openssl/doc/man1
Daniel Van Geest d0899abb1b Implement KEMRecipientInfo (RFC9629) in CMS
Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber).

Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt`
to allow the user to specify the KDF algorithm and optional user
keying material for each recipient.

A provider may indicate which RecipientInfo type is supported
for a key, otherwise CMS will try to figure it out itself. A
provider may also indicate which KDF to use in KEMRecipientInfo
if the user hasn't specified one.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27681)
2025-07-30 11:39:04 +02:00
..
CA.pl.pod Removed duplicates in some man pages 2025-03-26 15:33:20 +01:00
build.info configutl documentation 2025-05-08 11:05:42 +10:00
openssl-asn1parse.pod.in
openssl-ca.pod.in DOC: update references to obsolete RFC 2459 (updated by RFC 5280 and DSA parts taken over by RFC 3370) 2025-06-03 07:27:57 +02:00
openssl-ciphers.pod.in Removed duplicates in some man pages 2025-03-26 15:33:20 +01:00
openssl-cmds.pod.in
openssl-cmp.pod.in Copyright year updates 2025-03-12 13:35:59 +00:00
openssl-cms.pod.in Implement KEMRecipientInfo (RFC9629) in CMS 2025-07-30 11:39:04 +02:00
openssl-configutl.pod.in configutl documentation 2025-05-08 11:05:42 +10:00
openssl-crl.pod.in
openssl-crl2pkcs7.pod.in
openssl-dgst.pod.in Copyright year updates 2025-03-12 13:35:59 +00:00
openssl-dhparam.pod.in APPS/dhparam: fix case where infile and outfile are the same 2024-10-04 12:09:33 +02:00
openssl-dsa.pod.in
openssl-dsaparam.pod.in DOC: update references to obsolete RFC 2459 (updated by RFC 5280 and DSA parts taken over by RFC 3370) 2025-06-03 07:27:57 +02:00
openssl-ec.pod.in
openssl-ecparam.pod.in APPS/{ecparam,pkeyparam}: fix case where infile and outfile are the same 2024-10-04 12:09:33 +02:00
openssl-enc.pod.in Copyright year updates 2025-03-12 13:35:59 +00:00
openssl-engine.pod.in
openssl-errstr.pod.in
openssl-fipsinstall.pod.in Update FIPS provider doc to match the current code. 2025-07-01 20:47:08 +02:00
openssl-format-options.pod
openssl-gendsa.pod.in
openssl-genpkey.pod.in Improve documentation for -cipher option in openssl genpkey 2025-04-29 14:18:57 +02:00
openssl-genrsa.pod.in
openssl-info.pod.in openssl-info.pod.in: Add windowscontext option to synopsis in doc 2024-10-16 20:00:19 +02:00
openssl-kdf.pod.in
openssl-list.pod.in Copyright year updates 2025-03-12 13:35:59 +00:00
openssl-mac.pod.in
openssl-namedisplay-options.pod Copyright year updates 2025-03-12 13:35:59 +00:00
openssl-nseq.pod.in
openssl-ocsp.pod.in APPS/ocsp: fix case where reqin and outfile are the same 2024-10-04 12:09:33 +02:00
openssl-passphrase-options.pod
openssl-passwd.pod.in
openssl-pkcs7.pod.in
openssl-pkcs8.pod.in APPS/pkcs8: fix case where infile and outfile are the same 2024-10-04 12:09:33 +02:00
openssl-pkcs12.pod.in pkcs12: increase macsaltlen from 8 to 16 as per NIST SP 800-132 2025-05-05 16:15:24 +02:00
openssl-pkey.pod.in APPS/pkey: fix case where infile and outfile are the same 2024-10-04 12:09:33 +02:00
openssl-pkeyparam.pod.in APPS/{ecparam,pkeyparam}: fix case where infile and outfile are the same 2024-10-04 12:09:33 +02:00
openssl-pkeyutl.pod.in Update pkeyutl documentation for PQC algorithms (Fixes #27415) 2025-06-20 15:48:42 +01:00
openssl-prime.pod.in Add -in option to prime function to allow input from file for primality testing. Update -hex option documentation to reflect use with input and output. 2025-04-29 14:17:06 +10:00
openssl-rand.pod.in
openssl-rehash.pod.in doc/man1/openssl-rehash.pod.in: document PATH environment variable 2025-07-29 13:12:11 -04:00
openssl-req.pod.in DOC: update references to obsolete RFC 2459 (updated by RFC 5280 and DSA parts taken over by RFC 3370) 2025-06-03 07:27:57 +02:00
openssl-rsa.pod.in
openssl-rsautl.pod.in
openssl-s_client.pod.in Add support for TLS 1.3 OCSP multi-stapling for server certs 2025-07-25 17:24:37 +02:00
openssl-s_server.pod.in Add support for TLS 1.3 OCSP multi-stapling for server certs 2025-07-25 17:24:37 +02:00
openssl-s_time.pod.in Document SSL_CIPHER environment variable 2025-07-29 13:12:10 -04:00
openssl-sess_id.pod.in
openssl-skeyutl.pod.in skeyutl command line utility 2025-02-15 18:51:31 +01:00
openssl-smime.pod.in Removed duplicates in some man pages 2025-03-26 15:33:20 +01:00
openssl-speed.pod.in
openssl-spkac.pod.in
openssl-srp.pod.in
openssl-storeutl.pod.in APPS/storeutl: fix case where uri and outfile are the same 2024-10-09 11:10:19 +02:00
openssl-ts.pod.in Removed duplicates in some man pages 2025-03-26 15:33:20 +01:00
openssl-verification-options.pod doc: fix misspellings of certificate(s) 2025-06-05 20:05:30 +10:00
openssl-verify.pod.in
openssl-version.pod.in
openssl-x509.pod.in APPS/x509: add -multi option for outputting all certs found in input 2025-05-14 12:51:42 +02:00
openssl.pod Removed duplicates in some man pages 2025-03-26 15:33:20 +01:00
tsget.pod