Skip to content

PQC/ML-DSA: Add ML-DSA 87 support - #135

Merged
vathpela merged 5 commits into
rhboot:mainfrom
nfrayer:main
Aug 7, 2026
Merged

PQC/ML-DSA: Add ML-DSA 87 support#135
vathpela merged 5 commits into
rhboot:mainfrom
nfrayer:main

Conversation

@nfrayer

@nfrayer nfrayer commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

No description provided.

Signed-off-by: Nicolas Frayer <nfrayer@redhat.com>
This adds a test suite for efikeygen that tests making RSA and ML-DSA-87
certs.

Signed-off-by: Peter Jones <pjones@redhat.com>
This adds "efikeygen --digest DIGEST" support, which allows the user to
specify which digest to use in certificate signatures.  "efikeygen
--digest help" is also implemented to list the supported algorithms:

$ src/efikeygen --digest help
Supported digest algorithms: sha256 sha384 sha512 ml-dsa-87

Signed-off-by: Peter Jones <pjones@redhat.com>
Signed-off-by: Peter Jones <pjones@redhat.com>
The version of NSS on Fedora 43 and CentOS 9 doesn't support ML-DSA at
runtime, and thus will always fail.

It's not an efikeygen bug, so just disable it here.

Signed-off-by: Peter Jones <pjones@redhat.com>
@vathpela
vathpela merged commit 74dc87c into rhboot:main Aug 7, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants