1271 Commits

Author	SHA1	Message	Date
Pauli	178edb5d3b	Merge 8cc004ab3a into d0899abb1b	2025-07-30 22:11:27 +08:00
Daniel Van Geest	d0899abb1b	Implement KEMRecipientInfo (RFC9629) in CMS ... Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber). Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt` to allow the user to specify the KDF algorithm and optional user keying material for each recipient. A provider may indicate which RecipientInfo type is supported for a key, otherwise CMS will try to figure it out itself. A provider may also indicate which KDF to use in KEMRecipientInfo if the user hasn't specified one. Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27681)	2025-07-30 11:39:04 +02:00
Pauli	083a6b73ec	digest: add security strength category inforamtion to all provided digests	2025-07-29 07:57:48 +10:00
Pauli	471ef66148	digest: security category infrastructure	2025-07-29 07:57:48 +10:00
Pauli	8e2d4a0b69	digest: convert common code to use TRIE param decoding	2025-07-29 07:57:48 +10:00
Pauli	1d48b72206	cipher: add OSSL_CIPHER_PARAM_ENCRYPT_THEN_MAC parameter	2025-07-29 07:57:48 +10:00
Pauli	940f528dfe	ciphers: add security strength category information to provided ciphers ... Some of the values for legacy ciphers might seem weird since they are one rather than the more expected zero: * IDEA * SEED Both meet the 128 bit strength requirement for category 1.	2025-07-29 07:57:48 +10:00
Alen Yan	bd172dd0e1	fix SM2 privatekey decode(PEM format, ECPrivateKey). ... Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27963)	2025-07-25 09:51:00 +02:00
slontis	bde55d421b	ECX/ED keymanager param getter fixes. ... Fixes #28034 ECX and ED were sharing the same code for the getter, whilst also maintaining seperate gettable tables. The code has been reworked so that common code is shared, and algorithm specific code is seperated out to make this clearer. This fixes: (1) The security category not being in the gettable table for ED (2) The fips indicator for ED. i.e There is no fips indicator for ED (previously there was no gettable, but the get() still tried to return unapproved). Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28039)	2025-07-22 21:08:26 +10:00
lanming	5d0c6c52e7	Raise PROV_R_NULL_OUTPUT_BUFFER if shsec is NULL in ml_kem_encapsulate() ... Signed-off-by: lanming <lanming@huawei.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/28009)	2025-07-22 11:28:35 +10:00
Stanciu, Adrian	055dd1d8bb	Add AES-CFB128 optimizations with Intel AVX-512 and VAES ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/26902)	2025-07-17 16:29:57 -04:00
Adrian Stanciu	886396462d	Extract AES CFB implementation to cipher_aes_cfb* ... Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Shane Lontis <shane.lontis@oracle.com> (Merged from https://github.com/openssl/openssl/pull/26902)	2025-07-17 16:29:57 -04:00
Norbert Pocs	af2aaf3271	Deprecate ASN1_METH internal usage ... Some of them are needed and were kept by adding `#include "internal/deprecated"` and some had to be turned off. Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27727)	2025-07-17 11:25:18 -04:00
Norbert Pocs	704a2108ab	providers/implementations/digests/sha3_prov.c optimize ossl_(un)likely ... Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27961)	2025-07-16 13:07:15 -04:00
slontis	43f4da917a	LMS Coverity fix 1659009 ... Fix deref after free. If ctx->key is already set and the passed in key is NULL then ctx->key should not be set to NULL. Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/28030)	2025-07-15 07:53:24 -04:00
slontis	6b5fd48ee4	LMS code review fixups ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:04:37 +10:00
slontis	e6c8110483	Add LMS evp_test using NIST ACVP test data. ... This covers all LMS algorithm parameter sets. The following changes were done to handle the tests: (1) Changed LMS to use OSSL_PKEY_PARAM_PUB_KEY instead of OSSL_PKEY_PARAM_ENCODED_PUBLIC_KEY for import/export. (There is no reason to have the encoded form for verify operations). (2) Fixed a bug for W=1 with truncated digests. The checksum was using a value of 8-w, which was off by 1 for this case. A value was added to the ots parameters that represents this value. (3) A check in evp_test for a NID was removed since LMS does not have OIDS (HSS does). (4) the unused PROPERTIES param was removed from the LMS keymanager. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:04:37 +10:00
slontis	48af66aef7	Add LMS to the fips provider. ... This required the LMS keymanager to have an export function. The self test will be provided by HSS, which covers the LMS case. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:03:46 +10:00
slontis	1c2fc7c3e0	Allow SHA256-192 to be used internally in the FIPS provider. ... Created an internal digest table that contains sha256_192. Also moved the KECCAK_KMAC_128/256 entries to this internal table since it is only used by KMAC. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:03:46 +10:00
slontis	7be3137fb5	Add LMS Signature verification. ... Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:03:46 +10:00
slontis	c64558ede8	Add LMS public key decoder. ... This uses OSSL_DECODER_CTX_new_for_pkey(). "XDR" can be specified for the input type, and the key type is "LMS" Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:03:46 +10:00
slontis	2a6a2adc8d	Add base code to load a LMS public key. ... This loads a XDR encoded LMS public key. It adds a simple LMS keymanager to import this key. Reviewed-by: Viktor Dukhovni <viktor@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27885)	2025-07-10 19:03:46 +10:00
Daniel Van Geest	c6a1d8ea74	HKDF updates ... - prevent fixed-digest HKDF from having its digest changed - implement gettable params in HKDF - update fixed-digest HKDF tests Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27247)	2025-07-10 11:14:19 +10:00
Daniel Van Geest	d1a8d5a833	Add HKDF algorithms with fixed digests. ... Add HKDF-SHA256, HKDF-SHA384 and HKDF-SHA512 which are versions of HKDF that have the digest pre-set. The digest cannot be changed for contexts of these types. RFC 8619 defines algorithm identifiers for these combinations. These algorithm identifiers will be used in future features, e.g. KEMRecipientInfo. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27247)	2025-07-10 11:13:21 +10:00
Norbert Pocs	162089af7c	Address coverity issue 1655295 ... Fixes: https://github.com/openssl/project/issues/1267 Signed-off-by: Norbert Pocs <norbertp@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27989)	2025-07-09 15:20:55 -04:00
Daniel Frink	815dde3e20	Use secure memory allocation for ML-KEM and ML-DSA private key storage areas ... Resolves: #27603 Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Viktor Dukhovni <viktor@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27625)	2025-07-07 15:40:47 +02:00
Tomas Mraz	6f9683d651	providers: Silence warnings on Win64 builds ... Reviewed-by: Saša Nedvědický <sashan@openssl.org> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27806)	2025-07-02 17:26:26 +02:00
Pauli	2e1b046d9a	eddsa: convert to using struct based TRIE decoder for params processing ... Also return correct param list for the variant settables. Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27859)	2025-06-25 17:22:07 +10:00
Pauli	da5fec0797	rename eddsa_sig.c for autogeneration ... Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27859)	2025-06-25 17:22:07 +10:00
Pauli	7cd75929f1	eddsa: remove impossible parameters from gettable array ... Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27859)	2025-06-25 17:22:07 +10:00
Pauli	07399c2566	digest: convert algorithm gettable parameters to use struct based TRIE decoding ... Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27859)	2025-06-25 17:22:07 +10:00
Pauli	cf13e66522	mlx: use TRIE & struct based param decoding ... Also fix two bugs with the properties parameter to the set_params call: - the parameter wasn't listed in the settables table - the parameter was ignored unless there was a public key present Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27859)	2025-06-25 17:22:07 +10:00
Pauli	587134913b	rename mlx_kmgmt.c to mlx_kmgmt.c.in ... Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27859)	2025-06-25 17:22:07 +10:00
Pauli	3bb06ce798	ml-dsa: use TRIE & struct based param name decoders ... Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27859)	2025-06-25 17:22:07 +10:00
Pauli	0ef373bd34	rename ml_dsa_sig.c to ml_dsa_sig.c.in ... Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27859)	2025-06-25 17:22:07 +10:00
Pauli	d09a7cad9a	cipher: use table based param decoding for ciphers ... Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27859)	2025-06-25 17:22:07 +10:00
Pauli	f9865ab9ee	cipher: declare common OSSL_PARAM structures and helper functions ... Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27859)	2025-06-25 17:22:07 +10:00
Pauli	2d226c389c	3des: remove redundant OSSL_PARAMs from settable list ... Reviewed-by: Richard Levitte <levitte@openssl.org> Reviewed-by: Tomas Mraz <tomas@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27859)	2025-06-25 17:22:07 +10:00
Pauli	effba0ee65	change _ettable to _list ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27847)	2025-06-20 08:39:29 +10:00
Pauli	b0dcb391d2	ciphercommon: rework to support improved parameter handling ... Remove obsolete and incorrect AEAD cipher parameters. Also convert the gettable params to use the new handling. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27847)	2025-06-20 08:39:29 +10:00
Pauli	e20800d744	chacha20: update to use improved parameter handling ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27847)	2025-06-20 08:39:29 +10:00
Pauli	dce3a00be6	gcm: update to use improved parameter handling ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27847)	2025-06-20 08:39:29 +10:00
Pauli	e40d575206	ccm: update to use improved parameter handling ... Also address a problem where more parameters are claimed to be supported than actually are. Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27847)	2025-06-20 08:39:29 +10:00
Pauli	fa92dd9427	prov: rework cipher include files to support improved parameter handling ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27847)	2025-06-20 08:39:29 +10:00
Pauli	61d20724a6	ml-dsa: update to use improved parameter handling ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27847)	2025-06-20 08:39:29 +10:00
Pauli	4fc06921b7	ml-kem: update to use improved parameter handling ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27847)	2025-06-20 08:39:29 +10:00
Pauli	7479453962	rename CCM and GCM mode common code files ... Reviewed-by: Shane Lontis <shane.lontis@oracle.com> Reviewed-by: Richard Levitte <levitte@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27847)	2025-06-20 08:39:17 +10:00
Bartel Artem	443298e0f0	return NULL if gctx allocation fails. ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27795)	2025-06-12 08:33:31 -04:00
Bartel Artem	02f9c9342d	check gctx for NULL before cleanup. ... Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Paul Yang <kaishen.yy@antfin.com> Reviewed-by: Neil Horman <nhorman@openssl.org> (Merged from https://github.com/openssl/openssl/pull/27795)	2025-06-12 08:33:31 -04:00
Matt Caswell	fcc5df5369	Allow our *_gen_cleanup functions to tolerate a NULL ctx ... Our *_gen_cleanup functions are essentially "free" functions. Our free functions tolerate NULL being passed. We are being inconsistent with our *_gen_cleanup functions. Some of them tolerate NULL and others do not. We should consistently tolerate NULL. See also #27795 Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Tim Hudson <tjh@openssl.org> Reviewed-by: Paul Dale <ppzgs1@gmail.com> (Merged from https://github.com/openssl/openssl/pull/27807)	2025-06-12 12:01:42 +01:00