OpenSSL compat with ML-DSA - #10962

Open

kojo1 wants to merge 23 commits into

wolfSSL:masterfrom

kojo1:oss_mldsa

Commits on Jul 21, 2026

OpenSSL compat with ML-DSA
kojo1
committed
c71c2ba

Commits on Jul 24, 2026

Add ML-DSA test coverage for X509_REQ_sign
kojo1
committed
d9e04a7
PRIVATE_KEY_UNLOCK to X509 sign/set_pubkey
kojo1
committed
fa7cda1

Commits on Jul 28, 2026

Dynamic buff size based on expected cert size
kojo1
committed
365a9a0

Commits on Jul 30, 2026

Explicit prePopulated flag for d2iTryMlDsaKey
kojo1
committed
8629d9d
Size X509 gen buffer from subject public key too
kojo1
committed
2c8ce3f
Allow NULL md for ML-DSA X509 signing, add test
kojo1
committed
5130e00
Single gate for ML-DSA X509 signing capability
kojo1
committed
f6d88bd
Reset MlDsaKey between decode attempts in X509_set_pubkey
kojo1
committed
a7d30e2
PKCS#8 algId check and DER-only typed d2i for ML-DSA
kojo1
committed
aea9b8f
Extend ML-DSA compat test coverage to all levels and untested paths
kojo1
committed
29887a6
Use mldsa_get_oid_sum for draft-aware OID in X509 signing
kojo1
committed
7040f83
Consistency cleanups in new ML-DSA X509 code
kojo1
committed
3cf92c8

Commits on Jul 31, 2026

Derive WC_MAX_X509_GEN_MLDSA from WC_MAX_X509_GEN
kojo1
committed
9403fa3
Use canonical ML-DSA names in new X509/EVP code
kojo1
committed
c363238
Test X509_set_pubkey with seed and private-only ML-DSA keys
kojo1
committed
1115125
Guard ML-DSA key/RNG cleanup in tests against Expect short-circuit
kojo1
committed
f247487
Reset XFILE handle after every close in ML-DSA tests
kojo1
committed
4df0330
Free previous algorithm object when d2i repurposes an EVP_PKEY
kojo1
committed
04063d8
Do not store failed sigType lookup in sigOID
kojo1
committed
10b876c
Zeroize pkey.ptr before freeing EVP_PKEY key data
kojo1
committed
bae7b82
Note deliberate md tolerance for ML-DSA X509 signing
kojo1
committed
1c67473

Commits on Aug 1, 2026

Fix error code check
kojo1
committed
50e4d96