Lines Matching full:seed

28 =item "seed" (B<OSSL_PKEY_PARAM_ML_DSA_SEED>) <octet string>
30 The seed can be used to generate the private and public key components in a
33 When this value is not supplied the seed is generated randomly using a DRBG.
35 Generated keys default to retaining the seed used.
36 The seed is also by default retained when keys are loaded from B<PKCS#8> files
37 in the seed format.
38 When available, the seed parameter is also used during key export and import,
39 with keys (by default) regenerated from the seed even when also provided on import.
42 When the seed is retained, it is also available as a B<gettable> parameter,
43 and private key output to B<PKCS#8> files will by default include the seed.
44 When the seed was not initially known, or was not retained, B<PKCS#8> private
94 L<OSSL_PROVIDER_conf_get_bool(3)>), the seed will not be retained after key
95 generation or key import from a seed value.
101 When decoding PKCS#8 objects that contain both a seed and the FIPS 204 C<sk>
102 private key, the seed is by default used to regenerate the key, and the
105 boolean value (see L<OSSL_PROVIDER_conf_get_bool(3)>), the seed is ignored
123 =item C<seed-priv>:
126 B<ξ> seed and the secret key B<sk> are present in the private key as part of
130 seed [0] IMPLICIT OCTET STRING (SIZE (32)),
133 seed OCTET STRING (SIZE (32)),
136 If the C<seed-priv> format is not included in the list, this format will not be
139 =item C<seed-only>:
142 B<ξ> seed is present in the above sequence.
143 If the C<seed-only> format is not included in the list, this format will not be
162 =item C<bare-seed>:
165 the 32-byte FIPS 204 seed B<ξ> without any ASN.1 encapsulation.
166 If the C<bare-seed> format is not included in the list, this format will not be
190 If the key seed is known, the first listed format will be selected.
191 If the key seed is not known, the first format that omits the seed will be selected.
192 The default order is equivalent to C<seed-priv> first and C<priv-only> second, with
193 both seed and key output when the seed is available, and just the
195 If C<seed-only> is listed first, then the seed will be output without the key
198 whether the seed is present.
199 The legacy C<oqskeypair>, C<bare-seed> and C<bare-priv> formats can also be
226 uint8_t pub[2592], priv[4896], seed[32]:
230 seed, sizeof(seed), &seed_len);
236 An B<ML-DSA> private key in seed format can be converted to a key in the FIPS
240 -in seed-only.pem -out priv-only.pem
247 If you have a B<PKCS#8> file with both a seed and a key, and prefer to import the
248 companion key rather than the seed, you can run:
251 -in seed-priv.pem -out priv-only.pem
265 input_formats = seed-priv, seed-only, priv-only
266 # Output either the seed alone, or else the key alone
267 output_formats = seed-only, priv-only