mirrors/openssl
0
0 Fork 0
mirror of https://github.com/openssl/openssl.git synced 2026-10-28 08:25:12 +08:00
Code Activity
Files
master
openssl/doc/man7
T
History
Yuxiang Ji f4ada04e0c doc: RAND(7): a restore from a saved image is not detected; reseed after it 
The DRBGs reseed on a change of process ID, on the request count and on
the time interval, and have no way to notice that the process or the
machine was restored from a snapshot or a checkpoint: copies restored
from one image continue from the same state until their next scheduled
reseed. Say so in RAND(7) beside the paragraph on automatic reseeding,
and tell applications in such environments to reseed after their own
restore signal, with RAND_poll(3) as the call that does it.

Measured on 3.5.9 and master: two continuations of one QEMU or
Firecracker snapshot, or of one CRIU checkpoint, print identical
RAND_bytes output block for block (32 of 32, 14 of 14) until the primary
DRBG's interval expires; plain fork, _Fork and clone are distinct through
the pid check.

Assisted-by: Claude Code:claude-fable-5-1
Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
Reviewed-by: Paul Dale <paul.dale@oracle.com>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Merge-date: Fri Oct 23 12:51:55 2026
Merged-from: https://github.com/openssl/openssl/pull/33285
2026-10-23 14:51:41 +02:00
..
img
Add EVP_DigestSqueeze() API.
2023-11-10 13:27:00 +01:00
bio.pod
Change all references to OpenSSL 3.1 to OpenSSL 3.2 in the master branch
2022-10-07 10:05:50 +02:00
ct.pod
Fix function names in ct(7) documentation
2018-12-19 19:00:08 +01:00
des_modes.pod
Following the license change, modify the boilerplates in doc/man7/
2018-12-06 15:36:02 +01:00
EVP_ASYM_CIPHER-RSA.pod
Copyright year updates
2025-09-02 13:05:45 +00:00
EVP_ASYM_CIPHER-SM2.pod
Document the provider side SM2 Asymmetric Cipher support
2020-09-25 11:13:54 +01:00
EVP_CIPHER-AES.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_CIPHER-ARIA.pod
Add Docs for EVP_CIPHER-*
2021-05-28 14:29:13 +02:00
EVP_CIPHER-ASCON-AEAD128.pod
Add ASCON-AEAD128 cipher implementation per NIST SP 800-232
2026-09-16 16:24:45 +02:00
EVP_CIPHER-BLOWFISH.pod
Add Docs for EVP_CIPHER-*
2021-05-28 14:29:13 +02:00
EVP_CIPHER-CAMELLIA.pod
Add support for camellia cbc cts mode
2021-08-18 08:38:40 +10:00
EVP_CIPHER-CAST.pod
Add Docs for EVP_CIPHER-*
2021-05-28 14:29:13 +02:00
EVP_CIPHER-CHACHA.pod
Add Docs for EVP_CIPHER-*
2021-05-28 14:29:13 +02:00
EVP_CIPHER-DES.pod
doc/man7/EVP_CIPHER-DES.pod: remove trailing whitespace
2026-05-14 11:24:25 +02:00
EVP_CIPHER-IDEA.pod
Add Docs for EVP_CIPHER-*
2021-05-28 14:29:13 +02:00
EVP_CIPHER-NULL.pod
Add documentation for "NULL" cipher and digest algorithms.
2023-02-28 14:26:33 +11:00
EVP_CIPHER-RC2.pod
Add Docs for EVP_CIPHER-*
2021-05-28 14:29:13 +02:00
EVP_CIPHER-RC4.pod
Add Docs for EVP_CIPHER-*
2021-05-28 14:29:13 +02:00
EVP_CIPHER-RC5.pod
Add Docs for EVP_CIPHER-*
2021-05-28 14:29:13 +02:00
EVP_CIPHER-SEED.pod
Add Docs for EVP_CIPHER-*
2021-05-28 14:29:13 +02:00
EVP_CIPHER-SM4.pod
Document SM4 table-lookup side-channel risk
2026-08-11 09:02:08 +02:00
EVP_KDF-ARGON2.pod
Copyright year updates
2024-09-05 09:35:49 +02:00
EVP_KDF-HKDF.pod
HKDF updates
2025-07-10 11:14:19 +10:00
EVP_KDF-HMAC-DRBG.pod
Copyright year updates
2023-09-07 09:59:15 +01:00
EVP_KDF-IKEV2KDF.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_KDF-KB.pod
doc: EVP_KDF document the semantic meaning of output
2024-10-08 16:05:59 +02:00
EVP_KDF-KRB5KDF.pod
Add missing HISTORY sections for OpenSSL 3.0 related documents.
2022-11-21 12:03:10 +01:00
EVP_KDF-PBKDF1.pod
Add missing HISTORY sections for OpenSSL 3.0 related documents.
2022-11-21 12:03:10 +01:00
EVP_KDF-PBKDF2.pod
Copyright year updates
2026-03-10 14:37:52 +00:00
EVP_KDF-PKCS12KDF.pod
Copyright year updates
2023-09-28 14:23:29 +01:00
EVP_KDF-PVKKDF.pod
Fix version mistake in some HISTORY sections
2022-11-23 08:23:17 +01:00
EVP_KDF-SCRYPT.pod
Add missing HISTORY sections for OpenSSL 3.0 related documents.
2022-11-21 12:03:10 +01:00
EVP_KDF-SNMPKDF.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_KDF-SRTPKDF.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_KDF-SS.pod
Fix SSKDF key parameter documentation
2026-07-31 19:41:49 +07:00
EVP_KDF-SSHKDF.pod
doc: EVP_KDF document the semantic meaning of output
2024-10-08 16:05:59 +02:00
EVP_KDF-TLS1_PRF.pod
doc: EVP_KDF document the semantic meaning of output
2024-10-08 16:05:59 +02:00
EVP_KDF-TLS13_KDF.pod
doc: EVP_KDF document the semantic meaning of output
2024-10-08 16:05:59 +02:00
EVP_KDF-X942-ASN1.pod
doc: EVP_KDF document the semantic meaning of output
2024-10-08 16:05:59 +02:00
EVP_KDF-X942-CONCAT.pod
Add missing HISTORY sections for OpenSSL 3.0 related documents.
2022-11-21 12:03:10 +01:00
EVP_KDF-X963.pod
Copyright year updates
2026-03-10 14:37:52 +00:00
EVP_KEM-EC.pod
Copyright year updates
2025-03-12 13:35:59 +00:00
EVP_KEM-ML-KEM.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_KEM-RSA.pod
Copyright year updates
2025-03-12 13:35:59 +00:00
EVP_KEM-X25519.pod
Copyright year updates
2025-03-12 13:35:59 +00:00
EVP_KEYEXCH-DH.pod
Copyright year updates
2024-09-05 09:35:49 +02:00
EVP_KEYEXCH-ECDH.pod
Copyright year updates
2026-03-10 14:37:52 +00:00
EVP_KEYEXCH-X25519.pod
Add FIPS indicators to X25519 and X448.
2024-08-25 10:50:05 +10:00
EVP_MAC-BLAKE2.pod
doc: fix description of mac "block-size" parameter
2023-11-22 10:51:10 +01:00
EVP_MAC-CMAC.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_MAC-GMAC.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_MAC-HMAC.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_MAC-KMAC.pod
Copyright year updates
2024-09-05 09:35:49 +02:00
EVP_MAC-Poly1305.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
EVP_MAC-Siphash.pod
Update copyright year
2021-03-11 13:27:36 +00:00
EVP_MD-BLAKE2.pod
Copyright year updates
2024-09-05 09:35:49 +02:00
EVP_MD-common.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_MD-KECCAK.pod
Add default provider support for Keccak 224, 256, 384 and 512
2021-09-23 12:07:57 +10:00
EVP_MD-MD2.pod
DOCS: Move implementation specific docs away from provider-digest(7)
2020-03-10 13:32:06 +01:00
EVP_MD-MD4.pod
DOCS: Move implementation specific docs away from provider-digest(7)
2020-03-10 13:32:06 +01:00
EVP_MD-MD5-SHA1.pod
DOCS: Move implementation specific docs away from provider-digest(7)
2020-03-10 13:32:06 +01:00
EVP_MD-MD5.pod
DOCS: Move implementation specific docs away from provider-digest(7)
2020-03-10 13:32:06 +01:00
EVP_MD-MDC2.pod
Update copyright year
2021-02-18 15:05:17 +00:00
EVP_MD-ML-DSA-MU.pod
Doc: "ML-DSA external mu" clarify security categories
2026-04-03 17:39:18 +02:00
EVP_MD-NULL.pod
Add documentation for "NULL" cipher and digest algorithms.
2023-02-28 14:26:33 +11:00
EVP_MD-RIPEMD160.pod
ripemd: document as being present in the default provider
2022-10-19 13:21:01 +02:00
EVP_MD-SHA1.pod
DOCS: Move implementation specific docs away from provider-digest(7)
2020-03-10 13:32:06 +01:00
EVP_MD-SHA2.pod
Copyright year updates
2023-09-07 09:59:15 +01:00
EVP_MD-SHA3.pod
Copyright year updates
2026-03-10 14:37:52 +00:00
EVP_MD-SHAKE.pod
Copyright year updates
2026-03-10 14:37:52 +00:00
EVP_MD-SM3.pod
DOCS: Move implementation specific docs away from provider-digest(7)
2020-03-10 13:32:06 +01:00
EVP_MD-WHIRLPOOL.pod
DOCS: Move implementation specific docs away from provider-digest(7)
2020-03-10 13:32:06 +01:00
EVP_PKEY-DH.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_PKEY-DSA.pod
doc: Add missing commas
2025-09-11 16:02:23 +10:00
EVP_PKEY-EC.pod
EC: make the group the single source of the point conversion form
2026-07-10 11:21:28 +02:00
EVP_PKEY-FFC.pod
doc: Add missing commas
2025-09-11 16:02:23 +10:00
EVP_PKEY-HMAC.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_PKEY-LMS.pod
Copyright year updates
2026-03-10 14:37:52 +00:00
EVP_PKEY-ML-DSA.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_PKEY-ML-KEM.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_PKEY-MLX-KEM.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_PKEY-RSA.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_PKEY-SLH-DSA.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_PKEY-SM2.pod
Copyright year updates
2026-03-10 14:37:52 +00:00
EVP_PKEY-X25519.pod
Copyright year updates
2025-09-02 13:05:45 +00:00
EVP_RAND-CRNG-TEST.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_RAND-CTR-DRBG.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_RAND-HASH-DRBG.pod
Copyright year updates
2025-03-12 13:35:59 +00:00
EVP_RAND-HMAC-DRBG.pod
doc: remove mention of MAC parameter to HMAC-DRBG
2025-10-31 09:35:18 +11:00
EVP_RAND-JITTER.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_RAND-SEED-SRC.pod
Fix EVP_RAND-SEED-SRC documentation example
2023-11-30 12:33:17 +01:00
EVP_RAND-TEST-RAND.pod
Copyright year updates
2024-09-05 09:35:49 +02:00
EVP_RAND.pod
Copyright year updates
2024-09-05 09:35:49 +02:00
EVP_SIGNATURE-DSA.pod
Copyright year updates
2026-03-10 14:37:52 +00:00
EVP_SIGNATURE-ECDSA.pod
Fix some missing close parens in signature docs
2026-08-12 12:46:27 +02:00
EVP_SIGNATURE-ED25519.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_SIGNATURE-HMAC.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_SIGNATURE-LMS.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_SIGNATURE-ML-DSA.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_SIGNATURE-RSA.pod
Fix some missing close parens in signature docs
2026-08-12 12:46:27 +02:00
EVP_SIGNATURE-SLH-DSA.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
EVP_SIGNATURE-SM2.pod
Copyright year updates
2026-03-10 14:37:52 +00:00
evp.pod
Docs: Clean up ENGINE mentions
2025-12-04 07:32:18 -05:00
fips_module.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
life_cycle-cipher.pod
doc: remove end of line whitespace
2021-09-22 16:22:50 +10:00
life_cycle-digest.pod
Add EVP_DigestSqueeze() API.
2023-11-10 13:27:00 +01:00
life_cycle-kdf.pod
doc: remove end of line whitespace
2021-09-22 16:22:50 +10:00
life_cycle-mac.pod
doc: remove end of line whitespace
2021-09-22 16:22:50 +10:00
life_cycle-pkey.pod
Update copyright year
2022-05-03 13:34:51 +01:00
life_cycle-rand.pod
doc: remove end of line whitespace
2021-09-22 16:22:50 +10:00
openssl_user_macros.pod.in
fix typo (s/suppresion/suppression)
2026-10-07 17:29:10 +02:00
openssl-core_dispatch.h.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
openssl-core_names.h.pod
DOCS: add openssl-core_names.h(7)
2020-05-29 08:26:10 +02:00
openssl-core.h.pod
Move the description of the core types into their own pages
2022-12-08 07:32:34 +01:00
openssl-env.pod
threads_pthread: make lock contention log location configurable
2026-10-09 21:07:26 +02:00
openssl-glossary.pod
Update copyright year
2022-05-03 13:34:51 +01:00
openssl-qlog.pod
Enable qlog support by default
2024-03-06 20:44:48 +00:00
openssl-quic-concurrency.pod
doc: document QUIC thread cancellation consequences
2026-08-19 12:28:45 +02:00
openssl-quic.pod
docs: fix doubled words in man pages and design docs
2026-08-27 17:19:53 +02:00
openssl-threads.pod
doc: document thread cancellation and non-local exits
2026-08-19 12:28:45 +02:00
OSSL_PROVIDER-base.pod
Copyright year updates
2026-03-10 14:37:52 +00:00
OSSL_PROVIDER-default.pod
ML-KEM-512 hybrid TLS KEMs
2026-09-24 00:40:11 +10:00
OSSL_PROVIDER-FIPS.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
OSSL_PROVIDER-legacy.pod
Update the provider documentation
2023-11-22 10:43:37 +01:00
OSSL_PROVIDER-null.pod
Add missing HISTORY sections for OpenSSL 3.0 related documents.
2022-11-21 12:03:10 +01:00
ossl_store-file.pod
Implementing store support for EVP_SKEY
2025-12-10 12:20:44 -05:00
OSSL_STORE-winstore.pod
OSSL_STORE: Add reference docs for the built-in Windows store implementation
2024-04-19 14:20:58 +02:00
ossl_store.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
ossl-guide-dtlsv13.pod
DTLS listener: make max_pending_conns a combined admission budget
2026-10-14 12:51:10 +02:00
ossl-guide-introduction.pod
Change documentation to point to new wiki location
2025-03-25 20:24:48 +01:00
ossl-guide-libcrypto-introduction.pod
Copyright year updates
2024-04-09 13:43:26 +02:00
ossl-guide-libraries-introduction.pod
Fix new typos found by codespell
2023-09-18 09:04:22 +10:00
ossl-guide-libssl-introduction.pod
Copyright year updates
2025-09-02 13:05:45 +00:00
ossl-guide-migration.pod
Deprecate X509_OBJECT_up_ref_count()
2026-10-02 10:08:58 +02:00
ossl-guide-quic-client-block.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
ossl-guide-quic-client-non-block.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
ossl-guide-quic-introduction.pod
Copyright year updates
2025-03-12 13:35:59 +00:00
ossl-guide-quic-multi-stream.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
ossl-guide-quic-server-block.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
ossl-guide-quic-server-non-block.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
ossl-guide-tls-client-block.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
ossl-guide-tls-client-non-block.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
ossl-guide-tls-introduction.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
ossl-guide-tls-server-block.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
ossl-removed-api.pod
Copyright year updates
2026-03-10 14:37:52 +00:00
passphrase-encoding.pod
Update copyright year
2021-09-07 13:35:43 +02:00
property.pod
Document property string case handling
2026-08-10 19:23:29 +07:00
provider-asym_cipher.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
provider-base.pod
Copyright year updates
2026-03-10 14:37:52 +00:00
provider-cipher.pod
Enforce mandatory cipher get_params at dispatch parse
2026-03-16 11:21:48 +00:00
provider-decoder.pod
Document skey decoder
2025-12-10 12:20:44 -05:00
provider-digest.pod
FIPS: Changes FIPS indicators so that all approved algorithms have a gettable indicator
2026-09-26 23:24:08 +02:00
provider-encoder.pod
Copyright year updates
2025-09-02 13:05:45 +00:00
provider-kdf.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
provider-kem.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
provider-keyexch.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
provider-keymgmt.pod
Copyright year updates
2026-03-10 14:37:52 +00:00
provider-mac.pod
Copyright year updates
2025-03-12 13:35:59 +00:00
provider-object.pod
Update copyright year
2022-05-03 13:34:51 +01:00
provider-rand.pod
doc: remove mention of MAC parameter to HMAC-DRBG
2025-10-31 09:35:18 +11:00
provider-signature.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
provider-skeymgmt.pod
Allow EVP_SKEY_get0_raw_key() to return only the key length
2026-10-05 12:27:11 +02:00
provider-storemgmt.pod
Copyright year updates
2026-09-09 13:12:46 +00:00
provider.pod
Improve documentation about duplicate algorithm registrations
2024-10-23 15:10:49 +02:00
proxy-certificates.pod
doc: remove end of line whitespace
2021-09-22 16:22:50 +10:00
RAND.pod
doc: RAND(7): a restore from a saved image is not detected; reseed after it
2026-10-23 14:51:41 +02:00
RSA-PSS.pod
Following the license change, modify the boilerplates in doc/man7/
2018-12-06 15:36:02 +01:00
x509.pod
Update copyright year
2021-04-22 14:38:44 +01:00
X25519.pod
Update copyright year
2020-04-23 13:55:52 +01:00