CMakeLists.txt

@@ -37,6 +37,8 @@ if (DEFINED ENABLE_HIGH_BITDEPTH)
   set( ENABLE_HIGH_BITDEPTH OFF CACHE BOOL "ENABLE_HIGH_BITDEPTH will be set to this value" )
 endif()
 
+set( ENABLE_SEARCH_OPENSSL ON CACHE BOOL "ENABLE_SEARCH_OPENSSL will be set to this value" )
+
 if( CMAKE_COMPILER_IS_GNUCC )
   set( BUILD_STATIC OFF CACHE BOOL "Build static executables" )
 endif()

COPYING

@@ -3,7 +3,7 @@ License, included below. This software may be subject to other third party
 and contributor rights, including patent rights, and no such rights are
 granted under this license.   
 
-Copyright (c) 2010-2024, ITU/ISO/IEC
+Copyright (c) 2010-2025, ITU/ISO/IEC
 All rights reserved.
 
 Redistribution and use in source and binary forms, with or without

README.md

@@ -22,6 +22,13 @@ The CMake tool is used to create platform-specific build files.
 
 Although CMake may be able to generate 32-bit binaries, **it is generally suggested to build 64-bit binaries**. 32-bit binaries are not able to access more than 2GB of RAM, which will not be sufficient for coding larger image formats. Building in 32-bit environments is not tested and will not be supported.
 
+Dependencies
+------------
+
+For generating and verifying cryptographic signatures using digitally signed content SEI messages, OpenSSL is required in version 1.1.1 or greater. Testing is performed on OpenSSL 3.
+If OpenSSL is not found or the version is too low, only parsing of digitally signed content SEI messages will be available.
+
+Detection of OpenSSL can be disabled using the cmake option "-DENABLE_SEARCH_OPENSSL=off"
 
 Build instructions for plain CMake (suggested)
 ----------------------------------------------

cfg/keystore/private/attacker_content.csr

------BEGIN CERTIFICATE REQUEST-----
-MIIEoDCCAogCAQAwWzELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMRQwEgYDVQQH
-DAtMb3MgQW5nZWxlczEaMBgGA1UECgwRSlZFVCBpbXBlcnNvbmF0b3IxDTALBgNV
-BAMMBEpWRVQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDdcG/xV8Bb
-owQGTtCdAzrqSQShVoQTT6RReLbOVfJ8ysJEnzkF4X0Kj61FTphyShEnYmbqIAU+
-q/zIWiBIsBW1kvTY6EAhKmCrnN/kREf2HFSH3GyncJosJDtMuDIiKuyJyeKiI/Mv
-/A1eXQyQ/Zp2Kqp9pZbIyBHa76A2ZzOTah7Pdbv/tN3Qxhyf2LYa8QJTdYA/xlt2
-0vd+OGcbs01C3tNnNS7pFgpW0iwIdnq0xdrkFpEENNF6FRQVoVmeDsojieecnALN
-sIabXSaefSHgjixa7IR3IiL2yAs7GpCCK+m9SMRmyptsLZI1i1XswZyoqKzolt80
-V1EUrmypyZA64VXhv2RxZ1gD6cKPCXxA5BaVlmwPAr1C97ZIPsbTWps/+h8kAqEw
-A8Oy2Ji/ro9UmbwSCQiWj/RqBC/m1He0gaHXcIOCEUIE30+f81DtgKJR5Ne03SwV
-+JpveHNwK4cttONwNNV81XxnW5I4seTKIYXFMk3jWYETddfnjyBC4BFJoEqXpKeF
-ubXCx9Ca1SxIqBfvW+3dYcDsc/36pPHTaJqSkMq8b39OO0VyMQKLt1qwY/d6lzNP
-F3Y+s+QDPiGBz4ciWHApIhXP+G3en9IDrmuspI3b7bef2AIPnWEEXc91xcfAxzS2
-dLawrZjyEio4Rl0vZuyfCCmt9CSmQpN43wIDAQABoAAwDQYJKoZIhvcNAQELBQAD
-ggIBAKTszgKEGaV8bt/mCw9w/HBrYvD/N3xP/9fGpOsj+uBpGKhN8zkbJoewD1rQ
-sV7vCkCqOEdJE13QfP2fQrWSqQdyBL6H7RaTGO4wJtvHR7+6oNNWmF0T66P+G1/Z
-PWmq0HYvVGKT5Vn6OInChMXDdUgYmb/ijKXVYTxvP1BNd4LFLypMHy34d6ePBORA
-IHU4WqHz0pOEZVpryHbN1UYSs29rGPNF6oNA3p0S1WStc2ndO+sw+SemfhbH/FBY
-CNuZKPr2gVHADSQ7kAT0e8R6E3MvyKcyn7Y7P43GdRBXKsKMXJo4kdW0ppyDLKj/
-kZOUoBILZIPrdW67H64dNnpL0+MpArywnQYkZ2sXwfEERxpqOsXcr/SYOlYUpk+7
-UJ79vc8+PG6ErKfv5O6+gT0OKx4hYRWFgDFcbLUDwBBpyU/zLPvjuvv6D9wgzqq0
-kjRSvOlIkjcKOM2azeCMG8ykggpCcZeUcPLHHx25S9Sk30a880WkbnY32wcuG42p
-L0SzFmd7R95unJyxcMp8sN8Dja44Wo9ryqavZmxFssZl8hmIR+DUarFhLoa3LSJl
-tMVtJX46o36x3DnWAX9TpBiLQJhHpzgdobvLh5gvWdyVM86nXaiYiAX+E0CZv8zn
-AQ7hCC/wlFbIQr8BU/KO4AEeK3hUMik2loeWb3U3DLoQ6ndA
------END CERTIFICATE REQUEST-----

cfg/keystore/private/attacker_content.key

------BEGIN PRIVATE KEY-----
-MIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQDdcG/xV8BbowQG
-TtCdAzrqSQShVoQTT6RReLbOVfJ8ysJEnzkF4X0Kj61FTphyShEnYmbqIAU+q/zI
-WiBIsBW1kvTY6EAhKmCrnN/kREf2HFSH3GyncJosJDtMuDIiKuyJyeKiI/Mv/A1e
-XQyQ/Zp2Kqp9pZbIyBHa76A2ZzOTah7Pdbv/tN3Qxhyf2LYa8QJTdYA/xlt20vd+
-OGcbs01C3tNnNS7pFgpW0iwIdnq0xdrkFpEENNF6FRQVoVmeDsojieecnALNsIab
-XSaefSHgjixa7IR3IiL2yAs7GpCCK+m9SMRmyptsLZI1i1XswZyoqKzolt80V1EU
-rmypyZA64VXhv2RxZ1gD6cKPCXxA5BaVlmwPAr1C97ZIPsbTWps/+h8kAqEwA8Oy
-2Ji/ro9UmbwSCQiWj/RqBC/m1He0gaHXcIOCEUIE30+f81DtgKJR5Ne03SwV+Jpv
-eHNwK4cttONwNNV81XxnW5I4seTKIYXFMk3jWYETddfnjyBC4BFJoEqXpKeFubXC
-x9Ca1SxIqBfvW+3dYcDsc/36pPHTaJqSkMq8b39OO0VyMQKLt1qwY/d6lzNPF3Y+
-s+QDPiGBz4ciWHApIhXP+G3en9IDrmuspI3b7bef2AIPnWEEXc91xcfAxzS2dLaw
-rZjyEio4Rl0vZuyfCCmt9CSmQpN43wIDAQABAoICAC3Ma/Kj/g5V3Ga7lUzsFprP
-KEyAGsftsGQDTffF8eWaf+x2a/JJ7TUqeyE6/K+inwKgyP1CSyNnqdv8O/IcrRjF
-QKu9+UmCvMSxqOLKtoFx4Y/J6JUG5nQbuEIJVKEZdJuY7C0xt0Hk5RTvtMImGXS4
-JVPgVBvJuVupNN8boCCskZvB03SzAS+FUfVDeoJ+90awpipKia89Od/apYSmpGOg
-t2OAreeaXeAQDvhfHMjXpQqImkye6fZQdrt0iBb3IxqPkp4i7DeDe4uVi/+6jK+n
-aAgUI9+J6WZWAHCkcV/i2jCCZNCHtfZ9RGCbpVVWw+JkJILkdVybdJMM8j95h0Er
-tAcCkBQoOEUYTM/oO0D77XNoAnhLQPYMD2rHO8YI3r6vouxh3y+oCYHzcduHT9in
-FUTi+dqxUmcu/ywUSJOAQiKNPzk9c04gP1MKugJfOEXAPf5Vi7l6R6eMrebAAm/4
-ZzsYyWVm4uvcaikiL84IAdhvM4qORFuOzwfu8SW7vDa5vEU1f2W+P1pGQG8Aquy8
-koKHVbSCckc4qxM8OIfC8HPZBlsUHGgxAk4TLNRktm6VSAhJclWbycyR+IXMWPZQ
-whRkfsqk393uqomomvRGzz9XW+PaLDLZ8CWL3yf/4vTc2cwcBDJrhRyaftBA7xlO
-MSjbFNI6zbFnt+nNSakVAoIBAQD5IuhaeTJiylyjgIiJ3yywgtJzngicnsRmGSDS
-ejq0/vxFfxbtvGxQpJR0TUh9Sqbxhn4DhGBL5rOrFcCTJ3wHenS184zq1FSONDID
-YNw/LKBocTeBANS1QQb5Ea5++wEFRgXLIaAl9D+wSpYJeyFSffQQjhdaml6WU1yX
-KOaOwl5dH9QniWwdSKlT84yYGtFpdJrlgcaTrkVhG5HpWzYhQhaYiMZHFmXl9PTV
-UidVNKHgIypZGIeUCJ07PLfmAfN5WSRIpXWy1tD0aEM4jcDT5/G+TFRoD4WIv1k8
-PhP/t57QNrcMNt8ya3lTpXUp7+tO5Orc7mGXAela+cblEL6zAoIBAQDjijBkAFHQ
-WhFeh3L0Yxog49hWSGolFlulmMGmLTOU1W76LtMrW6pNYpnnAQFWDXHfXCenhawp
-r5caFHQipdj9Ml8y/QAVDUVGfmZacGHD9Gx5PdzoPb6dOB034K+hIu2/v/M1hMr0
-hNhZEzIMd1321iyeQqYL5ZrfVi5KwTCxBvOv0okOwEQrZZUEV8urn3x8XVV3baGc
-KzFYLJao4ENx0Vz+99HeHoHO7RGD8DzEiGnDGQDOMtIzcdrHJ4VFscFHhoo6YLv/
-HY0qfDp28MPkX3vObQ8svK3s9IzPNsDniFfYiN7JGoWDXg2qlute8Wcg9INaCVIV
-NPJrTfRHTPMlAoIBAQCsYYzn3OgSFvbWYr8WtobTcxFu0jAfPnOiOUzOlag9SBkB
-dRhGUpOXkOjvN/IqTxcIEwjqIhQHMI+slxZyO2XEPuS2aNheO6Bt7IuWbtS2GYi7
-+2puJkcHSwEqISPd1Is2POcRUCjhWgkfT9xUnw/FZkUTl11tYVaFKRTtum0c5jwo
-rzc6TAm0kWwoHGJxdEzlbLsohg0CbhivQkZJcsUXagT8cdbPpR3IaR9m4rs4Z3yB
-+5L3ptNYiEVSkYak7UCr/BPw+BtiLOTT17h7TwnXFavdAi98+RBqOAvkdQedbk3C
-v7kUCHuTBW4jhF53L/xe0GH5kC+SLs5qFl2abWWlAoIBABJ3mbvUBs/ZL4WzipHp
-JSq8M0e1ct/1s5R6FGVvT7tpoyss97iSJP1I3mLQQxJ/3tkY+qLvB20Osj3MoSxa
-t4S9PNq/i+0peZDiG16FtnmX8eHZMn+q2ziZYE2zr61tT0x7wLp8P5ie24xHMY2v
-dnHdKhviHuXiSbKMpQ8uJMyJWufPN4557k5zXSfQFFimhgz16kTaIf6xxrx4SfYE
-1ZR8QIb1CBR192Ua+ovxyIzO4X6THeyeVU8Vk4MMYxWn+p7afYeFaFypQlbLZFdY
-7R0w3rR/R3cDDT6pDnCW6gsglridSy+ZNnLWBFfvDcVT5GHZVnvNO9s6w94Pop7S
-0P0CggEAV84AKjEBx/zU7Kvo+5P2Yr89Pzb4rNxinTmz1z5GI0hM9C9GzSJWc+5a
-oK0AyK4aVWHJxCcKbQomTEKfP+08fwgtXFUXIppo+e3S/av9fc/8N79jWgaKT6fF
-wjIAn3dJNNjXf47Q34GpNVo+kTdk2ifGflCqzIDpKTBIPtB9lJaK8mRkdZXwSflB
-zsIC2BLWtdEFiB/VTgdy+P5lyIxZoJT/SMtikL526ptZ0uYzoZXroT7IKl4kgNBM
-YPZYuL2Qs0RyajA3saFB+3CmKp/SV2cwZ98dfMH8tElyHNrAIcyeDv/85gUy8D7J
-9tT+W9KNfEBYdu5W+pE2f6YtzzvSOA==
------END PRIVATE KEY-----

cfg/keystore/private/untrusted_ca.crt

------BEGIN CERTIFICATE-----
-MIIFmzCCA4OgAwIBAgIUXs/OsH/k0XEMr3SbtJSlZ03Dx+YwDQYJKoZIhvcNAQEL
-BQAwXTELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMRYwFAYDVQQHDA1TYW4gRnJh
-bmNpc2NvMQ0wCwYDVQQKDARKVkVUMRowGAYDVQQDDBFKVkVUIHVudHJ1c3RlZCBD
-QTAeFw0yNDExMDExNDM4MzlaFw0yOTExMDExNDM4MzlaMF0xCzAJBgNVBAYTAlVT
-MQswCQYDVQQIDAJDQTEWMBQGA1UEBwwNU2FuIEZyYW5jaXNjbzENMAsGA1UECgwE
-SlZFVDEaMBgGA1UEAwwRSlZFVCB1bnRydXN0ZWQgQ0EwggIiMA0GCSqGSIb3DQEB
-AQUAA4ICDwAwggIKAoICAQDhJGsU27lndILc5lUc7AMTPLSS9Thi4tWwUVWpRVQ6
-da09U5Ep0eytmh1/mUNuFsoO4U9WnwZz9/yCB6L7bn6r6K8AXBvGBN7dXnXMxCdU
-oCt0RPrT1EFxapn58OnyTCVCxTNHFFcNnRHxeeI3uiVBGJexhyQLbDItvDs7lO/t
-Lv48yOI51d+fqMO4RXO5FuazQTMApRU9J9ochHxXDeBGguCwwNP/FtUt0fQJDlid
-Z0jLiUxVBb5OzDSw7azwC5Uw0f80tIkA8PM3XZLv/OCYwPcK+mdoH/2mIaD0ljfz
-l0RAe1BSNPdfz2mvooJPJgRuqQUTso4wHFnedDN5qIpgcDZF+YwwBScHFivxBrrn
-CL0diMuCdVz0VTCIZYV2xS+71TTMzCaM4YGgHZ01yYhkXmMviE47rvnMsehOohSn
-J5iPY66Ir2autC8z7Jcy8f3cSzMirkIElhUqs+65vqUzSPMYcMuu3FaQRLBFiGT0
-UIA3/MOzQYCyfVKjV2yW2bh9VanJTET4BN3ZzFCwJ5wcRyxgIWfzasJjMgZSuw/C
-EH09OjD7MrvFsA1N/iHa0jStepHb8UGFsMAxU428Gm3rXPcTQavk5fgvlO/GqvjS
-FYEvKw6xmVql3jhU2ogF6jKMtVJpAk1Au7b94oCgxiweVm0vCZwlre3enKYAk0TD
-bwIDAQABo1MwUTAdBgNVHQ4EFgQUWZZ84GVCWypA5FAGkuuY7MfsB/wwHwYDVR0j
-BBgwFoAUWZZ84GVCWypA5FAGkuuY7MfsB/wwDwYDVR0TAQH/BAUwAwEB/zANBgkq
-hkiG9w0BAQsFAAOCAgEAEzCBpG6Enn9o6a8umDgDeIleUeHibM1XTlF6GmE3Wi/m
-j9/1GgBIDvXcEBkgO+fMLCwzmVxwEEHa8D+civ3oGcpeKXlRMpA01c4j89ymUjU4
-FxGykzyCb+g28ixAKSUZLd4LtFWMeEH26jfLLHiIT9aPtEEcfSKkmkQixb1JPQrl
-+4KuE6PwJ/M2rgBZqw5VUD1CVFsNgkng50Fc4E9081+C3pVq+KoRVg9yTwZDIswV
-RJsVTJwUwe557FhRBca8B4jShgnJg8HAnNlU0oxebLjnv+1150G0P0ZnrS1Pe4su
-/G6AAh2esTdKSuZHnEzbXMj7U++EZTTiRAM9DLpB1IGMPSYtlMOB/hau+QzobJ+e
-yJTUsjGOWjcrva5nIGul6HkWYAbS4NhHu5FjIuHii9FvQS2yTAyNQz8Sm/qejexf
-MJyDyBFodNoMLkTNe7qskkWRVbAU6IalqZqV6Gfjf3WKdfq5IkDmmwyBQnUwu1Ie
-OWbJsi/6zqNUqPyymzdVORar7zRhPNRW0PV1Or9l9v/czTvvOUL/Vs6sZseaMO54
-9NNoq0LSaELroQy9xn2oPi9vajwd4Y5ea5hUMNfXAMb3vh7PWW/gQyfdxh1Qyccz
-on+TMBo+b0hbvq+bbQFpqYkLpmPQO/bboSNV+C16ca13Sod7FijTUkzaqM0gUws=
------END CERTIFICATE-----

cfg/keystore/private/untrusted_ca.key

------BEGIN PRIVATE KEY-----
-MIIJQgIBADANBgkqhkiG9w0BAQEFAASCCSwwggkoAgEAAoICAQDhJGsU27lndILc
-5lUc7AMTPLSS9Thi4tWwUVWpRVQ6da09U5Ep0eytmh1/mUNuFsoO4U9WnwZz9/yC
-B6L7bn6r6K8AXBvGBN7dXnXMxCdUoCt0RPrT1EFxapn58OnyTCVCxTNHFFcNnRHx
-eeI3uiVBGJexhyQLbDItvDs7lO/tLv48yOI51d+fqMO4RXO5FuazQTMApRU9J9oc
-hHxXDeBGguCwwNP/FtUt0fQJDlidZ0jLiUxVBb5OzDSw7azwC5Uw0f80tIkA8PM3
-XZLv/OCYwPcK+mdoH/2mIaD0ljfzl0RAe1BSNPdfz2mvooJPJgRuqQUTso4wHFne
-dDN5qIpgcDZF+YwwBScHFivxBrrnCL0diMuCdVz0VTCIZYV2xS+71TTMzCaM4YGg
-HZ01yYhkXmMviE47rvnMsehOohSnJ5iPY66Ir2autC8z7Jcy8f3cSzMirkIElhUq
-s+65vqUzSPMYcMuu3FaQRLBFiGT0UIA3/MOzQYCyfVKjV2yW2bh9VanJTET4BN3Z
-zFCwJ5wcRyxgIWfzasJjMgZSuw/CEH09OjD7MrvFsA1N/iHa0jStepHb8UGFsMAx
-U428Gm3rXPcTQavk5fgvlO/GqvjSFYEvKw6xmVql3jhU2ogF6jKMtVJpAk1Au7b9
-4oCgxiweVm0vCZwlre3enKYAk0TDbwIDAQABAoICAAfKltoV8IigA5dZcUCa+lBE
-HYuoaNcjOnnrlqdQ+uU7BU/GAJQN677mQncT+r1olH2HVpOM1VBWGKr3ULCa1k9k
-sgm1JlDoAj5u8myvrRzEnjxb1sJV6h3ero1zxOTZtcBlyqx/C7Qw51oP+cAr9PYX
-v8gpARpUGDh09yfMs7Dlm27HFO0jdaW01XEfFi4lmL5DV1yCWgXPx0CNZTAuDsDh
-7pyvT6bYR3Baf7OAh5iK5n4EtluK41cewgQNdZqpC/Swj8BnLwaVUBVua5NakPs4
-UlRS7hkwYjrJlyRfvnfzmC0TF2iA5L6wEtw9J31Nt4GM39wapckMch+8rbtcFc3H
-9n7xHK2s/WYwDWvw8OG34kJ7mDsXTZB3B0h+KijTe3IGD5W2Ep2JdjNrdD+1yxxy
-HAOsO9LLlunXjEfYtvLCKhk4FDicZRgdRAFs6j1kRxAjl2fCjrUypXJUTb6jWj21
-3hQKb5s7FhtnKx7QgW7EGuVT74K9ORQRHFGljphwEqInWMbQd2UHIX1iJHpNhVdT
-V1Nhap8efbuw//nGuV+6LuuCcxJhArnpU7fdkFh7oejCXYRuAvs8le9vR2LF7jGd
-dctx0Ar01lndZJXTN3NKiP3tDh0TWnODaSqZm8j6VRqqjm8ujSpV115qdd3Fc4FL
-muQUTWNTuY6RKQb7PKjBAoIBAQDwhAhj7taczSJtWvvUgMR+7O+sy7tWiVWDpuyZ
-jm7R0veKFaLcMJ7lWSslPpgNHItEi9jh0pEkA/wqs4dTU38QTH4kTtINuDWr0la1
-dW8ZUUdZDXJy7ascIQ1zTjHZ8HusbxwIC/C6sES7ub+6dKVLmVbJYoDff8lFiSYx
-ymDxy1mJ0Nl8PqImo8Q4V7sjGisGhABIFMc+fvZxl0GQB94P/N7CsyYR1jPPgVE2
-zjrnK3t9yA2azx0PYml2y+ZejwnQdwGegDjp4KScc8jJlVZ77DmgTKr1xQtplab1
-I8IKwYTb2/XoJlujdk6jgwieIrcEZ6kCh7734RRdVhbUpWpnAoIBAQDvowNio1sG
-evIKYldbOHryHKq3HxRhH3+ZIOoxtFK21LIQPstjDlrJnqZyw2URb6inG8Pilt2g
-5Atljj5kHGs9IFdvhY+7rQ+RJ0iReDFGyeHaROpA66EcpXF8N3Nzu16nYBomax/N
-hQ38tqMxsS5Wb4WtpCsTdptQH92OWqYHL0JGUwyRd/HNPLw5Atb+Og75eRx95WXW
-1XbT4sn6XWYVbE/dPSy1xEfTRPeq278S8wcQZbWO82WEyiNhLfaLc3m+O1bC1VlC
-1Gp92f3nHTempLWmS34e5aWIbLlSYp5il78ySKbpzWXiVPkV31FZGydO1w4FG6rD
-Cy1FOjmhUMm5AoIBAEyyngZYLKIWHGto/zOV2JNtNUUSNuxyoQ15lqulKxvIPd4P
-5j53VsRmegbHfi94McUrH39r6ZLlnm1zkKz2zGdDLVqgtAVh/+OKENKO313geHMi
-gaO6vL0coTBq+CS6toWXbQX34M131oNSyZxJBEkmXfGccuJS2rlM8hwgoGea5DO5
-oREo3AacZL9e4rNf7eaHA5v43EzGqgoxJNwsVhkdF2BZRsObXixG3cIvY8NCL4A9
-4nDCqU61oFIc1ZrD3GpY+PA1jXCvjW7C0X3PHKQqAXpn2IDFVE1YRsSXoZJSge6m
-pzVfvgtTd+JWr9HV2i0SbWf8J97eLONSx7cKBPMCggEAWiAs/cQCUAWdUlp6EEzF
-sJkne4es2npGOwkuC1OOaETGU2XKiI61hm6smyzxrgUYoQDIQ0gKQqCByMgenvgx
-POQU/lR1IliMKkNj/5H8tmrnDngswg3cojF25QjV2wj1KG30Z86SP3FzOUBXUDEb
-BFcdJ5k+uis5boENiqR9HOahPmGtsGg0AMR+5dIzmZmsWBc8p/zGuG3AKyB4ZjkK
-U7RQtRx03Efd249stk2/JxlP5tLZ3dGctLxxYfMvbnMXrnwSvWQQFhpdkseRvoI2
-k+4Og2SRIn2sLAr4CAwfFWWM+xRn8jbVwrHCnH9I0QJtXjFzjGhDaOejNw4W7py7
-wQKCAQEA2vnNu3aEjPuU/v3YHAT/TtjQt5LVRuj18jsSPHnB5+Wot80GITBlbBwx
-8bduAAhqIucrlgSHMqh/GxrXx3KPvvxxqrvQ5wJMzG3hoFcY6CKAIWLcOoQKYZJX
-UVuJq+kFx2U9R0AVRLB6mofGPS50sN7TjB4ZidjQtPkNoZDA6I5i9E48fedJnZRE
-KjKqfC/N3PQojnnhgODZSa0UHeFwH4jXX+22FGjYLVF9IQkio7l0O7HGMnYbL1fE
-kpLLpZu06Zsd9VVSWvEJDNb14Itp/uURuU3e33s2kUEAXeCjvM3q7ktUPLb2siev
-1A9XGKMkAjtKzNZOR1ZtXpMec+CxAQ==
------END PRIVATE KEY-----

cfg/keystore/public/attacker_content.crt

------BEGIN CERTIFICATE-----
-MIIFiDCCA3CgAwIBAgIUagF3iqmccPfLUlrlZgtBbJp93okwDQYJKoZIhvcNAQEL
-BQAwXTELMAkGA1UEBhMCVVMxCzAJBgNVBAgMAkNBMRYwFAYDVQQHDA1TYW4gRnJh
-bmNpc2NvMQ0wCwYDVQQKDARKVkVUMRowGAYDVQQDDBFKVkVUIHVudHJ1c3RlZCBD
-QTAeFw0yNDExMDExNDQyMzRaFw0yNjExMDExNDQyMzRaMFsxCzAJBgNVBAYTAlVT
-MQswCQYDVQQIDAJDQTEUMBIGA1UEBwwLTG9zIEFuZ2VsZXMxGjAYBgNVBAoMEUpW
-RVQgaW1wZXJzb25hdG9yMQ0wCwYDVQQDDARKVkVUMIICIjANBgkqhkiG9w0BAQEF
-AAOCAg8AMIICCgKCAgEA3XBv8VfAW6MEBk7QnQM66kkEoVaEE0+kUXi2zlXyfMrC
-RJ85BeF9Co+tRU6YckoRJ2Jm6iAFPqv8yFogSLAVtZL02OhAISpgq5zf5ERH9hxU
-h9xsp3CaLCQ7TLgyIirsicnioiPzL/wNXl0MkP2adiqqfaWWyMgR2u+gNmczk2oe
-z3W7/7Td0MYcn9i2GvECU3WAP8ZbdtL3fjhnG7NNQt7TZzUu6RYKVtIsCHZ6tMXa
-5BaRBDTRehUUFaFZng7KI4nnnJwCzbCGm10mnn0h4I4sWuyEdyIi9sgLOxqQgivp
-vUjEZsqbbC2SNYtV7MGcqKis6JbfNFdRFK5sqcmQOuFV4b9kcWdYA+nCjwl8QOQW
-lZZsDwK9Qve2SD7G01qbP/ofJAKhMAPDstiYv66PVJm8EgkIlo/0agQv5tR3tIGh
-13CDghFCBN9Pn/NQ7YCiUeTXtN0sFfiab3hzcCuHLbTjcDTVfNV8Z1uSOLHkyiGF
-xTJN41mBE3XX548gQuARSaBKl6Snhbm1wsfQmtUsSKgX71vt3WHA7HP9+qTx02ia
-kpDKvG9/TjtFcjECi7dasGP3epczTxd2PrPkAz4hgc+HIlhwKSIVz/ht3p/SA65r
-rKSN2+23n9gCD51hBF3PdcXHwMc0tnS2sK2Y8hIqOEZdL2bsnwgprfQkpkKTeN8C
-AwEAAaNCMEAwHQYDVR0OBBYEFD1kAkh1OfE4EO2JlgA3baJGdQCjMB8GA1UdIwQY
-MBaAFFmWfOBlQlsqQORQBpLrmOzH7Af8MA0GCSqGSIb3DQEBCwUAA4ICAQB32dc0
-Nil3mC/yOL/+CycJttuULseT8OYvugq3wb0f3Xcf5Z92drFSqCDqEIMoHPzx4x1q
-eXq8RjWX4uxJP2bCd8CEC85oi5VOMPj6JlUWSv4PuBl3SWpS17ZWUooDD6eNoXDu
-nmVnAuQ28HE9gn7MeOfArEqPxyt+ZV+vD5CXw37We/csTqR+wOrKWci66wUh6MAn
-fQmTcvhh/Gkh/yGoT41P2rjDdcI10na3wRUUCNBM9qa/+gZOCr6AizJYw2tk5D1q
-CQwdbFLIucXnvbf1M8VEZIN8PtlVn+UzHRY2AX9aHmehBUOnKVNO8Rzo0lMH2QvW
-VYMm28zZFU9Vj/yyOXEwmrNEsbN6lH7vrrNpglk79z1tYVI2OFGCy76GdxFtM+pN
-K0N8+QZ/02Aco+KqgQXW6ztTZMk52R/60owF1Qufrlk87zIzX1lcqnOCja5f1/1j
-QQrtVWQ7z9ZbBo79ppOCmf9vsn4onb6rlr47cP69MuhWd3m19+UdTMzUzWcQuDVv
-eOXZU1jZC+DclkxNJXJrh4MD4TGiUfp2cbliTiP+oxqg7fv4bKaVFONPfCb5thqe
-MXSze4K//546XZeU32h4fJKz7v1pbFiD1TRisA/ScH/tsVRBWdiWNpMHIjcM9ZAl
-Y9xuHIQRvS3B+Vs+VEow7u9sql1BW5ls43WVmQ==
------END CERTIFICATE-----

cfg/sei_vui/neural_network_post_filter_activation.cfg

@@ -2,3 +2,6 @@
 
 SEINNPostFilterActivationEnabled:           1
 SEINNPostFilterActivationTargetId:          1
+SEINNPostFilterActivationPromptUpdateFlag:  0
+SEINNPostFilterActivationPrompt:            Test
+SEINNPostFilterActivationNumInputPicShift:  0
\ No newline at end of file

doc/software-manual.tex

@@ -205,7 +205,7 @@ fontsize=\footnotesize}
 \maketitle
 \begin{abstract}
 This document is a user manual describing usage of the VTM reference software
-for the VVC project. It applies to version 23.5 of the software.
+for the VVC project. It applies to version 23.7 of the software.
 \end{abstract}
 
 \tableofcontents
@@ -269,6 +269,14 @@ This allows the software to use more than 2GB of RAM.
 
 The software uses CMake to create platform-specific build files. 
 
+\subsection {Dependencies}
+
+For generating and verifying cryptographic signatures using digitally signed content SEI messages, OpenSSL is required in version 1.1.1 or greater.
+Testing is performed on OpenSSL 3.
+If OpenSSL is not found or the version is too low, only parsing of digitally signed content SEI messages will be available.
+
+Detection of OpenSSL can be disabled using the cmake option "-DENABLE_SEARCH_OPENSSL=off"
+
 \subsection {Build instructions for plain CMake (suggested)}
 
 \textbf{Note:} A working CMake installation is required for building the software.
@@ -5719,6 +5727,14 @@ Specifies sii_num_units_in_shutter_interval for single entry.If multiple entries
   \Default{0} &
   Specifies that auxiliary input data may be present in the neural network input tensor for any allowed luma-only, chroma-only, and luma-chroma configuration.
   \\
+  \Option{SEINNPFCInbandPromptFlag\emph{i}} &
+  \Default{0} &
+  Specifies that nnpfc_prompt syntax element is present and nnpfc_alignment_zero_bit_c syntax element may be present.
+  \\
+  \Option{SEINNPFCPrompt\emph{i}} &
+  \Default{""} &
+  Specifies the nnpfc_prompt text string prompt.
+  \\
   \Option{SEINNPFCSepColDescriptionFlag\emph{i}} &
   \Default{false} &
   Specifies that the colour primaries, transfer characteristics, and matrix coefficients of the picture that results from the neural-network post filtering may be different than for the input to the filter.
@@ -6016,6 +6032,18 @@ Specifies sii_num_units_in_shutter_interval for single entry.If multiple entries
   \Default{\NotSet} &
   Specifies a list of flags indicating whether the NNPF-generated picture that corresponds to the input picture having index InpIdx[i] is output or not.
   \\
+  \Option{SEINNPostFilterActivationPromptUpdateFlag} &
+  \Default{0} &
+  Specifies whether input prompt update is present or not.
+  \\
+  \Option{SEINNPostFilterActivationPrompt} &
+  \Default{""} &
+  Specifies updated input prompt, if present.
+  \\
+  \Option{SEINNPostFilterActivationNumInputPicShift} &
+  \Default{0} &
+  Specifies number of input picture shift.
+  \\
 \end{OptionTableNoShorthand}
 
 \begin{OptionTableNoShorthand}{Phase indication}{tab:sei-phase-indication}
@@ -6090,9 +6118,9 @@ Specifies that breadth-first handling of processing chain is applied (1), or tha
 \Default{false} &
 Specifies whether the \emph{i}-th SEI message is (true) wrapped inside the SEI processing order SEI message or (false) present outside the SEI processing order SEI. For wrapped SEI, specifiy the SEI parameters after SEIPOPrefixByte
 \\
-\Option{SEIPOImportanceFlag\emph{i}} &
+\Option{SEIPOImportanceIdc\emph{i}} &
 \Default{false} &
-Specifies whether the \emph{i}-th SEI message is (true) important or (false) not.
+Specifies importance idc of the \emph{i}-th SEI message.
 \\
 \Option{SEIPOPrefixFlag\emph{i}} &
 \Default{0} &
@@ -6162,6 +6190,14 @@ Specifies the value of object based indication.
  (SEIEOIObjectBasedIdc \& 0x04)  !=  0 & Areas outside the detected objects have been overwritten. For example, an encoding system can overwrite areas outside the detected objects with a constant sample value. \\
 \end{tabular}
 \\
+\Option{SEIEOIQuantThresholdDelta} &
+\Default{0} &
+Indicates the quantization parameter threshold determining areas classified to be outside the detected objects or to include one or more detected objects (0 = unknown or unspecified).
+\\
+\Option{SEIEOIPicQuantObjectFlag} &
+\Default{0} &
+Value of 1 indicates that areas with $QP >= PicQuant + SEIEOIQuantThresholdDelta$ represent areas outside the detected objects. Value of 0 indicates that areas with $QP <= PicQuant - SEIEOIQuantThresholdDelta$ represent areas that include objects.
+\\
 \Option{SEIEOITemporalResamplingTypeFlag} &
 \Default{1} &
 Specifies whether temporal resampling type optimization is enabled.
@@ -6277,6 +6313,10 @@ Specifies the number of time units that pass in one second.
 \Default{1080000} &
 Specifies the number of time units of a clock operating at the frequency spti_time_scale Hz that corresponds to the indicated elemental source picture interval of consecutive pictures in output order in the CLVS.
 \\
+\Option{SEISPTIDirectionFlag} &
+\Default{false} &
+Indicates the direction of the signalled source picture intervals. spti_direction_flag equal to 0 indicates that source picture intervals are expressed relative to previous output pictures. spti_direction_flag equal to 1 indicates that source picture intervals are expressed relative to future output pictures.
+\\
 \end{OptionTableNoShorthand}
 
 \begin{OptionTableNoShorthand}{Modality Information SEI messages }{tab:sei-modality-info}

source/App/BitstreamExtractorApp/BitstreamExtractorApp.cpp

@@ -3,7 +3,7 @@
  * and contributor rights, including patent rights, and no such rights are
  * granted under this license.
  *
- * Copyright (c) 2010-2024, ITU/ISO/IEC
+ * Copyright (c) 2010-2025, ITU/ISO/IEC
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without

source/App/BitstreamExtractorApp/BitstreamExtractorApp.h

@@ -3,7 +3,7 @@
  * and contributor rights, including patent rights, and no such rights are
  * granted under this license.
  *
- * Copyright (c) 2010-2024, ITU/ISO/IEC
+ * Copyright (c) 2010-2025, ITU/ISO/IEC
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without

source/App/BitstreamExtractorApp/BitstreamExtractorAppCfg.cpp

@@ -3,7 +3,7 @@
  * and contributor rights, including patent rights, and no such rights are
  * granted under this license.
  *
- * Copyright (c) 2010-2024, ITU/ISO/IEC
+ * Copyright (c) 2010-2025, ITU/ISO/IEC
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without

source/App/BitstreamExtractorApp/BitstreamExtractorAppCfg.h

@@ -3,7 +3,7 @@
  * and contributor rights, including patent rights, and no such rights are
  * granted under this license.
  *
- * Copyright (c) 2010-2024, ITU/ISO/IEC
+ * Copyright (c) 2010-2025, ITU/ISO/IEC
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without

source/App/BitstreamExtractorApp/bitstreamextractormain.cpp

@@ -3,7 +3,7 @@
  * and contributor rights, including patent rights, and no such rights are
  * granted under this license.
  *
- * Copyright (c) 2010-2024, ITU/ISO/IEC
+ * Copyright (c) 2010-2025, ITU/ISO/IEC
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without

source/App/DecoderApp/DecApp.cpp

@@ -3,7 +3,7 @@
  * and contributor rights, including patent rights, and no such rights are
  * granted under this license.
  *
- * Copyright (c) 2010-2024, ITU/ISO/IEC
+ * Copyright (c) 2010-2025, ITU/ISO/IEC
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without

source/App/DecoderApp/DecApp.h

@@ -3,7 +3,7 @@
  * and contributor rights, including patent rights, and no such rights are
  * granted under this license.
  *
- * Copyright (c) 2010-2024, ITU/ISO/IEC
+ * Copyright (c) 2010-2025, ITU/ISO/IEC
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without

source/App/DecoderApp/DecAppCfg.cpp

@@ -3,7 +3,7 @@
  * and contributor rights, including patent rights, and no such rights are
  * granted under this license.
  *
- * Copyright (c) 2010-2024, ITU/ISO/IEC
+ * Copyright (c) 2010-2025, ITU/ISO/IEC
  * All rights reserved.
  *
  * Redistribution and use in source and binary forms, with or without