openssl/crypto/objects, branch feature/evp_skey

Fix the return value of OBJ_create

2025-08-19T13:20:04Z

OBJ_create is supposed to return NID_undef on error and the newly created NID on success. Fixes: 88a1fbb8d1b2 ("reduce lock contention when adding objects to ADDED_OBJ hash table") Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/28293)

crypto: use array memory (re)allocation routines

2025-08-08T16:22:10Z

Co-Authored-by: Alexandr Nedvedicky Signed-off-by: Eugene Syromiatnikov Reviewed-by: Saša Nedvědický Reviewed-by: Matt Caswell Reviewed-by: Paul Dale Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/28059)

Implement KEMRecipientInfo (RFC9629) in CMS

2025-07-30T09:39:04Z

Also add support for ML-KEM in CMS (draft-ietf-lamps-cms-kyber). Add the -recip_kdf and -recip_ukm parameters to `openssl cms -encrypt` to allow the user to specify the KDF algorithm and optional user keying material for each recipient. A provider may indicate which RecipientInfo type is supported for a key, otherwise CMS will try to figure it out itself. A provider may also indicate which KDF to use in KEMRecipientInfo if the user hasn't specified one. Reviewed-by: Dmitry Belyavskiy Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27681)

reduce lock contention when adding objects to ADDED_OBJ hash table

2025-07-29T17:23:45Z

Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/28081)

move added creation to happen outside of write lock

2025-07-29T17:23:38Z

We have a global ADDED_OBJ hashtable, and we check to create it on every object add with the write lock potentially held. move that creation to a RUN_ONCE routine so that its always created before the write lock is held Reviewed-by: Tomas Mraz Reviewed-by: Matt Caswell Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/28081)

Add HKDF algorithms with fixed digests.

2025-07-10T01:13:21Z

Add HKDF-SHA256, HKDF-SHA384 and HKDF-SHA512 which are versions of HKDF that have the digest pre-set. The digest cannot be changed for contexts of these types. RFC 8619 defines algorithm identifiers for these combinations. These algorithm identifiers will be used in future features, e.g. KEMRecipientInfo. Reviewed-by: Shane Lontis Reviewed-by: Tomas Mraz Reviewed-by: Paul Dale (Merged from https://github.com/openssl/openssl/pull/27247)

libapps + libcrypto: Silence warnings on Win64 builds

2025-07-02T15:26:26Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/27806)

Implement AES-CBC-HMAC-SHA512 on aarch64

2025-04-14T13:53:30Z

This is to implement #19932, it adds enc-then-mac aes-cbc-hmac-sha512 on aarch64, aes-cbc and hmac-sha512 are interleaved to achieve better performance.It only supports non-padding mode that means the length of input data should be multiple of 16 bytes. Reviewed-by: Tomas Mraz Reviewed-by: Tom Cosgrove (Merged from https://github.com/openssl/openssl/pull/22949)

Implement interleaving aes-cbc-hmac-sha on aarch64

2025-04-14T13:53:30Z

This is to implement #19932, it adds enc-then-mac aes-cbc-hmac-sha1/256, aes-cbc and hmac-sha1/256 are interleaved to achieve better performance. It only supports non-padding mode that means the length of input data should be multiple of 16 bytes. Reviewed-by: Tomas Mraz Reviewed-by: Tom Cosgrove (Merged from https://github.com/openssl/openssl/pull/22949)

SLH_DSA: Make apps.c do_X509_REQ_verify() call work correctly.

2025-02-18T09:17:29Z

- Added sigid_algs for SLH_DSA such that OBJ_find_sigid_algs() works. - OBJ_sn2nid() was also being called, so the SN form of SLH_DSA algorithms needed to be added to the provider dispatch tables. Reviewed-by: Viktor Dukhovni Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/26625)