]> git.ipfire.org Git - thirdparty/openssl.git/commit
cms: Make sha512 the required hash for CMS with signedAttributes
authorStefan Berger <stefanb@linux.ibm.com>
Sun, 8 Mar 2026 23:11:02 +0000 (18:11 -0500)
committerNeil Horman <nhorman@openssl.org>
Tue, 17 Mar 2026 16:24:58 +0000 (12:24 -0400)
commit7bbd393ff1f58f0176ec55d9eb9c3caae33c588c
tree8225ccc88392ffa0326bcae410d53173c6df6c23
parentc70e22812e2e27a79eb4f28c5c7bb87514931bc6
cms: Make sha512 the required hash for CMS with signedAttributes

RFC 8419 requires that, when using an Ed25519 key for CMS signed-data with
signed attributes, SHA512 must be used. Modify the entry in the key2data
table to reflect this giving the user not other choice for a hash.

Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Neil Horman <nhorman@openssl.org>
MergeDate: Tue Mar 17 16:20:24 2026
(Merged from https://github.com/openssl/openssl/pull/30312)

(cherry picked from commit 919fd9db2514e97f02b31acc910858281e830a26)
crypto/cms/cms_sd.c