CMS\_ENCRYPTEDDATA\_ENCRYPT(3ossl) OpenSSL CMS\_ENCRYPTEDDATA\_ENCRYPT(3ossl)

# [NAME](#NAME)

CMS\_EncryptedData\_encrypt\_ex, CMS\_EncryptedData\_encrypt - Create CMS EncryptedData

# [SYNOPSIS](#SYNOPSIS)

```
 #include <openssl/cms.h>
 CMS_ContentInfo *CMS_EncryptedData_encrypt_ex(BIO *in,
                                               const EVP_CIPHER *cipher,
                                               const unsigned char *key,
                                               size_t keylen,
                                               unsigned int flags,
                                               OSSL_LIB_CTX *ctx,
                                               const char *propq);
 CMS_ContentInfo *CMS_EncryptedData_encrypt(BIO *in,
     const EVP_CIPHER *cipher, const unsigned char *key, size_t keylen,
     unsigned int flags);
```

# [DESCRIPTION](#DESCRIPTION)

**CMS\_EncryptedData\_encrypt\_ex()** creates a **CMS\_ContentInfo** structure with a type **NID\_pkcs7\_encrypted**. *in* is a BIO containing the data to encrypt using *cipher* and the encryption key *key* of size *keylen* bytes. The library context *libctx* and the property query *propq* are used when retrieving algorithms from providers. *flags* is a set of optional flags.

The *flags* field supports the options **CMS\_DETACHED**, **CMS\_STREAM** and **CMS\_PARTIAL**. Internally **CMS\_final()** is called unless **CMS\_STREAM** and/or **CMS\_PARTIAL** is specified.

The algorithm passed in the *cipher* parameter must support ASN1 encoding of its parameters. AEAD cipher algorithms are not supported.

The **CMS\_ContentInfo** structure can be freed using [**CMS\_ContentInfo\_free**(3)](/man/os/openssl-4.0/CMS_ContentInfo_free.3).

**CMS\_EncryptedData\_encrypt()** is similar to **CMS\_EncryptedData\_encrypt\_ex()** but uses default values of NULL for the library context *libctx* and the property query *propq*.

# [RETURN VALUES](#RETURN_VALUES)

If the allocation fails, **CMS\_EncryptedData\_encrypt\_ex()** and **CMS\_EncryptedData\_encrypt()** return NULL and set an error code that can be obtained by [**ERR\_get\_error**(3)](/man/os/openssl-4.0/ERR_get_error.3). Otherwise they return a pointer to the newly allocated structure.

# [SEE ALSO](#SEE_ALSO)

[**ERR\_get\_error**(3)](/man/os/openssl-4.0/ERR_get_error.3), [**CMS\_final**(3)](/man/os/openssl-4.0/CMS_final.3), [**CMS\_EncryptedData\_decrypt**(3)](/man/os/openssl-4.0/CMS_EncryptedData_decrypt.3)

# [HISTORY](#HISTORY)

The **CMS\_EncryptedData\_encrypt\_ex()** method was added in OpenSSL 3.0.

# [COPYRIGHT](#COPYRIGHT)

Copyright 2020-2021 The OpenSSL Project Authors. All Rights Reserved.

Licensed under the Apache License 2.0 (the "License"). You may not use this file except in compliance with the License. You can obtain a copy in the file LICENSE in the source distribution or at &lt;https://www.openssl.org/source/license.html&gt;.

2026-09-29 4.0.3

---

Document: CMS_EncryptedData_encrypt(3ossl) from openssl-4.0 4.0.3-r3 (Chainguard OS)