openssl/providers/implementations/keymgmt
Daniel Van Geest d0899abb1b Implement KEMRecipientInfo (RFC9629) in CMS
Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber).

Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt`
to allow the user to specify the KDF algorithm and optional user
keying material for each recipient.

A provider may indicate which RecipientInfo type is supported
for a key, otherwise CMS will try to figure it out itself. A
provider may also indicate which KDF to use in KEMRecipientInfo
if the user hasn't specified one.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27681)
2025-07-30 11:39:04 +02:00
..
build.info Implement KEMRecipientInfo (RFC9629) in CMS 2025-07-30 11:39:04 +02:00
dh_kmgmt.c providers: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
dsa_kmgmt.c providers: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
ec_kmgmt.c ec: add security category support 2025-05-27 18:01:44 +10:00
ec_kmgmt_imexport.inc Fix copyrights 2022-02-03 13:56:38 +01:00
ecx_kmgmt.c ECX/ED keymanager param getter fixes. 2025-07-22 21:08:26 +10:00
kdf_legacy_kmgmt.c Copyright year updates 2023-09-07 09:59:15 +01:00
lms_kmgmt.c LMS code review fixups 2025-07-10 19:04:37 +10:00
mac_legacy_kmgmt.c Allow our *_gen_cleanup functions to tolerate a NULL ctx 2025-06-12 12:01:42 +01:00
ml_dsa_kmgmt.c.in providers: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
ml_kem_kmgmt.c.in Implement KEMRecipientInfo (RFC9629) in CMS 2025-07-30 11:39:04 +02:00
mlx_kmgmt.c.in providers: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
rsa_kmgmt.c rsa: add security category support 2025-05-27 18:01:44 +10:00
slh_dsa_kmgmt.c providers: Silence warnings on Win64 builds 2025-07-02 17:26:26 +02:00
template_kmgmt.c Allow our *_gen_cleanup functions to tolerate a NULL ctx 2025-06-12 12:01:42 +01:00