Scroll to navigation

EVP_KEM-ML-KEM(7SSL) OpenSSL EVP_KEM-ML-KEM(7SSL)

NAME

EVP_KEM-ML-KEM-512, EVP_KEM-ML-KEM-768, EVP_KEM-ML-KEM-1024, EVP_KEM-ML-KEM - EVP_KEM ML-KEM keytype and algorithm support

DESCRIPTION

The ML-KEM keytypes and parameters are described in EVP_PKEY-ML-KEM(7). See EVP_PKEY_encapsulate(3) and EVP_PKEY_decapsulate(3) for more details about basic KEM operations.

ML-KEM KEM parameters

"ikme" (OSSL_KEM_PARAM_IKME) <octet string>
The OpenSSL ML-KEM encapsulation mechanism can only be modified by setting randomness during encapsulation, this enables testing, as per FIPS 203, section 6.2, algorithm 17.

This parameter should not be used for purposes other than testing.

When this parameter is not set, encapsulation proceeds as per FIPS 203, section 7.2

This parameter is only settable.

This can be set when using EVP_PKEY_encapsulate_init().

CONFORMING TO

SEE ALSO

EVP_PKEY_encapsulate(3), EVP_PKEY_decapsulate(3), EVP_KEYMGMT(3), EVP_PKEY(3), provider-keymgmt(7)

HISTORY

This functionality was added in OpenSSL 3.5.

COPYRIGHT

Copyright 2024-2025 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at <https://www.openssl.org/source/license.html>.

2025-03-12 3.5.0-alpha1