openssl/providers
Daniel Van Geest d0899abb1b Implement KEMRecipientInfo (RFC9629) in CMS
Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber).

Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt`
to allow the user to specify the KDF algorithm and optional user
keying material for each recipient.

A provider may indicate which RecipientInfo type is supported
for a key, otherwise CMS will try to figure it out itself. A
provider may also indicate which KDF to use in KEMRecipientInfo
if the user hasn't specified one.

Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27681)
2025-07-30 11:39:04 +02:00
..
common Implement KEMRecipientInfo (RFC9629) in CMS 2025-07-30 11:39:04 +02:00
fips Update dh_pub to be pairwise consistent with dh_priv 2025-07-29 15:10:02 +02:00
implementations Implement KEMRecipientInfo (RFC9629) in CMS 2025-07-30 11:39:04 +02:00
baseprov.c Copyright year updates 2025-03-12 13:35:59 +00:00
build.info first cut at KEM & key management skeletons 2024-10-21 11:47:16 +01:00
decoders.inc Add LMS public key decoder. 2025-07-10 19:03:46 +10:00
defltprov.c LMS code review fixups 2025-07-10 19:04:37 +10:00
encoders.inc Copyright year updates 2025-03-12 13:35:59 +00:00
fips-sources.checksums make update 2025-03-12 13:37:18 +00:00
fips.checksum make update 2025-03-12 13:37:18 +00:00
fips.module.sources make update 2025-03-12 13:37:18 +00:00
legacyprov.c Copyright year updates 2023-09-07 09:59:15 +01:00
nullprov.c Copyright year updates 2023-09-07 09:59:15 +01:00
prov_running.c
stores.inc Add support for loading root CAs from Windows crypto API 2022-09-14 14:10:18 +01:00