Commit 27858603cb for openssl.org

commit 27858603cb3067fa2318b7af16af6ea64686cac0
Author: olszomal <Malgorzata.Olszowka@stunnel.org>
Date:   Fri Jun 12 10:52:05 2026 +0200

    doc: clarify pkeyutl -rawin and -digest for no-prehash signatures

    Complements: 5421423 "Flexible encoders for ML-DSA"

    Signed-off-by: olszomal <Malgorzata.Olszowka@stunnel.org>

    Reviewed-by: Tomas Mraz <tomas@openssl.foundation>
    Reviewed-by: Daniel Kubec <kubec@openssl.foundation>
    MergeDate: Mon Jul 20 09:13:08 2026
    (Merged from https://github.com/openssl/openssl/pull/31478)

diff --git a/doc/man1/openssl-pkeyutl.pod.in b/doc/man1/openssl-pkeyutl.pod.in
index 053385ca0b..590bfe3a6d 100644
--- a/doc/man1/openssl-pkeyutl.pod.in
+++ b/doc/man1/openssl-pkeyutl.pod.in
@@ -677,8 +677,10 @@ L<EVP_PKEY_CTX_set_tls1_prf_md(3)>,
 =head1 HISTORY

 Since OpenSSL 3.5,
-the B<-digest> option implies B<-rawin>, and these two options are
-no longer required when signing or verifying with an Ed25519 or Ed448 key.
+the B<-digest> option implies B<-rawin>. The B<-rawin> option is no longer
+required when signing or verifying with a key type that does not support a
+prehash digest, such as Ed25519, Ed448, ML-DSA, or SLH-DSA. For these key
+types, B<-digest> is not supported.

 Also since OpenSSL 3.5, the B<-kemop> option is no longer required for any of
 the supported algorithms, the only supported B<mode> is now the default.