]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
integrity: Add support for sigv3 verification using ML-DSA keys
authorStefan Berger <stefanb@linux.ibm.com>
Thu, 16 Apr 2026 15:40:39 +0000 (11:40 -0400)
committerMimi Zohar <zohar@linux.ibm.com>
Wed, 13 May 2026 12:21:19 +0000 (08:21 -0400)
commit489d7e2e7e9a31faa38ca25be0e6cbe3eea2960f
tree5fd8688462eb688c2c2f88c970c95334704a41e1
parent33aa0c8cf0657b9588f835645cbbcebe44a2a1ee
integrity: Add support for sigv3 verification using ML-DSA keys

Add support for sigv3 signature verification using ML-DSA in pure mode.
When a sigv3 signature is verified, first check whether the key to use
for verification is an ML-DSA key and therefore uses a hashless signature
verification scheme. The hashless signature verification method uses the
ima_file_id structure directly for signature verification rather than
its digest.

Suggested-by: Eric Biggers <ebiggers@kernel.org>
Signed-off-by: Stefan Berger <stefanb@linux.ibm.com>
Tested-by: Kamlesh Kumar <kam@juniper.net>
Signed-off-by: Mimi Zohar <zohar@linux.ibm.com>
security/integrity/digsig_asymmetric.c