certmonger

#301 Experimental support for Post Quantum keys
Opened by rcritten. Modified
rcritten/certmonger pq  into  master

Download 301.patch

Add some experimental support for ML-DSA certificates in both NSS and OpenSSL. This includes some basic key and csr generation tests.

This includes a PR to modernize OpenSSL support to rely more on EVP_PKEY instead of deprecated key-specific types.

rebased onto 5e53a204062a78f7e5c9311bfac3d392d23d5134

6 new commits added

  • Allow requesting a ML-DSA key using a strength
  • Implement more PQ testing for both NSS and OpenSSL
  • Test for PQ support in NSS, print summary at end of configure
  • Add initial ML-DSA support with NSS 3.112.0-4
  • Add initial ML-DSA support with OpenSSL 3.5.0
  • Replace deprecated OpenSSL 3.0.0 function calls

6 new commits added

  • Allow requesting a ML-DSA key using a strength
  • Implement more PQ testing for both NSS and OpenSSL
  • Test for PQ support in NSS, print summary at end of configure
  • Add initial ML-DSA support with NSS 3.112.0-4
  • Add initial ML-DSA support with OpenSSL 3.5.0
  • Replace deprecated OpenSSL 3.0.0 function calls

6 new commits added

  • Allow requesting a ML-DSA key using a strength
  • Implement more PQ testing for both NSS and OpenSSL
  • Test for PQ support in NSS, print summary at end of configure
  • Add initial ML-DSA support with NSS 3.112.0-4
  • Add initial ML-DSA support with OpenSSL 3.5.0
  • Replace deprecated OpenSSL 3.0.0 function calls

rebased onto 84164364a7982e1ffa5c6f28798799a62fa21f30

8 new commits added

  • Add helper function to extract an ML-DSA public key
  • Add abstraction to ML-DSA key sizing to be in line with other algorithms
  • Implement more PQ testing for both NSS and OpenSSL
  • Test for PQ support in NSS, print summary at end of configure
  • Add helper to get the generated key size
  • Add initial ML-DSA support with NSS 3.112.0-4
  • Add initial ML-DSA support with OpenSSL 3.5.0
  • Replace deprecated OpenSSL 3.0.0 function calls

8 new commits added

  • Add helper function to extract an ML-DSA public key
  • Add abstraction to ML-DSA key sizing to be in line with other algorithms
  • Implement more PQ testing for both NSS and OpenSSL
  • Test for PQ support in NSS, print summary at end of configure
  • Add helper to get the generated key size
  • Add initial ML-DSA support with NSS 3.112.0-4
  • Add initial ML-DSA support with OpenSSL 3.5.0
  • Replace deprecated OpenSSL 3.0.0 function calls

rebased onto 85d73c58538ab187f0a88d42dedf18371a72053f

rebased onto 85d73c58538ab187f0a88d42dedf18371a72053f

1 new commit added

  • Skip the mldsa tests if NSS is not capable of mldsa
Metadata
None
No Tags
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.