openssl/crypto/objects/obj_mac.num, branch openssl-4.0.0

Add an OID for "id-alg-hss-lms-hashsig"

2026-01-13T10:13:33Z

Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale Reviewed-by: Tomas Mraz MergeDate: Tue Jan 13 10:13:35 2026 (Merged from https://github.com/openssl/openssl/pull/29599)

Implement KEMRecipientInfo (RFC9629) in CMS

2025-07-30T09:39:04Z

Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber). Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt` to allow the user to specify the KDF algorithm and optional user keying material for each recipient. A provider may indicate which RecipientInfo type is supported for a key, otherwise CMS will try to figure it out itself. A provider may also indicate which KDF to use in KEMRecipientInfo if the user hasn't specified one. Reviewed-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27681)

Add HKDF algorithms with fixed digests.

2025-07-10T01:13:21Z

Add HKDF-SHA256, HKDF-SHA384 and HKDF-SHA512 which are versions of HKDF that have the digest pre-set. The digest cannot be changed for contexts of these types. RFC 8619 defines algorithm identifiers for these combinations. These algorithm identifiers will be used in future features, e.g. KEMRecipientInfo. Reviewed-by: Shane Lontis Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/27247)

Implement AES-CBC-HMAC-SHA512 on aarch64

2025-04-14T13:53:30Z

This is to implement #19932, it adds enc-then-mac aes-cbc-hmac-sha512 on aarch64, aes-cbc and hmac-sha512 are interleaved to achieve better performance.It only supports non-padding mode that means the length of input data should be multiple of 16 bytes. Reviewed-by: Tomas Mraz Reviewed-by: Tom Cosgrove (Merged from https://github.com/openssl/openssl/pull/22949)

Implement interleaving aes-cbc-hmac-sha on aarch64

2025-04-14T13:53:30Z

This is to implement #19932, it adds enc-then-mac aes-cbc-hmac-sha1/256, aes-cbc and hmac-sha1/256 are interleaved to achieve better performance. It only supports non-padding mode that means the length of input data should be multiple of 16 bytes. Reviewed-by: Tomas Mraz Reviewed-by: Tom Cosgrove (Merged from https://github.com/openssl/openssl/pull/22949)

Tweak case of [fs] variant letter in SLH-DSA algorithms

2025-01-11T03:39:03Z

Reviewed-by: Matt Caswell Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/26359)

Some PQ-related CSOR OIDs

2025-01-07T12:01:44Z

Reviewed-by: Tim Hudson Reviewed-by: Paul Dale Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26321)

feat: add TCG / platform certificate OIDs

2024-09-05T15:22:40Z

Reviewed-by: Viktor Dukhovni Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/25312)

fix: alias auditEntity OID

2024-08-26T09:38:44Z

Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/24754)

fix: wrong name for OID -> auditIdentity

2024-08-26T09:25:23Z

Reviewed-by: Tomas Mraz Reviewed-by: Neil Horman Reviewed-by: Matt Caswell (Merged from https://github.com/openssl/openssl/pull/24754)