openssl/providers/common
Daniel Van Geest d0899abb1b Implement KEMRecipientInfo (RFC9629) in CMS
Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber).

Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt`
to allow the user to specify the KDF algorithm and optional user
keying material for each recipient.

A provider may indicate which RecipientInfo type is supported
for a key, otherwise CMS will try to figure it out itself. A
provider may also indicate which KDF to use in KEMRecipientInfo
if the user hasn't specified one.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27681)
2025-07-30 11:39:04 +02:00
..
der Implement KEMRecipientInfo (RFC9629) in CMS 2025-07-30 11:39:04 +02:00
include/prov Implement KEMRecipientInfo (RFC9629) in CMS 2025-07-30 11:39:04 +02:00
bio_prov.c Fix misc external ossl_ symbols. 2021-03-18 17:52:37 +10:00
build.info Add PBKDF1 to the legacy provider 2021-05-24 15:21:25 +10:00
capabilities.c Copyright year updates 2025-03-12 13:35:59 +00:00
digest_to_nid.c Copyright year updates 2024-09-05 09:35:49 +02:00
provider_ctx.c Copyright year updates 2025-03-12 13:35:59 +00:00
provider_err.c Post-merge make update 2025-02-14 10:50:59 +01:00
provider_seeding.c rand: add callbacks to cleanup the user entropy resp. nonce 2023-10-20 09:48:34 +01:00
provider_util.c Copyright year updates 2025-03-12 13:35:59 +00:00
securitycheck.c Copyright year updates 2024-09-05 09:35:49 +02:00
securitycheck_default.c Copyright year updates 2024-09-05 09:35:49 +02:00
securitycheck_fips.c fips: Prohibit SHA1 in DH & ECDH exchange 2024-09-27 09:13:05 +02:00