From a0f475daba6dcbe3088ff8943810d15cecd2c971 Mon Sep 17 00:00:00 2001
From: Dmitry Belyavskiy <beldmit@users.noreply.github.com>
Date: Mon, 19 Aug 2024 14:20:22 +0200
Subject: [PATCH] A note about key encapsulation/decapsulation support in
 OpenSSL (#486)

Related: #485

Signed-off-by: Dmitry Belyavskiy <beldmit@gmail.com>
---
 README.md | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/README.md b/README.md
index 8df044be..53271c73 100644
--- a/README.md
+++ b/README.md
@@ -144,6 +144,13 @@ Also not fully supported in 3.0.2 is performance testing as per the openssl
 These versions have full support for all TLS1.3 operations using PQ algorithms
 when deploying `oqsprovider`.
 
+## 3.4 and greater
+
+These version are expected to support the `openssl pkeyutl -encap/-decap`
+syntax for testing key encapsulation and decapsulation for test purposes. To
+use this option, OQS provider should be built with KEM encoding/decoding
+support.
+
 ## All versions
 
 A limitation present in older OpenSSL versions is the number of default groups