d_RSAPrivateKey_fp [deprecated]	Write an RSA private key in PKCS#1 DER form to a FILE (deprecated).
i2d_RSAPublicKey [deprecated]	Encode an RSA public key to DER in PKCS#1 RSAPublicKey form (deprecated).
i2d_RSAPublicKey_bio [deprecated]	Write an RSA public key in PKCS#1 RSAPublicKey DER form to a BIO (deprecated).
i2d_RSAPublicKey_fp [deprecated]	Write an RSA public key in PKCS#1 RSAPublicKey DER form to a FILE (deprecated).
i2d_RSA_OAEP_PARAMS	Encode RSA-OAEP parameters to DER.
i2d_RSA_PSS_PARAMS	Encode RSA-PSS parameters to DER.
i2d_RSA_PUBKEY [deprecated]	Encode an RSA public key as SubjectPublicKeyInfo DER (deprecated).
i2d_RSA_PUBKEY_bio [deprecated]	Write an RSA public key as SubjectPublicKeyInfo DER to a BIO (deprecated).
i2d_RSA_PUBKEY_fp [deprecated]	Write an RSA public key to a FILE as a SubjectPublicKeyInfo DER blob (deprecated).
i2d_SCRYPT_PARAMS	Encode a PKCS#5 scrypt parameter structure to DER.
i2d_SCT_LIST	Serialize a stack of SCTs to DER and return the encoded length.
i2d_SSL_SESSION	Encode an SSL_SESSION into its ASN.1 DER representation (i2d style).
i2d_SXNET	Encode an SXNET value to DER.
i2d_SXNETID	Encode an SXNETID value to DER.
i2d_TS_ACCURACY	Encode a time-stamp Accuracy to DER.
i2d_TS_MSG_IMPRINT	Encode a time-stamp message imprint to DER.
i2d_TS_MSG_IMPRINT_bio	Encode a message imprint as DER to a BIO.
i2d_TS_MSG_IMPRINT_fp	Encode a message imprint as DER to a FILE stream.
i2d_TS_REQ	Encode a time-stamp request to DER.
i2d_TS_REQ_bio	Encode a time-stamp request as DER to a BIO.
i2d_TS_REQ_fp	Encode a time-stamp request as DER to a FILE stream.
i2d_TS_RESP	Encode a time-stamp response to DER.
i2d_TS_RESP_bio	Encode a time-stamp response as DER to a BIO.
i2d_TS_RESP_fp	Encode a time-stamp response as DER to a FILE stream.
i2d_TS_STATUS_INFO	Encode a time-stamp PKIStatusInfo to DER.
i2d_TS_TST_INFO	Encode a time-stamp token info to DER.
i2d_TS_TST_INFO_bio	Encode TSTInfo as DER to a BIO.
i2d_TS_TST_INFO_fp	Encode TSTInfo as DER to a FILE stream.
i2d_USERNOTICE	Encode a USERNOTICE structure to DER.
i2d_X509	Encode an X.509 certificate to DER.
i2d_X509_ALGOR	Encode an X.509 AlgorithmIdentifier to DER.
i2d_X509_ALGORS	Encode a SEQUENCE OF X509_ALGOR (AlgorithmIdentifiers) to DER.
i2d_X509_ATTRIBUTE	Encode an X.509 Attribute to DER.
i2d_X509_AUX	Encode an X.509 certificate plus trusted-certificate auxiliary data to DER.
i2d_X509_CERT_AUX	Encode certificate auxiliary info to DER.
i2d_X509_CINF	Encode a X.509 TBSCertificate (X509_CINF) structure to DER.
i2d_X509_CRL	Encode an X.509 CRL to DER.
i2d_X509_CRL_INFO	Encode a X.509 CRL information (tbsCertList) structure to DER.
i2d_X509_CRL_bio	Write an X.509 CRL to a BIO in DER form.
i2d_X509_CRL_fp	Write a DER-encoded X.509 CRL to a FILE stream.
i2d_X509_EXTENSION	Encode a X.509 extension to DER.
i2d_X509_EXTENSIONS	Encode a SEQUENCE OF X509_EXTENSION to DER.
i2d_X509_NAME	Encode a X.509 distinguished name (Name) to DER.
i2d_X509_NAME_ENTRY	Encode a X.509 Name entry (AttributeTypeAndValue) to DER.
i2d_X509_PUBKEY	Encode a X.509 SubjectPublicKeyInfo (X509_PUBKEY) to DER.
i2d_X509_PUBKEY_bio	Encode an X509_PUBKEY (SubjectPublicKeyInfo) to DER and write it to a BIO.
i2d_X509_PUBKEY_fp	Encode an X509_PUBKEY (SubjectPublicKeyInfo) to DER and write it to a FILE.
i2d_X509_REQ	Encode a X.509 certificate signing request to DER.
i2d_X509_REQ_INFO	Encode an X.509 certificate request info structure to DER.
i2d_X509_REQ_bio	Write a certificate request to a BIO in DER form.
i2d_X509_REQ_fp	Write an X.509 certificate request to a FILE in DER form.
i2d_X509_REVOKED	Encode a CRL revoked-certificate entry to DER.
i2d_X509_SIG	Encode an X.509 signature structure to DER.
i2d_X509_VAL	Encode an X509_VAL to DER.
i2d_X509_bio	Write an X.509 certificate to a BIO in DER form.
i2d_X509_fp	Write an X.509 certificate to a FILE in DER form.
i2d_re_X509_CRL_tbs	Re-encode the to-be-signed CRL body of req (refreshing cached DER).
i2d_re_X509_REQ_tbs	Re-encode the TBS (to-be-signed) portion of a certificate request to DER.
i2d_re_X509_tbs	Re-encode a certificate's TBSCertificate to DER, refreshing the cached encoding.
i2o_ECPublicKey [deprecated]	Encodes an ec public key in an octet string.
i2o_SCT	Serialize an SCT to TLS format.
i2o_SCT_LIST	Serialize a stack of SCTs to TLS format and return the encoded length.
i2s_ASN1_ENUMERATED	Convert an ASN1_ENUMERATED to a newly allocated decimal string.
i2s_ASN1_ENUMERATED_TABLE	Convert an ASN1_ENUMERATED to a name string using meth's ENUMERATED_NAMES table.
i2s_ASN1_IA5STRING	Convert an ASN1_IA5STRING to a newly allocated C string.
i2s_ASN1_INTEGER	Convert an ASN1_INTEGER to a newly allocated decimal string.
i2s_ASN1_OCTET_STRING	Format an ASN.1 OCTET STRING as a hexadecimal configuration string.
i2s_ASN1_UTF8STRING	Convert an ASN1_UTF8STRING to a newly allocated C string.
i2t_ASN1_OBJECT	Format an ASN.1 OBJECT IDENTIFIER into a textual OID name or dotted decimal form.
i2v_ASN1_BIT_STRING	Convert an ASN1_BIT_STRING into named CONF_VALUE entries using method bit names.
i2v_GENERAL_NAME	Append a GeneralName to a configuration name/value stack for extension printing.
i2v_GENERAL_NAMES	Convert a GeneralNames set into a configuration name/value stack.
o2i_ECPublicKey [deprecated]	Decodes an ec public key from a octet string.
o2i_SCT	Decode a single Signed Certificate Timestamp from TLS wire format (RFC 6962).
o2i_SCT_LIST	Decode a TLS-format (not DER) list of SCTs from pp.
s2i_ASN1_IA5STRING	Parse a configuration string into an ASN.1 IA5String.
s2i_ASN1_INTEGER	Parse a decimal (or 0x-prefixed hex) string into a newly allocated ASN1_INTEGER.
s2i_ASN1_OCTET_STRING	Parse a configuration string into an ASN.1 OCTET STRING.
s2i_ASN1_UTF8STRING	Parse a configuration string into an ASN.1 UTF8String.
sk_OPENSSL_PSTRING_deep_copy
sk_OPENSSL_PSTRING_delete
sk_OPENSSL_PSTRING_delete_ptr
sk_OPENSSL_PSTRING_dup
sk_OPENSSL_PSTRING_find
sk_OPENSSL_PSTRING_find_all
sk_OPENSSL_PSTRING_find_ex
sk_OPENSSL_PSTRING_free
sk_OPENSSL_PSTRING_insert
sk_OPENSSL_PSTRING_is_sorted
sk_OPENSSL_PSTRING_new
sk_OPENSSL_PSTRING_new_null
sk_OPENSSL_PSTRING_new_reserve
sk_OPENSSL_PSTRING_num
sk_OPENSSL_PSTRING_pop
sk_OPENSSL_PSTRING_pop_free
sk_OPENSSL_PSTRING_push
sk_OPENSSL_PSTRING_reserve
sk_OPENSSL_PSTRING_set
sk_OPENSSL_PSTRING_set_cmp_func
sk_OPENSSL_PSTRING_shift
sk_OPENSSL_PSTRING_sort
sk_OPENSSL_PSTRING_unshift
sk_OPENSSL_PSTRING_value
sk_OPENSSL_PSTRING_zero
v2i_ASN1_BIT_STRING	Build an ASN.1 BIT STRING from named bit configuration values.
v2i_GENERAL_NAME	Parse a single configuration name/value into a GENERAL_NAME.
v2i_GENERAL_NAMES	Parse configuration name/value pairs into a GeneralNames set.
v2i_GENERAL_NAME_ex	Parse a configuration name/value into a GENERAL_NAME, optionally reusing out.

Variables

Name	Description
_openssl_os_toascii	256-byte table mapping EBCDIC code points to ASCII (exported as _openssl_os_toascii).
_openssl_os_toebcdic	256-byte table mapping ASCII code points to EBCDIC (exported as _openssl_os_toebcdic).

Macros

Name	Description
EC_PKEY_NO_PARAMETERS	Encoding flag: omit domain parameters when encoding an EC key.
EC_PKEY_NO_PUBKEY	Encoding flag: omit the public key when encoding an EC key.
EVP_PKEY_CTRL_TLS_MD	EVP_PKEY ctrl: select the digest used by the TLS PRF KDF.
OPENSSL_SYS_UNIX	Detect operating systems. This probably needs completing. The result is that at least one OPENSSL_SYS_os macro should be defined. However, if none is defined, Unix is assumed.
OSSL_DYNAMIC_VERSION	Version of the dynamic ENGINE ABI expected by this OpenSSL build.
RSA_FLAG_FIPS_METHOD	RSA_METHOD flag marking the method as FIPS-validated and usable in FIPS mode.
X509_REQ_extract_key	Compatibility alias for X509_REQ_get_pubkey().
X509_extract_key	Compatibility alias for X509_get_pubkey().