]> git.ipfire.org Git - thirdparty/gnutls.git/commit
nettle: support deriving ML-DSA public key from expanded secret key 2088/head
authorDaiki Ueno <ueno@gnu.org>
Thu, 9 Apr 2026 04:47:26 +0000 (13:47 +0900)
committerDaiki Ueno <ueno@gnu.org>
Sun, 12 Apr 2026 23:30:18 +0000 (08:30 +0900)
commit46eeb76a6df1613f6afd3bfbdbab42ebc2c2eaaf
treed189492b1b354e89a3dd46925e4087020bf72d7e
parenta7920b9bcfb6e28bd2158a7733997c89471b10f4
nettle: support deriving ML-DSA public key from expanded secret key

RFC 9881 defines 3 private key formats for ML-DSA: "seed",
"expandedKey" and both. When it is "expandedKey", a non-trivial
conversion is required to derive a public key, which is now
implemented in leancrypto through lc_dilithium_pk_from_sk. This patch
modifies the pk_fixup backend function to use it to derive a public
key when importing a private key.

Signed-off-by: Daiki Ueno <ueno@gnu.org>
configure.ac
lib/nettle/pk.c
tests/cert-tests/mldsa.sh