openssl/doc/man7
pohsingwu fbce6ebf70 Implement PCT for EDDSA
According to FIPS 140-3 IG 10.3.A Additonal Comment 1, a PCT shall be
performed consistent with the intended use of the keys.

This commit implements PCT for EDDSA via performing sign and verify
operations after key generated.

Also use the same pairwise test logic in EVP_PKEY_keygen and
EVP_PKEY_pairwise_check for EDDSA in FIPS_MODULE.

Add OSSL_SELF_TEST_DESC_PCT_EDDSA to OSSL_PROVIDER-FIPS page.

Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/23408)
2024-03-01 11:06:03 +01:00
..
img Add EVP_DigestSqueeze() API. 2023-11-10 13:27:00 +01:00
bio.pod Change all references to OpenSSL 3.1 to OpenSSL 3.2 in the master branch 2022-10-07 10:05:50 +02:00
ct.pod
des_modes.pod
EVP_ASYM_CIPHER-RSA.pod Add doc for EVP_ASYM_CIPHER-RSA and clean up OSSL_PROVIDER-FIPS.pod. 2022-11-18 14:29:01 +01:00
EVP_ASYM_CIPHER-SM2.pod
EVP_CIPHER-AES.pod AES: Document that the XTS, SIV, WRAP modes do not support streaming 2023-12-22 13:42:28 +01:00
EVP_CIPHER-ARIA.pod
EVP_CIPHER-BLOWFISH.pod
EVP_CIPHER-CAMELLIA.pod
EVP_CIPHER-CAST.pod
EVP_CIPHER-CHACHA.pod
EVP_CIPHER-DES.pod
EVP_CIPHER-IDEA.pod
EVP_CIPHER-NULL.pod Add documentation for "NULL" cipher and digest algorithms. 2023-02-28 14:26:33 +11:00
EVP_CIPHER-RC2.pod
EVP_CIPHER-RC4.pod
EVP_CIPHER-RC5.pod
EVP_CIPHER-SEED.pod
EVP_CIPHER-SM4.pod SM4: Document that the XTS mode does not support streaming 2023-12-22 13:42:28 +01:00
EVP_KDF-ARGON2.pod Fix typos found by codespell in man pages 2023-12-29 10:13:01 +01:00
EVP_KDF-HKDF.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-HMAC-DRBG.pod Copyright year updates 2023-09-07 09:59:15 +01:00
EVP_KDF-KB.pod Add KMAC support to KBKDF. 2022-12-16 16:36:49 +01:00
EVP_KDF-KRB5KDF.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-PBKDF1.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-PBKDF2.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-PKCS12KDF.pod Copyright year updates 2023-09-28 14:23:29 +01:00
EVP_KDF-PVKKDF.pod Fix version mistake in some HISTORY sections 2022-11-23 08:23:17 +01:00
EVP_KDF-SCRYPT.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-SS.pod Use proper KDF SS parameter name 2023-11-06 10:54:22 +01:00
EVP_KDF-SSHKDF.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-TLS1_PRF.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-TLS13_KDF.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-X942-ASN1.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-X942-CONCAT.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KDF-X963.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KEM-EC.pod Add HISTORY section to EVP_KEM-EC document. 2022-11-24 06:39:22 +00:00
EVP_KEM-RSA.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
EVP_KEM-X25519.pod Fix version mistake in some HISTORY sections 2022-11-23 08:23:17 +01:00
EVP_KEYEXCH-DH.pod
EVP_KEYEXCH-ECDH.pod
EVP_KEYEXCH-X25519.pod
EVP_MAC-BLAKE2.pod doc: fix description of mac "block-size" parameter 2023-11-22 10:51:10 +01:00
EVP_MAC-CMAC.pod doc: fix description of mac "block-size" parameter 2023-11-22 10:51:10 +01:00
EVP_MAC-GMAC.pod
EVP_MAC-HMAC.pod Ignore OSSL_MAC_PARAM_DIGEST_NOINIT/OSSL_MAC_PARAM_DIGEST_ONESHOT 2023-12-26 10:36:00 -05:00
EVP_MAC-KMAC.pod doc: fix description of mac "block-size" parameter 2023-11-22 10:51:10 +01:00
EVP_MAC-Poly1305.pod
EVP_MAC-Siphash.pod
EVP_MD-BLAKE2.pod Properly limit the variable output size for BLAKE2 2023-11-13 12:13:17 +01:00
EVP_MD-common.pod
EVP_MD-KECCAK.pod
EVP_MD-MD2.pod
EVP_MD-MD4.pod
EVP_MD-MD5-SHA1.pod
EVP_MD-MD5.pod
EVP_MD-MDC2.pod
EVP_MD-NULL.pod Add documentation for "NULL" cipher and digest algorithms. 2023-02-28 14:26:33 +11:00
EVP_MD-RIPEMD160.pod ripemd: document as being present in the default provider 2022-10-19 13:21:01 +02:00
EVP_MD-SHA1.pod
EVP_MD-SHA2.pod Copyright year updates 2023-09-07 09:59:15 +01:00
EVP_MD-SHA3.pod
EVP_MD-SHAKE.pod doc: improve display of KECCAK-KMAC128, KECCAK-KMAC256 defs 2023-12-04 09:33:25 +01:00
EVP_MD-SM3.pod
EVP_MD-WHIRLPOOL.pod
EVP_PKEY-DH.pod
EVP_PKEY-DSA.pod
EVP_PKEY-EC.pod Copyright year updates 2023-09-07 09:59:15 +01:00
EVP_PKEY-FFC.pod
EVP_PKEY-HMAC.pod
EVP_PKEY-RSA.pod Augment RSA provider to generate CRT coefficients on EVP_PKEY_fromdata() 2024-01-09 12:03:32 +01:00
EVP_PKEY-SM2.pod
EVP_PKEY-X25519.pod Add HPKE DHKEM provider support for EC, X25519 and X448. 2022-09-23 09:24:47 +01:00
EVP_RAND-CTR-DRBG.pod Fix docs related to EVP_RAND_CTX_new() that were not passing the parent 2022-11-30 07:31:53 +00:00
EVP_RAND-HASH-DRBG.pod Copyright year updates 2023-09-07 09:59:15 +01:00
EVP_RAND-HMAC-DRBG.pod Copyright year updates 2023-09-07 09:59:15 +01:00
EVP_RAND-SEED-SRC.pod Fix EVP_RAND-SEED-SRC documentation example 2023-11-30 12:33:17 +01:00
EVP_RAND-TEST-RAND.pod Copyright year updates 2023-09-28 14:23:29 +01:00
EVP_RAND.pod
EVP_SIGNATURE-DSA.pod Copyright year updates 2023-09-07 09:59:15 +01:00
EVP_SIGNATURE-ECDSA.pod Copyright year updates 2023-09-07 09:59:15 +01:00
EVP_SIGNATURE-ED25519.pod Copyright year updates 2023-09-07 09:59:15 +01:00
EVP_SIGNATURE-HMAC.pod
EVP_SIGNATURE-RSA.pod signature: Clamp PSS salt len to MD len 2022-12-08 11:02:52 +01:00
evp.pod
fips_module.pod Copyright year updates 2023-09-07 09:59:15 +01:00
life_cycle-cipher.pod
life_cycle-digest.pod Add EVP_DigestSqueeze() API. 2023-11-10 13:27:00 +01:00
life_cycle-kdf.pod
life_cycle-mac.pod
life_cycle-pkey.pod
life_cycle-rand.pod
openssl_user_macros.pod.in
openssl-core_dispatch.h.pod
openssl-core_names.h.pod
openssl-core.h.pod Move the description of the core types into their own pages 2022-12-08 07:32:34 +01:00
openssl-env.pod QLOG: Editorial fixes (QLOG is spelled 'qlog') 2024-02-02 11:50:29 +00:00
openssl-glossary.pod
openssl-qlog.pod QUIC QLOG: Minor manpage updates 2024-02-02 11:50:30 +00:00
openssl-quic.pod Copyright year updates 2023-09-07 09:59:15 +01:00
openssl-threads.pod
OSSL_PROVIDER-base.pod Update the provider documentation 2023-11-22 10:43:37 +01:00
OSSL_PROVIDER-default.pod Update the provider documentation 2023-11-22 10:43:37 +01:00
OSSL_PROVIDER-FIPS.pod Implement PCT for EDDSA 2024-03-01 11:06:03 +01:00
OSSL_PROVIDER-legacy.pod Update the provider documentation 2023-11-22 10:43:37 +01:00
OSSL_PROVIDER-null.pod Add missing HISTORY sections for OpenSSL 3.0 related documents. 2022-11-21 12:03:10 +01:00
ossl_store-file.pod
ossl_store.pod
ossl-guide-introduction.pod Add a new guide page on writing a non-blocking QUIC client 2023-09-08 15:44:37 +01:00
ossl-guide-libcrypto-introduction.pod gate calling of evp_method_id on having a non-zero name id 2024-01-01 12:57:59 -05:00
ossl-guide-libraries-introduction.pod Fix new typos found by codespell 2023-09-18 09:04:22 +10:00
ossl-guide-libssl-introduction.pod Incorporate the ssl man page into the OpenSSL guide 2023-08-08 18:42:41 +02:00
ossl-guide-migration.pod Document the implications of setting engine-based low-level methods 2024-01-31 18:40:30 +01:00
ossl-guide-quic-client-block.pod augment quic demos to support ipv4/6 connections 2023-11-21 13:01:54 +01:00
ossl-guide-quic-client-non-block.pod Update the OpenSSL Guide tutorials with changes to the demos 2023-11-02 08:14:46 +00:00
ossl-guide-quic-introduction.pod Update README-QUIC.md 2023-10-30 07:53:40 +00:00
ossl-guide-quic-multi-stream.pod Update the OpenSSL Guide tutorials with changes to the demos 2023-11-02 08:14:46 +00:00
ossl-guide-tls-client-block.pod Fix typos found by codespell in man pages 2023-12-29 10:13:01 +01:00
ossl-guide-tls-client-non-block.pod Update the OpenSSL Guide tutorials with changes to the demos 2023-11-02 08:14:46 +00:00
ossl-guide-tls-introduction.pod doc: change "certifictes" to "certificates" 2023-10-26 15:23:59 +01:00
passphrase-encoding.pod
property.pod Copyright year updates 2023-09-07 09:59:15 +01:00
provider-asym_cipher.pod Copyright year updates 2023-09-07 09:59:15 +01:00
provider-base.pod rand: add callbacks to cleanup the user entropy resp. nonce 2023-10-20 09:48:34 +01:00
provider-cipher.pod doc: improve documentation of EVP in-place encryption 2023-12-12 10:40:56 +01:00
provider-decoder.pod Copyright year updates 2023-09-07 09:59:15 +01:00
provider-digest.pod Add EVP_DigestSqueeze() API. 2023-11-10 13:27:00 +01:00
provider-encoder.pod Replace some boldened types with a corresponding man page link 2022-12-08 07:32:34 +01:00
provider-kdf.pod Replace some boldened types with a corresponding man page link 2022-12-08 07:32:34 +01:00
provider-kem.pod Copyright year updates 2023-09-07 09:59:15 +01:00
provider-keyexch.pod Replace some boldened types with a corresponding man page link 2022-12-08 07:32:34 +01:00
provider-keymgmt.pod provider-keymgmt.pod: fix typo 2024-01-03 13:14:00 +01:00
provider-mac.pod Replace some boldened types with a corresponding man page link 2022-12-08 07:32:34 +01:00
provider-object.pod
provider-rand.pod Replace some boldened types with a corresponding man page link 2022-12-08 07:32:34 +01:00
provider-signature.pod doc: "digest" must be explicitly set with deterministic ECDSA/DSA 2024-01-11 10:15:03 +01:00
provider-storemgmt.pod provider-storemgmt.pod: fix nits (unclosed '<' around name) 2023-12-12 19:52:02 +01:00
provider.pod Replace some boldened types with a corresponding man page link 2022-12-08 07:32:34 +01:00
proxy-certificates.pod
RAND.pod
RSA-PSS.pod
x509.pod
X25519.pod