anchor.diff:  		       Options, pubkey_crl:init_revokation_state()).
   
   %--------------------------------------------------------------------
  --spec pkix_verify_hostname(#'OTPCertificate'{} | binary(),
  -			   referenceIDs()
  -                          ) -> boolean().
  -
  --spec pkix_verify_hostname(#'OTPCertificate'{} | binary(),
  -			   referenceIDs(),
  -			   proplists:proplist()) -> boolean().
  -
   -type referenceIDs() :: [referenceID()] .
   -type referenceID() :: {uri_id | dns_id | ip | srv_id | oid(),  string()} 
                        | {ip, inet:ip_address()} .
  -
  --spec pkix_verify_hostname_match_fun(high_level_alg()) -> match_fun() .
   
   -type high_level_alg() :: https .
   -type match_fun() ::  fun((ReferenceID::referenceID() | string(),
  
positive.code:     crypto:private_encrypt(rsa, PlainText, format_rsa_private_key(Key), Padding).
  
  %%--------------------------------------------------------------------
  dh_gex_group_sizes() ->
      pubkey_ssh:dh_gex_group_sizes().
  
  dh_gex_group(Min, N, Max, Groups) ->
      pubkey_ssh:dh_gex_group(Min, N, Max, Groups).
  
  %%--------------------------------------------------------------------
  -spec generate_key(#'DHParameter'{}) ->
                            {Public::binary(), Private::binary()};
                    (ecpk_parameters_api()) ->
                            #'ECPrivateKey'{};
                    ({rsa, Size::pos_integer(), PubExp::pos_integer()}) ->
                            #'RSAPrivateKey'{}.
  
  %% Description: Generates a new keypair
  %%--------------------------------------------------------------------
  generate_key(#'DHParameter'{prime = P, base = G}) ->
      crypto:generate_key(dh, [P, G]);
  generate_key({namedCurve, _} = Params) ->
  
negative.code: 				    PublicKey, PublicKeyParams).
  
  %%--------------------------------------------------------------------
  -spec pkix_is_issuer(Cert, IssuerCert) -> 
                              boolean() when Cert :: der_encoded()
                                                   | #'OTPCertificate'{}
                                                   | #'CertificateList'{},
                                             IssuerCert :: der_encoded()
                                                         | #'OTPCertificate'{} .
  %%
  %% Description: Checks if <IssuerCert> issued <Cert>.
  %%--------------------------------------------------------------------
  