Req #81724 [PATCH]: openssl_cms/pkcs7_encrypt only allows specific ciphers

Edit report at https://bugs.php.net/bug.php?id=81724&edit=1 ID: 81724 Patch added by: sample@email.tst Reported by: johannes dot drummer at power dot cloud Summary: openssl_cms/pkcs7_encrypt only allows specific ciphers Status: Assigned Type: Feature/Change Request Package: OpenSSL related Operating System: Any PHP Version: 8.1.7 Assigned To: bukka Block user comment: N Private report: N New Comment: The following patch has been added/updated: Patch Name: pHqghUme Revision: 1674339273 URL: https://bugs.php.net/patch-display.php?bug=81724&patch=pHqghUme&revision=1674339273 Previous Comments: ------------------------------------------------------------------------ [2023-01-21 22:14:32] sample at email dot tst The following patch has been added/updated: Patch Name: pHqghUme Revision: 1674339272 URL: https://bugs.php.net/patch-display.php?bug=81724&patch=pHqghUme&revision=1674339272 ------------------------------------------------------------------------ [2023-01-21 21:44:45] sample at email dot tst The following patch has been added/updated: Patch Name: pHqghUme Revision: 1674337485 URL: https://bugs.php.net/patch-display.php?bug=81724&patch=pHqghUme&revision=1674337485 ------------------------------------------------------------------------ [2023-01-21 21:41:15] sample at email dot tst The following patch has been added/updated: Patch Name: pHqghUme Revision: 1674337275 URL: https://bugs.php.net/patch-display.php?bug=81724&patch=pHqghUme&revision=1674337275 ------------------------------------------------------------------------ [2022-07-06 07:41:34] johannes dot drummer at power dot cloud I originally created this request only for cms and not pkcs7 and I didn't check it, I just saw that it was using the same logic, sorry. ------------------------------------------------------------------------ [2022-07-05 22:57:24] bukka@php.net You are confusing normal encryption with PKCS7 and CMS enveloped encryption which has got its own RFC's and limited set of ciphers supported. For PKCS7 there will never be support for AEAD. In terms of CMS, there're RFC's for AEAD and I actually added support for AEAD AES-GCM to OpenSSL in https://github.com/openssl/openssl/pull/8024 which is in OpenSSL 3.0. I'm actually looking and I was wrong in assuming that we don't need any changes in openssl ext for that, which we actually do. So changing this to request to add that. ------------------------------------------------------------------------ The remainder of the comments for this report are too long. To view the rest of the comments, please view the bug report online at https://bugs.php.net/bug.php?id=81724 -- Edit this bug report at https://bugs.php.net/bug.php?id=81724&edit=1