summaryrefslogtreecommitdiffstats
path: root/upstream/debian-unstable/man7/EVP_PKEY-X25519.7ssl
diff options
context:
space:
mode:
Diffstat (limited to 'upstream/debian-unstable/man7/EVP_PKEY-X25519.7ssl')
-rw-r--r--upstream/debian-unstable/man7/EVP_PKEY-X25519.7ssl14
1 files changed, 12 insertions, 2 deletions
diff --git a/upstream/debian-unstable/man7/EVP_PKEY-X25519.7ssl b/upstream/debian-unstable/man7/EVP_PKEY-X25519.7ssl
index 66f423b3..28980f20 100644
--- a/upstream/debian-unstable/man7/EVP_PKEY-X25519.7ssl
+++ b/upstream/debian-unstable/man7/EVP_PKEY-X25519.7ssl
@@ -55,7 +55,7 @@
.\" ========================================================================
.\"
.IX Title "EVP_PKEY-X25519 7SSL"
-.TH EVP_PKEY-X25519 7SSL 2024-02-03 3.1.5 OpenSSL
+.TH EVP_PKEY-X25519 7SSL 2024-04-04 3.2.2-dev OpenSSL
.\" For nroff, turn off justification. Always turn off hyphenation; it makes
.\" way too many mistakes in technical documents.
.if n .ad l
@@ -70,8 +70,18 @@ The \fBX25519\fR, \fBX448\fR, \fBED25519\fR and \fBED448\fR keytypes are
implemented in OpenSSL's default and FIPS providers. These implementations
support the associated key, containing the public key \fIpub\fR and the
private key \fIpriv\fR.
+.SS "Keygen Parameters"
+.IX Subsection "Keygen Parameters"
+.IP """dhkem-ikm"" (\fBOSSL_PKEY_PARAM_DHKEM_IKM\fR) <octet string>" 4
+.IX Item """dhkem-ikm"" (OSSL_PKEY_PARAM_DHKEM_IKM) <octet string>"
+DHKEM requires the generation of a keypair using an input key material (seed).
+Use this to specify the key material used for generation of the private key.
+This value should not be reused for other purposes.
+It should have a length of at least 32 for X25519, and 56 for X448.
+.Sp
+This is only supported by X25519 and X448.
.PP
-No additional parameters can be set during key generation.
+Use \fBEVP_PKEY_CTX_set_params()\fR after calling \fBEVP_PKEY_keygen_init()\fR.
.SS "Common X25519, X448, ED25519 and ED448 parameters"
.IX Subsection "Common X25519, X448, ED25519 and ED448 parameters"
In addition to the common parameters that all keytypes should support (see