]> git.ipfire.org Git - thirdparty/openssl.git/commit
Add support for md-less signature schemes in CMS
authorMichael Schroeder <mls@suse.de>
Fri, 21 Feb 2025 11:59:21 +0000 (12:59 +0100)
committerAlexandr Nedvedicky <sashan@openssl.org>
Mon, 10 Mar 2025 13:36:15 +0000 (14:36 +0100)
commitcad3520bf7b7ff0118cf743210d33a5632337183
tree61456ad362de9cf00648c6b24e4336fb19878b64
parent91c6e157c696e8fee7320408ddb959ecf233fbaf
Add support for md-less signature schemes in CMS

Signature schemes like Ed25519 or ML-DSA use "pure" signing,
i.e. they directly sign the tbs data instead of signing a digest.

This is already supported in the X509 code, but not in CMS.
This commit adds support for such schemes to CMS.

This is a minimalistic set of changes, based in the work done
by David von Oheimb.

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Saša Nedvědický <sashan@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26867)
crypto/cms/cms_sd.c
test/recipes/80-test_cms.t