EVP_KEM-ML-KEM(7ossl) OpenSSL EVP_KEM-ML-KEM(7ossl)
NAME
EVP_KEM-ML-KEM-512, EVP_KEM-ML-KEM-768, EVP_KEM-ML-KEM-1024,
EVP_KEM-ML-KEM - EVP_KEM ML-KEM keytype and algorithm support
DESCRIPTION
The ML-KEM keytypes and parameters are described in EVP_PKEY-ML-KEM(7).
See EVP_PKEY_encapsulate(3) and EVP_PKEY_decapsulate(3) for more details
about basic KEM operations.
ML-KEM KEM parameters
"ikme" (OSSL_KEM_PARAM_IKME) <octet string>
The OpenSSL ML-KEM encapsulation mechanism can only be modified by
setting randomness during encapsulation, this enables testing, as per
FIPS 203, section 6.2, algorithm 17.
This parameter should not be used for purposes other than testing.
When this parameter is not set, encapsulation proceeds as per FIPS
203, section 7.2
This parameter is only settable.
"fips-indicator" (OSSL_KEM_PARAM_FIPS_APPROVED_INDICATOR) <integer>
The OpenSSL FIPS provider returns 1 if the operation is FIPS
approved, or 0 otherwise. See "FIPS indicators" in fips_module(7)
for more information. Supplying the test-only "ikme" parameter
causes this indicator to return 0.
This can be set when using EVP_PKEY_encapsulate_init().
CONFORMING TO
FIPS203
SEE ALSO
EVP_PKEY_encapsulate(3), EVP_PKEY_decapsulate(3), EVP_KEYMGMT(3),
EVP_PKEY(3), provider-keymgmt(7)
HISTORY
This functionality was added in OpenSSL 3.5.
COPYRIGHT
Copyright 2024-2026 The OpenSSL Project Authors. All Rights Reserved.
Licensed under the Apache License 2.0 (the "License"). You may not use
this file except in compliance with the License. You can obtain a copy
in the file LICENSE in the source distribution or at
<https://www.openssl.org/source/license.html>.
3.6.5 2026-09-29 EVP_KEM-ML-KEM(7ossl)
openssl 3.6.5 - Generated Sat Oct 3 09:07:13 CDT 2026