Lines Matching full:seed

82 .IP """seed"" (\fBOSSL_PKEY_PARAM_ML_KEM_SEED\fR) <octet string>" 4
83 .IX Item """seed"" (OSSL_PKEY_PARAM_ML_KEM_SEED) <octet string>"
84 Internally, ML-KEM generates keys using a 64\-byte random value (seed), which is
86 This optional parameter can be used to set a pre-determined seed prior to
89 Generated keys default to retaining the seed used.
90 The seed is also by default retained when keys are loaded from \fBPKCS#8\fR files
91 in the seed format.
92 When available, the seed parameter is also used during key export and import,
93 with keys (by default) regenerated from the seed even when also provided on import.
96 When the seed is retained, it is also available as a \fBgettable\fR parameter,
97 and private key output to \fBPKCS#8\fR files will by default include the seed.
98 When the seed was not initially known, or was not retained, \fBPKCS#8\fR private
154 key, rather than a seed, a pairwise consistency test (PCT) is optionally
165 \&\fBOSSL_PROVIDER_conf_get_bool\fR\|(3)), the seed will not be retained after key
166 generation or key import from a seed value.
172 When decoding PKCS#8 objects that contain both a seed and the FIPS 203 \f(CW\*(C`dk\*(C'\fR
173 private key, the seed is by default used to regenerate the key, and the
176 boolean value (see \fBOSSL_PROVIDER_conf_get_bool\fR\|(3)), the seed is ignored
194 .IX Item "seed-priv:"
196 \&\fB(d, z)\fR seed and the decapsulation key \fBdk\fR are present in the private key
201 \&      seed [0] IMPLICIT OCTET STRING (SIZE (64)),
204 \&        seed OCTET STRING (SIZE (64)),
208 If the \f(CW\*(C`seed\-priv\*(C'\fR format is not included in the list, this format will not be
212 .IX Item "seed-only:"
214 seed is present in the above sequence.
215 If the \f(CW\*(C`seed\-only\*(C'\fR format is not included in the list, this format will not be
235 .IX Item "bare-seed:"
237 the 64\-byte FIPS 204 seed \fB(d, z)\fR without any ASN.1 encapsulation.
238 If the \f(CW\*(C`bare\-seed\*(C'\fR format is not included in the list, this format will not be
263 If the key seed is known, the first listed format will be selected.
264 If the key seed is not known, the first format that omits the seed will be selected.
265 The default order is equivalent to \f(CW\*(C`seed\-priv\*(C'\fR first and \f(CW\*(C`priv\-only\*(C'…
266 both seed and key output when the seed is available, and just the
268 If \f(CW\*(C`seed\-only\*(C'\fR is listed first, then the seed will be output without the key
271 whether the seed is present.
272 The legacy \f(CW\*(C`oqskeypair\*(C'\fR, \f(CW\*(C`bare\-seed\*(C'\fR and \f(CW\*(C`bare\-priv\*(C'…
293 An \fBML-KEM\fR private key in seed format can be converted to a key in the FIPS
298 \&        \-in seed\-only.pem \-out priv\-only.pem
308 If you have a \fBPKCS#8\fR file with both a seed and a key, and prefer to import the
309 companion key rather than the seed, you can run:
313 \&        \-in seed\-priv.pem \-out priv\-only.pem
329 \&    input_formats = seed\-priv, seed\-only, priv\-only
330 \&    # Output either the seed alone, or else the key alone
331 \&    output_formats = seed\-only, priv\-only