openssl/doc/man1
Daniel Van Geest d0899abb1b Implement KEMRecipientInfo (RFC9629) in CMS
Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber).

Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt`
to allow the user to specify the KDF algorithm and optional user
keying material for each recipient.

A provider may indicate which RecipientInfo type is supported
for a key, otherwise CMS will try to figure it out itself. A
provider may also indicate which KDF to use in KEMRecipientInfo
if the user hasn't specified one.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27681)
2025-07-30 11:39:04 +02:00
..
CA.pl.pod Removed duplicates in some man pages 2025-03-26 15:33:20 +01:00
build.info configutl documentation 2025-05-08 11:05:42 +10:00
openssl-asn1parse.pod.in Copyright year updates 2023-09-07 09:59:15 +01:00
openssl-ca.pod.in DOC: update references to obsolete RFC 2459 (updated by RFC 5280 and DSA parts taken over by RFC 3370) 2025-06-03 07:27:57 +02:00
openssl-ciphers.pod.in Removed duplicates in some man pages 2025-03-26 15:33:20 +01:00
openssl-cmds.pod.in openssl-cmds.pod.in: add missing entry for cmp 2022-07-06 08:19:58 +01:00
openssl-cmp.pod.in Copyright year updates 2025-03-12 13:35:59 +00:00
openssl-cms.pod.in Implement KEMRecipientInfo (RFC9629) in CMS 2025-07-30 11:39:04 +02:00
openssl-configutl.pod.in configutl documentation 2025-05-08 11:05:42 +10:00
openssl-crl.pod.in Copyright year updates 2024-04-09 13:43:27 +02:00
openssl-crl2pkcs7.pod.in Update copyright year 2021-01-28 13:54:57 +01:00
openssl-dgst.pod.in Copyright year updates 2025-03-12 13:35:59 +00:00
openssl-dhparam.pod.in APPS/dhparam: fix case where infile and outfile are the same 2024-10-04 12:09:33 +02:00
openssl-dsa.pod.in Copyright year updates 2023-09-07 09:59:15 +01:00
openssl-dsaparam.pod.in DOC: update references to obsolete RFC 2459 (updated by RFC 5280 and DSA parts taken over by RFC 3370) 2025-06-03 07:27:57 +02:00
openssl-ec.pod.in Copyright year updates 2023-09-07 09:59:15 +01:00
openssl-ecparam.pod.in APPS/{ecparam,pkeyparam}: fix case where infile and outfile are the same 2024-10-04 12:09:33 +02:00
openssl-enc.pod.in Copyright year updates 2025-03-12 13:35:59 +00:00
openssl-engine.pod.in engine: document the engine app as deprecated 2020-07-16 09:12:26 +02:00
openssl-errstr.pod.in Update copyright year 2020-04-23 13:55:52 +01:00
openssl-fipsinstall.pod.in Update FIPS provider doc to match the current code. 2025-07-01 20:47:08 +02:00
openssl-format-options.pod Update copyright year 2021-05-06 13:03:23 +01:00
openssl-gendsa.pod.in Copyright year updates 2023-09-07 09:59:15 +01:00
openssl-genpkey.pod.in Improve documentation for -cipher option in openssl genpkey 2025-04-29 14:18:57 +02:00
openssl-genrsa.pod.in Copyright year updates 2023-09-07 09:59:15 +01:00
openssl-info.pod.in openssl-info.pod.in: Add windowscontext option to synopsis in doc 2024-10-16 20:00:19 +02:00
openssl-kdf.pod.in Copyright year updates 2023-09-07 09:59:15 +01:00
openssl-list.pod.in Copyright year updates 2025-03-12 13:35:59 +00:00
openssl-mac.pod.in Copyright year updates 2024-04-09 13:43:26 +02:00
openssl-namedisplay-options.pod Copyright year updates 2025-03-12 13:35:59 +00:00
openssl-nseq.pod.in Update copyright year 2020-04-23 13:55:52 +01:00
openssl-ocsp.pod.in APPS/ocsp: fix case where reqin and outfile are the same 2024-10-04 12:09:33 +02:00
openssl-passphrase-options.pod Improve clarity and readability of password input documentation 2024-07-18 19:03:13 +02:00
openssl-passwd.pod.in DOCS: Update the page for 'openssl passwd' to not duplicate some info 2021-09-08 16:26:55 +02:00
openssl-pkcs7.pod.in Update copyright year 2022-05-03 13:34:51 +01:00
openssl-pkcs8.pod.in APPS/pkcs8: fix case where infile and outfile are the same 2024-10-04 12:09:33 +02:00
openssl-pkcs12.pod.in pkcs12: increase macsaltlen from 8 to 16 as per NIST SP 800-132 2025-05-05 16:15:24 +02:00
openssl-pkey.pod.in APPS/pkey: fix case where infile and outfile are the same 2024-10-04 12:09:33 +02:00
openssl-pkeyparam.pod.in APPS/{ecparam,pkeyparam}: fix case where infile and outfile are the same 2024-10-04 12:09:33 +02:00
openssl-pkeyutl.pod.in Update pkeyutl documentation for PQC algorithms (Fixes #27415) 2025-06-20 15:48:42 +01:00
openssl-prime.pod.in Add -in option to prime function to allow input from file for primality testing. Update -hex option documentation to reflect use with input and output. 2025-04-29 14:17:06 +10:00
openssl-rand.pod.in Fix typos found by codespell in man pages 2023-12-29 10:13:01 +01:00
openssl-rehash.pod.in doc/man1/openssl-rehash.pod.in: document PATH environment variable 2025-07-29 13:12:11 -04:00
openssl-req.pod.in DOC: update references to obsolete RFC 2459 (updated by RFC 5280 and DSA parts taken over by RFC 3370) 2025-06-03 07:27:57 +02:00
openssl-rsa.pod.in Copyright year updates 2023-09-07 09:59:15 +01:00
openssl-rsautl.pod.in Copyright year updates 2023-09-07 09:59:15 +01:00
openssl-s_client.pod.in Add support for TLS 1.3 OCSP multi-stapling for server certs 2025-07-25 17:24:37 +02:00
openssl-s_server.pod.in Add support for TLS 1.3 OCSP multi-stapling for server certs 2025-07-25 17:24:37 +02:00
openssl-s_time.pod.in Document SSL_CIPHER environment variable 2025-07-29 13:12:10 -04:00
openssl-sess_id.pod.in openssl.pod: Fix openSSL options doc 2020-12-13 12:47:14 +01:00
openssl-skeyutl.pod.in skeyutl command line utility 2025-02-15 18:51:31 +01:00
openssl-smime.pod.in Removed duplicates in some man pages 2025-03-26 15:33:20 +01:00
openssl-speed.pod.in Copyright year updates 2024-09-05 09:35:49 +02:00
openssl-spkac.pod.in spkac: document -digest option 2021-06-15 18:26:34 +10:00
openssl-srp.pod.in DOC: Fix nits found by new check on SYNOPSIS and OPTIONS consistency 2021-05-20 16:24:43 +02:00
openssl-storeutl.pod.in APPS/storeutl: fix case where uri and outfile are the same 2024-10-09 11:10:19 +02:00
openssl-ts.pod.in Removed duplicates in some man pages 2025-03-26 15:33:20 +01:00
openssl-verification-options.pod doc: fix misspellings of certificate(s) 2025-06-05 20:05:30 +10:00
openssl-verify.pod.in Improve the documentation of cert path building and validation 2021-06-08 07:47:41 +02:00
openssl-version.pod.in Copyright year updates 2024-09-05 09:35:49 +02:00
openssl-x509.pod.in APPS/x509: add -multi option for outputting all certs found in input 2025-05-14 12:51:42 +02:00
openssl.pod Removed duplicates in some man pages 2025-03-26 15:33:20 +01:00
tsget.pod Update copyright year 2020-04-23 13:55:52 +01:00