openssl/crypto/ml_dsa
Viktor Dukhovni 5421423ef9 Flexible encoders for ML-DSA
- Same UX as ML-KEM.  The main ASN.1 private key syntax is the one from
  Russ Housley's post on the LAMPS list, subsequently amended to tag the
  seed instead of the key (each of the three parameter sets will have a
  fixed size for the `expandedKey`):

    ML-DSA-PrivateKey ::= CHOICE {
      seed [0] IMPLICIT OCTET STRING SIZE (32),
      expandedKey OCTET STRING SIZE (2560 | 4032 | 4896)
      both SEQUENCE {
        seed OCTET STRING SIZE (32),
        expandedKey OCTET STRING SIZE (2560 | 4032 | 4896) } }

Reviewed-by: Shane Lontis <shane.lontis@oracle.com>
Reviewed-by: Tim Hudson <tjh@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/26638)
2025-02-14 10:46:04 +01:00
..
build.info ml-dsa: add to FIPS provider 2025-02-14 10:46:04 +01:00
ml_dsa_encoders.c Flexible encoders for ML-DSA 2025-02-14 10:46:04 +01:00
ml_dsa_hash.h ML-DSA fixups 2025-02-14 10:46:03 +01:00
ml_dsa_key.c Flexible encoders for ML-DSA 2025-02-14 10:46:04 +01:00
ml_dsa_key.h Flexible encoders for ML-DSA 2025-02-14 10:46:04 +01:00
ml_dsa_key_compress.c ML-DSA fixups 2025-02-14 10:46:03 +01:00
ml_dsa_local.h Flexible encoders for ML-DSA 2025-02-14 10:46:04 +01:00
ml_dsa_matrix.c
ml_dsa_matrix.h ML-DSA fixups 2025-02-14 10:46:03 +01:00
ml_dsa_ntt.c ML-DSA fixups 2025-02-14 10:46:03 +01:00
ml_dsa_params.c Flexible encoders for ML-DSA 2025-02-14 10:46:04 +01:00
ml_dsa_poly.h ML-DSA fixups 2025-02-14 10:46:03 +01:00
ml_dsa_sample.c ML-DSA: Fix endian issue in ossl_ml_dsa_poly_sample_in_ball(). 2025-02-14 10:46:03 +01:00
ml_dsa_sign.c Flexible encoders for ML-DSA 2025-02-14 10:46:04 +01:00
ml_dsa_sign.h Add ML-DSA sign/verify 2025-02-14 10:46:03 +01:00
ml_dsa_vector.h ML-DSA: Add support for dup. 2025-02-14 10:46:03 +01:00