]> git.ipfire.org Git - thirdparty/openssl.git/commit
Separate public and private ML-KEM allocations
authorDaniel Frink <daniel.frink@ibm.com>
Mon, 9 Jun 2025 21:26:32 +0000 (16:26 -0500)
committerTomas Mraz <tomas@openssl.org>
Mon, 7 Jul 2025 13:40:47 +0000 (15:40 +0200)
commitb4fedba43caab2980e9d329422e7b0127d603949
treed3f1c425a26bcb6992662ed9adad4c0fafaeb4f9
parent815dde3e2058eadad0e86cfaf9cb68fc3f597ddb
Separate public and private ML-KEM allocations

Previously, this change had grouped the public and private
portions of the ML-KEM key structure into one allocation that
was changed to use secure memory. There were concerns raised
that there may be use cases where storage of many ML-KEM public
keys may be necessary. Since the total secure memory size is configured
by the user, reduce the footprint of secure memory usage to
reduce the impact of these changes on users of these flows.

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/27625)
crypto/ml_dsa/ml_dsa_encoders.c
crypto/ml_dsa/ml_dsa_key.c
crypto/ml_dsa/ml_dsa_vector.h
crypto/ml_kem/ml_kem.c
include/crypto/ml_kem.h