root
/
openssl
mirror of https://github.com/openssl/openssl.git
1
0
Fork 0
Code Issues Actions 7 Packages Projects Releases Wiki Activity
openssl/doc/man7
History
Daniel Van Geest d0899abb1b Implement KEMRecipientInfo (RFC9629) in CMS 
Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber).

Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt`
to allow the user to specify the KDF algorithm and optional user
keying material for each recipient.

A provider may indicate which RecipientInfo type is supported
for a key, otherwise CMS will try to figure it out itself. A
provider may also indicate which KDF to use in KEMRecipientInfo
if the user hasn't specified one.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27681)
 		2025-07-30 11:39:04 +02:00
..
img Add EVP_DigestSqueeze() API. 2023-11-10 13:27:00 +01:00
EVP_ASYM_CIPHER-RSA.pod Update FIPS provider doc to match the current code. 2025-07-01 20:47:08 +02:00
EVP_ASYM_CIPHER-SM2.pod
…
EVP_CIPHER-AES.pod AES: Document that the XTS, SIV, WRAP modes do not support streaming 2023-12-22 13:42:28 +01:00
EVP_CIPHER-ARIA.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-BLOWFISH.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-CAMELLIA.pod Add support for camellia cbc cts mode 2021-08-18 08:38:40 +10:00
EVP_CIPHER-CAST.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-CHACHA.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-DES.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_CIPHER-IDEA.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-NULL.pod Add documentation for "NULL" cipher and digest algorithms. 2023-02-28 14:26:33 +11:00
EVP_CIPHER-RC2.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-RC4.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-RC5.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-SEED.pod Add Docs for EVP_CIPHER-* 2021-05-28 14:29:13 +02:00
EVP_CIPHER-SM4.pod SM4: Document that the XTS mode does not support streaming 2023-12-22 13:42:28 +01:00
EVP_KDF-ARGON2.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_KDF-HKDF.pod HKDF updates 2025-07-10 11:14:19 +10:00
EVP_KDF-HMAC-DRBG.pod Copyright year updates 2023-09-07 09:59:15 +01:00
EVP_KDF-KB.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-KRB5KDF.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-PBKDF1.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-PBKDF2.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-PKCS12KDF.pod Copyright year updates 2023-09-28 14:23:29 +01:00
EVP_KDF-PVKKDF.pod Fix version mistake in some HISTORY sections 2022-11-23 08:23:17 +01:00
EVP_KDF-SCRYPT.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-SS.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-SSHKDF.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-TLS1_PRF.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-TLS13_KDF.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-X942-ASN1.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KDF-X942-CONCAT.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-X963.pod doc: EVP_KDF document the semantic meaning of output 2024-10-08 16:05:59 +02:00
EVP_KEM-EC.pod Copyright year updates 2025-03-12 13:35:59 +00:00
EVP_KEM-ML-KEM.pod doc: Fix type of OSSL_KEM_PARAM_IKME for ML-KEM 2025-03-04 14:06:32 +01:00
EVP_KEM-RSA.pod Copyright year updates 2025-03-12 13:35:59 +00:00
EVP_KEM-X25519.pod Copyright year updates 2025-03-12 13:35:59 +00:00
EVP_KEYEXCH-DH.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_KEYEXCH-ECDH.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_KEYEXCH-X25519.pod Add FIPS indicators to X25519 and X448. 2024-08-25 10:50:05 +10:00
EVP_MAC-BLAKE2.pod doc: fix description of mac "block-size" parameter 2023-11-22 10:51:10 +01:00
EVP_MAC-CMAC.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_MAC-GMAC.pod Update copyright year 2021-03-11 13:27:36 +00:00
EVP_MAC-HMAC.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_MAC-KMAC.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_MAC-Poly1305.pod mac: improve MAC documentation (Poly 1305 key reuse, nomenclature) 2021-05-14 22:24:00 +10:00
EVP_MAC-Siphash.pod Update copyright year 2021-03-11 13:27:36 +00:00
EVP_MD-BLAKE2.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_MD-KECCAK.pod Add default provider support for Keccak 224, 256, 384 and 512 2021-09-23 12:07:57 +10:00
EVP_MD-MD2.pod
…
EVP_MD-MD4.pod
…
EVP_MD-MD5-SHA1.pod
…
EVP_MD-MD5.pod
…
EVP_MD-MDC2.pod Update copyright year 2021-02-18 15:05:17 +00:00
EVP_MD-NULL.pod Add documentation for "NULL" cipher and digest algorithms. 2023-02-28 14:26:33 +11:00
EVP_MD-RIPEMD160.pod ripemd: document as being present in the default provider 2022-10-19 13:21:01 +02:00
EVP_MD-SHA1.pod
…
EVP_MD-SHA2.pod Copyright year updates 2023-09-07 09:59:15 +01:00
EVP_MD-SHA3.pod
…
EVP_MD-SHAKE.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_MD-SM3.pod
…
EVP_MD-WHIRLPOOL.pod
…
EVP_MD-common.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_PKEY-DH.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_PKEY-DSA.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_PKEY-EC.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_PKEY-FFC.pod Add documentation for key validation that indicates the difference between the 2022-05-09 10:07:42 +10:00
EVP_PKEY-HMAC.pod
…
EVP_PKEY-LMS.pod LMS code review fixups 2025-07-10 19:04:37 +10:00
EVP_PKEY-ML-DSA.pod Doc fix in EVP_PKEY-ML-DSA/KEM.pod files 2025-03-19 11:47:07 +01:00
EVP_PKEY-ML-KEM.pod Doc fix in EVP_PKEY-ML-DSA/KEM.pod files 2025-03-19 11:47:07 +01:00
EVP_PKEY-RSA.pod Copyright year updates 2024-04-09 13:43:26 +02:00
EVP_PKEY-SLH-DSA.pod Copyright year updates 2025-03-12 13:35:59 +00:00
EVP_PKEY-SM2.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_PKEY-X25519.pod ECX/ED keymanager param getter fixes. 2025-07-22 21:08:26 +10:00
EVP_RAND-CRNG-TEST.pod doc: fix typo in CRNG test documentation. 2024-09-30 17:57:18 +10:00
EVP_RAND-CTR-DRBG.pod Copyright year updates 2025-03-12 13:35:59 +00:00
EVP_RAND-HASH-DRBG.pod Copyright year updates 2025-03-12 13:35:59 +00:00
EVP_RAND-HMAC-DRBG.pod Copyright year updates 2025-03-12 13:35:59 +00:00
EVP_RAND-JITTER.pod doc: add note about fips jitter option 2024-10-09 13:53:10 +11:00
EVP_RAND-SEED-SRC.pod Fix EVP_RAND-SEED-SRC documentation example 2023-11-30 12:33:17 +01:00
EVP_RAND-TEST-RAND.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_RAND.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_SIGNATURE-DSA.pod document the format of DSA signature 2024-09-23 22:37:03 +02:00
EVP_SIGNATURE-ECDSA.pod docs: Document the implemented composite signature+hash algorithms 2024-09-12 15:20:23 +02:00
EVP_SIGNATURE-ED25519.pod Copyright year updates 2024-09-05 09:35:49 +02:00
EVP_SIGNATURE-HMAC.pod
…
EVP_SIGNATURE-LMS.pod LMS code review fixups 2025-07-10 19:04:37 +10:00
EVP_SIGNATURE-ML-DSA.pod Add an initial ML-DSA fuzzer 2025-02-15 11:13:38 -05:00
EVP_SIGNATURE-RSA.pod docs: Document the implemented composite signature+hash algorithms 2024-09-12 15:20:23 +02:00
EVP_SIGNATURE-SLH-DSA.pod SLH_DSA: Add support for generating X509 certs via the openssl 2025-02-18 10:17:29 +01:00
OSSL_PROVIDER-FIPS.pod DOC: Fixup FIPS provider documentation. 2025-07-10 19:04:37 +10:00
OSSL_PROVIDER-base.pod Copyright year updates 2025-03-12 13:35:59 +00:00
OSSL_PROVIDER-default.pod Add LMS documentation 2025-07-10 19:04:37 +10:00
OSSL_PROVIDER-legacy.pod Update the provider documentation 2023-11-22 10:43:37 +01:00
OSSL_PROVIDER-null.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
OSSL_STORE-winstore.pod OSSL_STORE: Add reference docs for the built-in Windows store implementation 2024-04-19 14:20:58 +02:00
RAND.pod Copyright year updates 2025-03-12 13:35:59 +00:00
RSA-PSS.pod
…
X25519.pod
…
bio.pod Change all references to OpenSSL 3.1 to OpenSSL 3.2 in the master branch 2022-10-07 10:05:50 +02:00
ct.pod
…
des_modes.pod
…
evp.pod Copyright year updates 2024-09-05 09:35:49 +02:00
fips_module.pod Copyright year updates 2025-03-12 13:35:59 +00:00
life_cycle-cipher.pod doc: remove end of line whitespace 2021-09-22 16:22:50 +10:00
life_cycle-digest.pod Add EVP_DigestSqueeze() API. 2023-11-10 13:27:00 +01:00
life_cycle-kdf.pod doc: remove end of line whitespace 2021-09-22 16:22:50 +10:00
life_cycle-mac.pod doc: remove end of line whitespace 2021-09-22 16:22:50 +10:00
life_cycle-pkey.pod Update copyright year 2022-05-03 13:34:51 +01:00
life_cycle-rand.pod doc: remove end of line whitespace 2021-09-22 16:22:50 +10:00
openssl-core.h.pod Move the description of the core types into their own pages 2022-12-08 07:32:34 +01:00
openssl-core_dispatch.h.pod
…
openssl-core_names.h.pod
…
openssl-env.pod doc/man7/openssl-env: document HOME environment variable usage 2025-07-29 13:12:11 -04:00
openssl-glossary.pod Update copyright year 2022-05-03 13:34:51 +01:00
openssl-qlog.pod Enable qlog support by default 2024-03-06 20:44:48 +00:00
openssl-quic-concurrency.pod Copyright year updates 2025-03-12 13:35:59 +00:00
openssl-quic.pod Copyright year updates 2025-03-12 13:35:59 +00:00
openssl-threads.pod doc: add note to indicate that the OBJ_ functions were not thread safe in 3.0 2021-09-25 10:39:20 +10:00
openssl_user_macros.pod.in Update copyright year 2021-07-29 15:41:35 +01:00
ossl-guide-introduction.pod Change documentation to point to new wiki location 2025-03-25 20:24:48 +01:00
ossl-guide-libcrypto-introduction.pod Copyright year updates 2024-04-09 13:43:26 +02:00
ossl-guide-libraries-introduction.pod Fix new typos found by codespell 2023-09-18 09:04:22 +10:00
ossl-guide-libssl-introduction.pod Fix a reference in the OpenSSL guide to QUIC for servers 2025-04-04 10:12:46 +01:00
ossl-guide-migration.pod Update documentation on EVP_PKEY_ASN1_METHOD deprecation 2025-07-17 11:25:18 -04:00
ossl-guide-quic-client-block.pod Copyright year updates 2025-03-12 13:35:59 +00:00
ossl-guide-quic-client-non-block.pod Copyright year updates 2025-03-12 13:35:59 +00:00
ossl-guide-quic-introduction.pod Copyright year updates 2025-03-12 13:35:59 +00:00
ossl-guide-quic-multi-stream.pod Update the OpenSSL Guide tutorials with changes to the demos 2023-11-02 08:14:46 +00:00
ossl-guide-quic-server-block.pod Copyright year updates 2025-03-12 13:35:59 +00:00
ossl-guide-quic-server-non-block.pod Copyright year updates 2025-03-12 13:35:59 +00:00
ossl-guide-tls-client-block.pod Copyright year updates 2024-09-05 09:35:49 +02:00
ossl-guide-tls-client-non-block.pod Update the OpenSSL Guide tutorials with changes to the demos 2023-11-02 08:14:46 +00:00
ossl-guide-tls-introduction.pod Typo in TLS introduction 2025-04-23 11:21:40 +02:00
ossl-guide-tls-server-block.pod Introduce SSL_OP_SERVER_PREFERENCE to replace SSL_OP_CIPHER_SERVER_PREFERENCE misnomer 2025-07-09 12:10:57 +02:00
ossl_store-file.pod
…
ossl_store.pod Copyright year updates 2024-09-05 09:35:49 +02:00
passphrase-encoding.pod Update copyright year 2021-09-07 13:35:43 +02:00
property.pod Copyright year updates 2023-09-07 09:59:15 +01:00
provider-asym_cipher.pod Copyright year updates 2025-03-12 13:35:59 +00:00
provider-base.pod doc: OSSL_PROV_PARAM_STATUS is signed integer 2025-04-29 14:16:40 +02:00
provider-cipher.pod Document EVP_CIPHER failure for missing provider function 2025-05-28 10:33:39 +02:00
provider-decoder.pod In doc/man7/provider-{en,de}coder.pod, clarify where properties are defined 2025-03-26 13:56:03 +01:00
provider-digest.pod Fix missing OSSL_FUNC_DIGEST_GET_PARAMS in provider-digest.pod 2025-03-19 10:41:34 +01:00
provider-encoder.pod In doc/man7/provider-{en,de}coder.pod, clarify where properties are defined 2025-03-26 13:56:03 +01:00
provider-kdf.pod Replace some boldened types with a corresponding man page link 2022-12-08 07:32:34 +01:00
provider-kem.pod Copyright year updates 2024-09-05 09:35:49 +02:00
provider-keyexch.pod Copyright year updates 2024-09-05 09:35:49 +02:00
provider-keymgmt.pod Implement KEMRecipientInfo (RFC9629) in CMS 2025-07-30 11:39:04 +02:00
provider-mac.pod Copyright year updates 2025-03-12 13:35:59 +00:00
provider-object.pod Update copyright year 2022-05-03 13:34:51 +01:00
provider-rand.pod Copyright year updates 2024-09-05 09:35:49 +02:00
provider-signature.pod provider-signature.pod: add missing doc of OSSL_FUNC_signature_query_key_types(), fix doc of return types, etc. 2025-05-20 21:19:34 +02:00
provider-skeymgmt.pod Copyright year updates 2025-03-12 13:35:59 +00:00
provider-storemgmt.pod provider-storemgmt.pod: fix nits (unclosed '<' around name) 2023-12-12 19:52:02 +01:00
provider.pod Improve documentation about duplicate algorithm registrations 2024-10-23 15:10:49 +02:00
proxy-certificates.pod doc: remove end of line whitespace 2021-09-22 16:22:50 +10:00
x509.pod Update copyright year 2021-04-22 14:38:44 +01:00