Add SLH_DSA configuration option

Reviewed-by: Paul Dale <ppzgs1@gmail.com>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25882)

diff --git a/Configure b/Configure
index f70c14134a48381559526fcfcf4d0083a7fae0f9..fce95fb0d58b9811e2a75a66b1edcb692b5e2df5 100755 (executable)
--- a/Configure
+++ b/Configure
@@ -522,6 +522,7 @@ my @disablables = (
     "shared",
     "siphash",
     "siv",
+    "slh-dsa",
     "sm2",
     "sm2-precomp",
     "sm3",

diff --git a/INSTALL.md b/INSTALL.md
index 31a50eeb481569037a7fe16cc3007fda28fb3544..7413356bb650dbdf37acb7f725efe6aaf5f64296 100644 (file)
--- a/INSTALL.md
+++ b/INSTALL.md
@@ -984,6 +984,11 @@ Do not create shared libraries, only static ones.
 
 See [Notes on shared libraries](#notes-on-shared-libraries) below.
 
+### no-slh-dsa
+
+Disable Stateless Hash Based Digital Signature Standard support.
+(SLH-DSA is based on SPHINCS+. See NIST.FIPS.205)
+
 ### no-sm2-precomp
 
 Disable using the SM2 precomputed table on aarch64 to make the library smaller.