]> git.ipfire.org Git - thirdparty/openssl.git/commit
cms: Enable signature verification for no-attribute case (hashless signing)
authorStefan Berger <stefanb@linux.ibm.com>
Mon, 13 Oct 2025 18:54:17 +0000 (13:54 -0500)
committerTomas Mraz <tomas@openssl.org>
Tue, 18 Nov 2025 17:03:24 +0000 (18:03 +0100)
commit266fb55eb8b3b7bfdcd04d757e751b4a26c9ad06
treef3d95f360f31895cd74abeab2b821cb87201943a
parent3ee16555ee768f722a86b492b4cec7e013e667e5
cms: Enable signature verification for no-attribute case (hashless signing)

Enable signature verification for hashless signing schemes, such as ML-DSA
and EdDSA, for the non-attribute case of CMS. Also in this case the BIO
with the plain input data needs to be passed through to the signature
verification function so that the pure-mode signature verification method
can hash the plain data itself.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Reviewed-by: Dmitry Belyavskiy <beldmit@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/28923)
crypto/cms/cms_sd.c
crypto/cms/cms_smime.c
doc/man3/CMS_verify.pod
include/openssl/cms.h.in
util/libcrypto.num
util/missingcrypto.txt