openssl/providers/common
Daniel Van Geest d0899abb1b Implement KEMRecipientInfo (RFC9629) in CMS
Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber).

Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt`
to allow the user to specify the KDF algorithm and optional user
keying material for each recipient.

A provider may indicate which RecipientInfo type is supported
for a key, otherwise CMS will try to figure it out itself. A
provider may also indicate which KDF to use in KEMRecipientInfo
if the user hasn't specified one.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27681)
2025-07-30 11:39:04 +02:00
..
der Implement KEMRecipientInfo (RFC9629) in CMS 2025-07-30 11:39:04 +02:00
include/prov Implement KEMRecipientInfo (RFC9629) in CMS 2025-07-30 11:39:04 +02:00
bio_prov.c
build.info
capabilities.c
digest_to_nid.c
provider_ctx.c
provider_err.c
provider_seeding.c
provider_util.c
securitycheck.c
securitycheck_default.c
securitycheck_fips.c