RSA_public_decrypt is equivalent to a verify recover operation

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
(Merged from https://github.com/openssl/openssl/pull/16068)
diff --git a/doc/man3/RSA_private_encrypt.pod b/doc/man3/RSA_private_encrypt.pod
index 4b97d87..1c89b58 100644
--- a/doc/man3/RSA_private_encrypt.pod
+++ b/doc/man3/RSA_private_encrypt.pod
@@ -22,8 +22,8 @@
 
 Both of the functions described on this page are deprecated.
 Applications should instead use L<EVP_PKEY_sign_init_ex(3)>,
-L<EVP_PKEY_sign(3)>, L<EVP_PKEY_verify_init_ex(3)> and
-L<EVP_PKEY_verify(3)>.
+L<EVP_PKEY_sign(3)>, L<EVP_PKEY_verify_recover_init(3)>, and
+L<EVP_PKEY_verify_recover(3)>.
 
 These functions handle RSA signatures at a low-level.
 
@@ -69,7 +69,8 @@
 =head1 SEE ALSO
 
 L<ERR_get_error(3)>,
-L<RSA_sign(3)>, L<RSA_verify(3)>
+L<RSA_sign(3)>, L<RSA_verify(3)>,
+L<EVP_PKEY_sign(3)>, L<EVP_PKEY_verify_recover(3)>
 
 =head1 HISTORY
 
diff --git a/doc/man7/migration_guide.pod b/doc/man7/migration_guide.pod
index 9a9d940..aac1587 100644
--- a/doc/man7/migration_guide.pod
+++ b/doc/man7/migration_guide.pod
@@ -2025,8 +2025,8 @@
 
 RSA_private_encrypt(), RSA_public_decrypt()
 
-This is equivalent to doing sign and verify operations (with a padding mode
-of none). See L</Deprecated low-level signing functions>.
+This is equivalent to doing sign and verify recover operations (with a padding
+mode of none). See L</Deprecated low-level signing functions>.
 
 =item -