nettle: ensure liboqs is loaded for signing operations with ML-DSA

Signed-off-by: Daiki Ueno <ueno@gnu.org>

diff --git a/lib/nettle/pk.c b/lib/nettle/pk.c
index a13870a2bcbe64af8ec8a10762ba1ccb1dc53634..0d113209c3500bb07158020e98d431695f8c5a4b 100644 (file)
--- a/lib/nettle/pk.c
+++ b/lib/nettle/pk.c
@@ -1868,6 +1868,9 @@ static int _wrap_nettle_pk_sign(gnutls_pk_algorithm_t algo,
                 */
                not_approved = true;
 
+               if (_gnutls_liboqs_ensure() < 0)
+                       return gnutls_assert_val(GNUTLS_E_UNKNOWN_PK_ALGORITHM);
+
                const char *algo_name = pk_to_liboqs_algo(algo);
                if (algo_name == NULL ||
                    !GNUTLS_OQS_FUNC(OQS_SIG_alg_is_enabled)(algo_name)) {
@@ -2283,6 +2286,9 @@ static int _wrap_nettle_pk_verify(gnutls_pk_algorithm_t algo,
                 */
                not_approved = true;
 
+               if (_gnutls_liboqs_ensure() < 0)
+                       return gnutls_assert_val(GNUTLS_E_UNKNOWN_PK_ALGORITHM);
+
                const char *algo_name = pk_to_liboqs_algo(algo);
                if (algo_name == NULL ||
                    !GNUTLS_OQS_FUNC(OQS_SIG_alg_is_enabled)(algo_name)) {