OpenSSL 3.x backend missing rsa_keygen_prime callback — RSA KeyGen KAT (FIPS186-5) not supported

[ankurmehta94-rgb]

Version: acvp-parser v2.1.8.
Library: OpenSSL: 3.0.x
ACVP vector revision: FIPS186-5 (RSA KeyGen)

Backend file: backends/backend_openssl3.c
Problem:
The OpenSSL 3.x backend has rsa_keygen_prime and rsa_keygen_prov_prime set to NULL:
static struct rsa_backend openssl_rsa = {
  openssl_rsa_keygen,   // rsa_keygen ✅
  openssl_rsa_siggen,   // rsa_siggen ✅
  openssl_rsa_sigver,   // rsa_sigver ✅
  NULL,          // rsa_keygen_prime ❌ NOT IMPLEMENTED
  NULL,          // rsa_keygen_prov_prime ❌ NOT IMPLEMENTED
  ...
};
When processing FIPS186-5 RSA KeyGen vectors with testType: "KAT", the parser receives e, p, q and must compute n and d. Since the callback is NULL, all KAT test groups fail with "No callback defined".

[smuellerDD]

Am Samstag, 18. April 2026, 10:38:05 Mitteleuropäische Sommerzeit schrieb ankurmehta94-rgb: Hi ankurmehta94-rgb,

When processing FIPS186-5 RSA KeyGen vectors with testType: "KAT", the parser receives e, p, q and must compute n and d. Since the callback is NULL, all KAT test groups fail with "No callback defined".

Then you obtained the wrong test vectors. Ciao Stephan