The openssl smime utility only supports RSA keys for encryption (more
specifically, the PKCS7 container that it uses can't be used with other
key types). The cms utility supports newer versions of the SMIME RFCs,
including the use DH ephemeral-static algorithms for encrypting the
symmetric key use
On Wed, Aug 25, 2021 at 04:00:31PM -0400, Craig Gallek wrote:
The openssl smime utility only supports RSA keys for encryption (more
specifically, the PKCS7 container that it uses can't be used with other
key types). The cms utility supports newer versions of the SMIME RFCs,
including the use DH