We have identified logic to potentially hook more than one function: RSA_public_decrypt - The primary hook, which is already well known at this point. EVP_PKEY_set1_RSA - Another hook which will be used if the primary one doesn’t exist. RSA_get0_key - Another hook which will be used if the primary one doesn’t exist.