EVP_KEYEXCH-X25519(7ssl)

EVP_KEYEXCH-X255197ssl

X25519 and x448 key exchange algorithm support

Overview

Key exchange support for the X25519 and X448 key types.

Key exchange parameters

"pad" (OSSL_EXCHANGE_PARAM_PAD) <unsigned integer>

"fips-indicator" (OSSL_EXCHANGE_PARAM_FIPS_APPROVED_INDICATOR) <integer>

X25519 and X448 are not FIPS approved in FIPS 140-3. So this getter will return 0.

See "Common Key Exchange parameters" in provider-keyexch(7).

Examples

Keys for the host and peer can be generated as shown in "Examples" in EVP_PKEY-X25519(7).

The code to generate a shared secret is identical to "Examples" in EVP_KEYEXCH-DH(7).

Releases

3 releases since Debian 12 (Bookworm); the text changed 2 times.