tree c2a79df91cc7b69aec6423c3949a02f6262b64b0
parent b053ba19884415794504c1bcffa910f0295598f0
author Michael Brown <mcb30@ipxe.org> 1724857795 +0100
committer Michael Brown <mcb30@ipxe.org> 1724858234 +0100

[crypto] Add cmsdetach script for detaching encrypted data from CMS messages

The openssl toolchain does not currently seem to support creating CMS
envelopedData or authEnvelopedData messages with detached encrypted
data.

Add a standalone tool "cmsdetach" that can be used to detach the
encrypted data from a CMS message.  For example:

  openssl cms -encrypt -binary -aes-256-gcm -recip client.crt \
              -in bootfile -outform DER -out bootfile.cms

  cmsdetach bootfile.cms --data bootfile.dat --envelope bootfile.env

Signed-off-by: Michael Brown <mcb30@ipxe.org>