EVP_KEM-ML-KEM7ssl
Evp_kem ml-kem keytype and algorithm support
Overview
The ML-KEM keytypes and parameters are described in EVP_PKEY-ML-KEM(7). See EVP_PKEY_encapsulate(3) and EVP_PKEY_decapsulate(3) for more details about basic KEM operations.
ML-KEM KEM parameters
- "ikme" (
OSSL_KEM_PARAM_IKME) <octet string> -
The OpenSSL ML-KEM encapsulation mechanism can only be modified by setting randomness during encapsulation, this enables testing, as per FIPS 203, section 6.2, algorithm 17.
This parameter should not be used for purposes other than testing.
When this parameter is not set, encapsulation proceeds as per FIPS 203, section 7.2
This parameter is only settable.
- "fips-indicator" (
OSSL_KEM_PARAM_FIPS_APPROVED_INDICATOR) <integer> -
The OpenSSL FIPS provider returns 1 if the operation is FIPS approved, or 0 otherwise. See "FIPS indicators" in fips_module(7) for more information. Supplying the test-only "ikme" parameter causes this indicator to return 0.
This can be set when using EVP_PKEY_encapsulate_init().
Releases
2 releases since Debian 13 (Trixie); the text changed 1 time.