]> git.ipfire.org Git - thirdparty/openssl.git/commit
ASN.1 format tagging seed, key now octet string
authorViktor Dukhovni <openssl-users@dukhovni.org>
Wed, 5 Feb 2025 05:30:15 +0000 (16:30 +1100)
committerTomas Mraz <tomas@openssl.org>
Fri, 14 Feb 2025 09:50:59 +0000 (10:50 +0100)
commit096fde92e79d7d4b276b03e5b331f39b5e32de3d
tree6bc9e2603a01132d32e6d1cfbebaeb95b14ccbe0
parent0fb5a78acd35ce41738631a60106701694bcab11
ASN.1 format tagging seed, key now octet string

- The main ASN.1 private key syntax is the one from Russ Housley's post
  on the LAMPS list, subsequently amended to tag the seed instead of the
  key (each of the three parameter sets will have a fixed size for the
  `expandedKey`):

    ML-DSA-PrivateKey ::= CHOICE {
      seed [0] IMPLICIT OCTET STRING SIZE (64),
      expandedKey OCTET STRING SIZE (1632 | 2400 | 3168)
      both SEQUENCE {
        seed OCTET STRING SIZE (64),
        expandedKey OCTET STRING SIZE (1632 | 2400 | 3168) } }

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26639)
19 files changed:
doc/man7/EVP_PKEY-ML-KEM.pod
providers/implementations/encode_decode/ml_kem_codecs.c
providers/implementations/encode_decode/ml_kem_codecs.h
test/recipes/15-test_ml_kem_codecs.t
test/recipes/15-test_ml_kem_codecs_data/prv-1024-oqskeypair.pem [moved from test/recipes/15-test_ml_kem_codecs_data/prv-1024-pair-oqs.pem with 100% similarity]
test/recipes/15-test_ml_kem_codecs_data/prv-1024-priv-only.pem
test/recipes/15-test_ml_kem_codecs_data/prv-1024-priv-oqs.pem [deleted file]
test/recipes/15-test_ml_kem_codecs_data/prv-1024-seed-only.pem
test/recipes/15-test_ml_kem_codecs_data/prv-1024-seed-priv.pem
test/recipes/15-test_ml_kem_codecs_data/prv-512-oqskeypair.pem [moved from test/recipes/15-test_ml_kem_codecs_data/prv-512-pair-oqs.pem with 100% similarity]
test/recipes/15-test_ml_kem_codecs_data/prv-512-priv-only.pem
test/recipes/15-test_ml_kem_codecs_data/prv-512-priv-oqs.pem [deleted file]
test/recipes/15-test_ml_kem_codecs_data/prv-512-seed-only.pem
test/recipes/15-test_ml_kem_codecs_data/prv-512-seed-priv.pem
test/recipes/15-test_ml_kem_codecs_data/prv-768-oqskeypair.pem [moved from test/recipes/15-test_ml_kem_codecs_data/prv-768-pair-oqs.pem with 100% similarity]
test/recipes/15-test_ml_kem_codecs_data/prv-768-priv-only.pem
test/recipes/15-test_ml_kem_codecs_data/prv-768-priv-oqs.pem [deleted file]
test/recipes/15-test_ml_kem_codecs_data/prv-768-seed-only.pem
test/recipes/15-test_ml_kem_codecs_data/prv-768-seed-priv.pem