Re: [EXT] Re: How to generate ML-KEM key-pair?

On Sun, Dec 29, 2024 at 08:12:45PM +0000, Blumenthal, Uri - 0553 - MITLL wrote:

> I’m getting a very confusing problem: when I invoke “openssl” from the
> Makefile by “make”, it fails. But when I copy exactly the same command
> line into a Terminal (aka, shell), it works perfectly fine: 

Makefiles run /bin/sh, while your terminal may run bash or zsh, ...
There may also be differences in your PATH, environment, etc. and
then of course which providers are loaded...

> openssl genpkey -algorithm mlkem1024 -outform PEM -out prkey-kem.pem -outpubkey pubkey-kem.pem 

Once OpenSSL 3.5 is released, that'll be ML-KEM-1024, we'll be using the
NIST names for the algorithms.  Only the TLS groups will be hyphen-free.

> Error initializing mlkem1024 context 
> C0642D48F87F0000:error:0308010C:digital envelope
> routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:355:Global
> default library context, Algorithm (mlkem1024 : 0), Properties
> (<null>) make: *** [gen_kem_keys] Error 1 

The algorithm was not found in any provider.


> $ openssl genpkey -algorithm mlkem1024 -outform PEM -out prkey-kem.pem -outpubkey pubkey-kem.pem 

This time the algorithm was found.  The Makefile may be runnign a
different OpenSSL command-line utility.

> What’s wrong??? 

This sort of question is just basic development tooling, not really
OpenSSL-specific.  Ideally you'd do the root cause analysis yourself and
come to the list with actual OpenSSL questions. :-)

-- 
    Viktor.

-- 
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-users+unsubscribe-MCmKBN63+Bmbup2nOX2J7Q@public.gmane.org
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/Z3G5AC4ocakM29Qf%40chardros.imrryr.org.