From: olszomal Date: Wed, 22 Jul 2026 10:34:07 +0000 (+0200) Subject: DOCS: Fix KEM init function documentation X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=0b65b147e241c22df65ba2a240209da327ce69c0;p=thirdparty%2Fopenssl.git DOCS: Fix KEM init function documentation Document the missing params argument for OSSL_FUNC_kem_decapsulate_init(), remove stale name references, and fix the malformed provider-keymgmt(7) link. Complements: 78c44b05945b Add HPKE DHKEM provider support for EC, X25519 and X448. Signed-off-by: olszomal Reviewed-by: Jakub Zelenka Reviewed-by: Paul Dale MergeDate: Mon Jul 27 07:57:01 2026 (Merged from https://github.com/openssl/openssl/pull/32045) --- diff --git a/doc/man7/provider-kem.pod b/doc/man7/provider-kem.pod index 85b8f1a6b80..943f2b69dc3 100644 --- a/doc/man7/provider-kem.pod +++ b/doc/man7/provider-kem.pod @@ -32,7 +32,8 @@ provider-kem - The kem library E-E provider functions unsigned char *secret, size_t *secretlen); /* Decapsulation */ - int OSSL_FUNC_kem_decapsulate_init(void *ctx, void *provkey); + int OSSL_FUNC_kem_decapsulate_init(void *ctx, void *provkey, + const OSSL_PARAM params[]); int OSSL_FUNC_kem_auth_decapsulate_init(void *ctx, void *provkey, void *provauthkey, const OSSL_PARAM params[]); @@ -129,13 +130,13 @@ context in the I parameter and return the duplicate copy. OSSL_FUNC_kem_encapsulate_init() initialises a context for an asymmetric encapsulation given a provider side asymmetric kem context in the I -parameter, a pointer to a provider key object in the I parameter and -the I of the algorithm. +parameter, a pointer to a provider key object in the I parameter. + The I, if not NULL, should be set on the context in a manner similar to using OSSL_FUNC_kem_set_ctx_params(). The key object should have been previously generated, loaded or imported into the provider using the key management (OSSL_OP_KEYMGMT) operation (see -provider-keymgmt(7)>. +L. OSSL_FUNC_kem_auth_encapsulate_init() is similar to OSSL_FUNC_kem_encapsulate_init(), but also passes an additional authentication @@ -159,11 +160,13 @@ written to I<*secretlen>. OSSL_FUNC_kem_decapsulate_init() initialises a context for an asymmetric decapsulation given a provider side asymmetric kem context in the I -parameter, a pointer to a provider key object in the I parameter, and -a I of the algorithm. +parameter, a pointer to a provider key object in the I parameter. + +The I, if not NULL, should be set on the context in a manner similar to +using OSSL_FUNC_kem_set_ctx_params(). The key object should have been previously generated, loaded or imported into the provider using the key management (OSSL_OP_KEYMGMT) operation (see -provider-keymgmt(7)>. +L. OSSL_FUNC_kem_auth_decapsulate_init() is similar to OSSL_FUNC_kem_decapsulate_init(), but also passes an additional authentication