openssl/doc/man7
Viktor Dukhovni bcff020c36 Refactor sigalg handling
- The default sigalg list now puts ML-DSA-65 first, then ML-DSA-87
  and then ML-DSA-44.  (87 vs. 44 Subject to bikeshedding).

- The mintls and maxtls versions are now taken into account for
  both built-in and provided algorithms.

- Some algorithms have a separate TLSv1.2-specific name for future
  reporting via openssl-list(1).

- ML-DSA aside, any new provided algorithms go at the end of the
  default list (backwards-compatible inclusion).

- The built-in algorithms now also have min/max DTLS versions.
  Though the provider TLS-SIGALG capability was extended to also report
  the DTLS version range, the minimum supported DTLS is 1.3, which we
  don't yet have, so it is not yet possible to add DTLS sigalgs via a
  provider

- The TLS 1.3 brainpool sigalgs got their correct IANA names, with
  the legacy names as purported TLS 1.2 alternatives, but since
  these are for TLS 1.3 and up those names are for matching only,
  the reported value will still be the 1.3 name.

Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26975)
2025-03-09 23:19:37 +01:00
..
img Add EVP_DigestSqueeze() API. 2023-11-10 13:27:00 +01:00
EVP_ASYM_CIPHER-RSA.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_ASYM_CIPHER-SM2.pod Document the provider side SM2 Asymmetric Cipher support 2020-09-25 11:13:54 +01:00
EVP_CIPHER-AES.pod AES: Document that the XTS, SIV, WRAP modes do not support streaming 2023-12-22 13:42:28 +01:00
EVP_CIPHER-ARIA.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-BLOWFISH.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-CAMELLIA.pod Add support for camellia cbc cts mode 2021-08-18 08:38:40 +10:00
EVP_CIPHER-CAST.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-CHACHA.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-DES.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_CIPHER-IDEA.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-NULL.pod Add documentation for "NULL" cipher and digest algorithms. 2023-02-28 14:26:33 +11:00
EVP_CIPHER-RC2.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-RC4.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-RC5.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-SEED.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-SM4.pod SM4: Document that the XTS mode does not support streaming 2023-12-22 13:42:28 +01:00
EVP_KDF-ARGON2.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_KDF-HKDF.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-HMAC-DRBG.pod Copyright year updates 2023-09-07 09:59:15 +01:00
EVP_KDF-KB.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-KRB5KDF.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-PBKDF1.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-PBKDF2.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-PKCS12KDF.pod Copyright year updates 2023-09-28 14:23:29 +01:00
EVP_KDF-PVKKDF.pod Fix version mistake in some HISTORY sections 2022-11-23 08:23:17 +01:00
EVP_KDF-SCRYPT.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-SS.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-SSHKDF.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-TLS1_PRF.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-TLS13_KDF.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-X942-ASN1.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-X942-CONCAT.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-X963.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KEM-EC.pod Make the KEM operating mode optional 2025-02-25 10:58:23 +01:00
EVP_KEM-ML-KEM.pod doc: Fix type of OSSL_KEM_PARAM_IKME for ML-KEM 2025-03-04 14:06:32 +01:00
EVP_KEM-RSA.pod Make the KEM operating mode optional 2025-02-25 10:58:23 +01:00
EVP_KEM-X25519.pod Make the KEM operating mode optional 2025-02-25 10:58:23 +01:00
EVP_KEYEXCH-DH.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_KEYEXCH-ECDH.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_KEYEXCH-X25519.pod Add FIPS indicators to X25519 and X448. 2024-08-25 10:50:05 +10:00
EVP_MAC-BLAKE2.pod doc: fix description of mac "block-size" parameter 2023-11-22 10:51:10 +01:00
EVP_MAC-CMAC.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_MAC-GMAC.pod Update copyright year 2021-03-11 13:27:36 +00:00
EVP_MAC-HMAC.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_MAC-KMAC.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_MAC-Poly1305.pod mac: improve MAC documentation (Poly 1305 key reuse, nomenclature) 2021-05-14 22:24:00 +10:00
EVP_MAC-Siphash.pod Update copyright year 2021-03-11 13:27:36 +00:00
EVP_MD-BLAKE2.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_MD-KECCAK.pod Add default provider support for Keccak 224, 256, 384 and 512 2021-09-23 12:07:57 +10:00
EVP_MD-MD2.pod
EVP_MD-MD4.pod
EVP_MD-MD5-SHA1.pod
EVP_MD-MD5.pod
EVP_MD-MDC2.pod Update copyright year 2021-02-18 15:05:17 +00:00
EVP_MD-NULL.pod Add documentation for "NULL" cipher and digest algorithms. 2023-02-28 14:26:33 +11:00
EVP_MD-RIPEMD160.pod ripemd: document as being present in the default provider 2022-10-19 13:21:01 +02:00
EVP_MD-SHA1.pod
EVP_MD-SHA2.pod Copyright year updates 2023-09-07 09:59:15 +01:00
EVP_MD-SHA3.pod
EVP_MD-SHAKE.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_MD-SM3.pod
EVP_MD-WHIRLPOOL.pod
EVP_MD-common.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_PKEY-DH.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_PKEY-DSA.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_PKEY-EC.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_PKEY-FFC.pod Add documentation for key validation that indicates the difference between the 2022-05-09 10:07:42 +10:00
EVP_PKEY-HMAC.pod Update the EVP_PKEY MAC documentation 2020-09-03 09:40:52 +01:00
EVP_PKEY-ML-DSA.pod Fix docs/comments with ASN.1 private key syntax 2025-02-14 10:46:04 +01:00
EVP_PKEY-ML-KEM.pod Configurable import-time PCT for ML-KEM 2025-02-20 18:21:40 +11:00
EVP_PKEY-RSA.pod Copyright year updates 2024-04-09 13:43:26 +02:00
EVP_PKEY-SLH-DSA.pod SLH-DSA Update private key getter to also return public components. 2025-02-22 21:25:03 +11:00
EVP_PKEY-SM2.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_PKEY-X25519.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_RAND-CRNG-TEST.pod doc: fix typo in CRNG test documentation. 2024-09-30 17:57:18 +10:00
EVP_RAND-CTR-DRBG.pod Add documentation to explain DRBG changes 2025-02-11 21:50:53 +01:00
EVP_RAND-HASH-DRBG.pod Add documentation to explain DRBG changes 2025-02-11 21:50:53 +01:00
EVP_RAND-HMAC-DRBG.pod Add documentation to explain DRBG changes 2025-02-11 21:50:53 +01:00
EVP_RAND-JITTER.pod doc: add note about fips jitter option 2024-10-09 13:53:10 +11:00
EVP_RAND-SEED-SRC.pod Fix EVP_RAND-SEED-SRC documentation example 2023-11-30 12:33:17 +01:00
EVP_RAND-TEST-RAND.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_RAND.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_SIGNATURE-DSA.pod document the format of DSA signature 2024-09-23 22:37:03 +02:00
EVP_SIGNATURE-ECDSA.pod docs: Document the implemented composite signature+hash algorithms 2024-09-12 15:20:23 +02:00
EVP_SIGNATURE-ED25519.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_SIGNATURE-HMAC.pod Update the EVP_PKEY MAC documentation 2020-09-03 09:40:52 +01:00
EVP_SIGNATURE-ML-DSA.pod Add an initial ML-DSA fuzzer 2025-02-15 11:13:38 -05:00
EVP_SIGNATURE-RSA.pod docs: Document the implemented composite signature+hash algorithms 2024-09-12 15:20:23 +02:00
EVP_SIGNATURE-SLH-DSA.pod SLH_DSA: Add support for generating X509 certs via the openssl 2025-02-18 10:17:29 +01:00
OSSL_PROVIDER-FIPS.pod doc: fixup FIPS self test names 2025-02-22 17:31:43 +11:00
OSSL_PROVIDER-base.pod Add SLH-DSA encoder/decoder support. 2025-02-18 10:17:29 +01:00
OSSL_PROVIDER-default.pod Add SLH-DSA encoder/decoder support. 2025-02-18 10:17:29 +01:00
OSSL_PROVIDER-legacy.pod Update the provider documentation 2023-11-22 10:43:37 +01:00
OSSL_PROVIDER-null.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
OSSL_STORE-winstore.pod OSSL_STORE: Add reference docs for the built-in Windows store implementation 2024-04-19 14:20:58 +02:00
RAND.pod document provider random bypass ability 2025-02-05 07:20:22 +11:00
RSA-PSS.pod
X25519.pod
bio.pod Change all references to OpenSSL 3.1 to OpenSSL 3.2 in the master branch 2022-10-07 10:05:50 +02:00
ct.pod
des_modes.pod
evp.pod Copyright year updates 2024-09-05 09:35:49 +02:00
fips_module.pod doc: remove ML-KEM line because it doesn't have an indicator associated with it 2025-02-14 10:50:58 +01:00
life_cycle-cipher.pod doc: remove end of line whitespace 2021-09-22 16:22:50 +10:00
life_cycle-digest.pod Add EVP_DigestSqueeze() API. 2023-11-10 13:27:00 +01:00
life_cycle-kdf.pod doc: remove end of line whitespace 2021-09-22 16:22:50 +10:00
life_cycle-mac.pod doc: remove end of line whitespace 2021-09-22 16:22:50 +10:00
life_cycle-pkey.pod Update copyright year 2022-05-03 13:34:51 +01:00
life_cycle-rand.pod doc: remove end of line whitespace 2021-09-22 16:22:50 +10:00
openssl-core.h.pod Move the description of the core types into their own pages 2022-12-08 07:32:34 +01:00
openssl-core_dispatch.h.pod
openssl-core_names.h.pod
openssl-env.pod updating docs to reflect security risks for SSLKEYLOGFILE 2024-10-21 11:34:35 +01:00
openssl-glossary.pod Update copyright year 2022-05-03 13:34:51 +01:00
openssl-qlog.pod Enable qlog support by default 2024-03-06 20:44:48 +00:00
openssl-quic-concurrency.pod Update QUIC related man7 pages for the added server functionality 2025-02-17 11:27:33 -05:00
openssl-quic.pod Update QUIC related man7 pages for the added server functionality 2025-02-17 11:27:33 -05:00
openssl-threads.pod doc: add note to indicate that the OBJ_ functions were not thread safe in 3.0 2021-09-25 10:39:20 +10:00
openssl_user_macros.pod.in Update copyright year 2021-07-29 15:41:35 +01:00
ossl-guide-introduction.pod Add a guide for demo QUIC non-blocking server 2025-02-17 11:27:33 -05:00
ossl-guide-libcrypto-introduction.pod Copyright year updates 2024-04-09 13:43:26 +02:00
ossl-guide-libraries-introduction.pod Fix new typos found by codespell 2023-09-18 09:04:22 +10:00
ossl-guide-libssl-introduction.pod Incorporate the ssl man page into the OpenSSL guide 2023-08-08 18:42:41 +02:00
ossl-guide-migration.pod Left over doc TODOs 2025-02-14 10:50:59 +01:00
ossl-guide-quic-client-block.pod Adds a new demo blocking QUIC server for use with the existing demo QUIC clients 2025-02-17 11:27:33 -05:00
ossl-guide-quic-client-non-block.pod Adds a new demo blocking QUIC server for use with the existing demo QUIC clients 2025-02-17 11:27:33 -05:00
ossl-guide-quic-introduction.pod Update QUIC related man7 pages for the added server functionality 2025-02-17 11:27:33 -05:00
ossl-guide-quic-multi-stream.pod Update the OpenSSL Guide tutorials with changes to the demos 2023-11-02 08:14:46 +00:00
ossl-guide-quic-server-block.pod Update QUIC related man7 pages for the added server functionality 2025-02-17 11:27:33 -05:00
ossl-guide-quic-server-non-block.pod Remove extra FD_SET 2025-02-17 11:27:33 -05:00
ossl-guide-tls-client-block.pod Copyright year updates 2024-09-05 09:35:49 +02:00
ossl-guide-tls-client-non-block.pod Update the OpenSSL Guide tutorials with changes to the demos 2023-11-02 08:14:46 +00:00
ossl-guide-tls-introduction.pod Copyright year updates 2024-09-05 09:35:49 +02:00
ossl-guide-tls-server-block.pod MVP demo TLS server 2024-06-18 13:49:11 -04:00
ossl_store-file.pod
ossl_store.pod Copyright year updates 2024-09-05 09:35:49 +02:00
passphrase-encoding.pod Update copyright year 2021-09-07 13:35:43 +02:00
property.pod Copyright year updates 2023-09-07 09:59:15 +01:00
provider-asym_cipher.pod Fix documentation of OSSL_ASYM_CIPHER_PARAM_IMPLICIT_REJECTION 2025-01-17 18:54:51 +01:00
provider-base.pod Refactor sigalg handling 2025-03-09 23:19:37 +01:00
provider-cipher.pod EVP_SKEY documentation 2025-02-15 18:51:30 +01:00
provider-decoder.pod Copyright year updates 2023-09-07 09:59:15 +01:00
provider-digest.pod Add CTX copy function for EVP_MD to optimize the performance of EVP_MD_CTX_copy_ex. 2024-11-20 14:12:53 +01:00
provider-encoder.pod Replace some boldened types with a corresponding man page link 2022-12-08 07:32:34 +01:00
provider-kdf.pod Replace some boldened types with a corresponding man page link 2022-12-08 07:32:34 +01:00
provider-kem.pod Copyright year updates 2024-09-05 09:35:49 +02:00
provider-keyexch.pod Copyright year updates 2024-09-05 09:35:49 +02:00
provider-keymgmt.pod Add SLH-DSA documentation 2025-02-18 10:16:04 +01:00
provider-mac.pod Implement EVP_MAC_init_SKEY 2025-02-15 18:51:30 +01:00
provider-object.pod Update copyright year 2022-05-03 13:34:51 +01:00
provider-rand.pod Copyright year updates 2024-09-05 09:35:49 +02:00
provider-signature.pod doc: document that the FIPS provider doesn't support deterministic ECDSA sigs 2025-02-25 10:41:40 +01:00
provider-skeymgmt.pod EVP_SKEY documentation 2025-02-15 18:51:30 +01:00
provider-storemgmt.pod provider-storemgmt.pod: fix nits (unclosed '<' around name) 2023-12-12 19:52:02 +01:00
provider.pod Improve documentation about duplicate algorithm registrations 2024-10-23 15:10:49 +02:00
proxy-certificates.pod doc: remove end of line whitespace 2021-09-22 16:22:50 +10:00
x509.pod Update copyright year 2021-04-22 14:38:44 +01:00