openssl/doc/designs
Richard Levitte 0941666728 Amend the design of AlgorithmIdentifier parameter passing
I realised that any application that passes AlgorithmIdentifier parameters
to and from a provider may also be interested in the full AlgorithmIdentifier
of the implementation invocation.

Likewise, any application that wants to get the full AlgorithmIdentifier
from an implementation invocation may also want to pass AlgorithmIdentifier
parameters to that same implementation invocation.

These amendments should be useful to cover all intended uses of the legacy
ctrls for PKCS7 and CMS:

- EVP_PKEY_CTRL_PKCS7_ENCRYPT
- EVP_PKEY_CTRL_PKCS7_DECRYPT
- EVP_PKEY_CTRL_PKCS7_SIGN
- EVP_PKEY_CTRL_CMS_ENCRYPT
- EVP_PKEY_CTRL_CMS_DECRYPT
- EVP_PKEY_CTRL_CMS_SIGN

It should also cover a number of other cases that were previously implemented
through EVP_PKEY_ASN1_METHOD, as well as all sorts of other cases where the
application has had to assemble a X509_ALGOR on their own.

Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Neil Horman <nhorman@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25000)
2024-08-27 13:56:20 +02:00
..
ddd ddd-02-conn-nonblocking-threads.c: Fix the leak of conn 2023-12-29 11:39:16 +01:00
quic-design Remove repetitive words 2024-04-16 09:07:05 +02:00
fast-param-find.md
fetching-composite-algorithms.md
handling-some-max-defines.md Add design document about handing some MAX defines 2024-04-04 08:43:53 +02:00
ossl-provider-load-ex.md
passing-algorithmidentifier-parameters.md Amend the design of AlgorithmIdentifier parameter passing 2024-08-27 13:56:20 +02:00
thread-api.md
xof.md