David Howells 8bbdeb7a25 pkcs7, x509: Add ML-DSA support ...

Add support for ML-DSA keys and signatures to the CMS/PKCS#7 and X.509
implementations.  ML-DSA-44, -65 and -87 are all supported.  For X.509
certificates, the TBSCertificate is required to be signed directly; for
CMS, direct signing of the data is preferred, though use of SHA512 (and
only that) as an intermediate hash of the content is permitted with
signedAttrs.

Signed-off-by: David Howells <dhowells@redhat.com>
cc: Lukas Wunner <lukas@wunner.de>
cc: Ignat Korchagin <ignat@cloudflare.com>
cc: Stephan Mueller <smueller@chronox.de>
cc: Eric Biggers <ebiggers@kernel.org>
cc: Herbert Xu <herbert@gondor.apana.org.au>
cc: keyrings@vger.kernel.org
cc: linux-crypto@vger.kernel.org

2026-01-30 11:34:34 +00:00

..

asymmetric_keys.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 36

2019-05-24 17:27:11 +02:00

asymmetric_type.c

pkcs7, x509: Rename ->digest to ->m

2026-01-30 11:33:08 +00:00

Kconfig

certs: Add ECDSA signature verification self-test

2024-05-14 05:01:04 +03:00

Makefile

certs: Add ECDSA signature verification self-test

2024-05-14 05:01:04 +03:00

mscode_parser.c

Revert "crypto: pkcs7 - remove sha1 support"

2024-03-22 19:42:20 +08:00

mscode.asn1

pefile: Parse the "Microsoft individual code signing" data blob

2014-07-09 14:58:37 +01:00

pkcs7_key_type.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 36

2019-05-24 17:27:11 +02:00

pkcs7_parser.c

pkcs7, x509: Add ML-DSA support

2026-01-30 11:34:34 +00:00

pkcs7_parser.h

crypto: asymmetric_keys: fix some comments in pkcs7_parser.h

2021-01-21 16:16:09 +00:00

pkcs7_trust.c

keys: X.509 public key issuer lookup without AKID

2022-01-09 00:18:42 +02:00

pkcs7_verify.c

pkcs7: Allow the signing algo to do whatever digestion it wants itself

2026-01-30 11:33:19 +00:00

pkcs7.asn1

treewide: Add SPDX identifier to IETF ASN.1 modules

2023-10-27 18:04:28 +08:00

pkcs8_parser.c

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 36

2019-05-24 17:27:11 +02:00

pkcs8.asn1

treewide: Add SPDX identifier to IETF ASN.1 modules

2023-10-27 18:04:28 +08:00

public_key.c

pkcs7, x509: Add ML-DSA support

2026-01-30 11:34:34 +00:00

restrict.c

KEYS: Avoid -Wflex-array-member-not-at-end warning

2025-11-22 10:04:50 +08:00

selftest_ecdsa.c

certs: Add ECDSA signature verification self-test

2024-05-14 05:01:04 +03:00

selftest_rsa.c

certs: Move RSA self-test data to separate file

2024-05-14 05:01:03 +03:00

selftest.c

certs: Add ECDSA signature verification self-test

2024-05-14 05:01:04 +03:00

selftest.h

certs: Add ECDSA signature verification self-test

2024-05-14 05:01:04 +03:00

signature.c

pkcs7: Allow the signing algo to do whatever digestion it wants itself

2026-01-30 11:33:19 +00:00

verify_pefile.c

include: pe.h: Fix PE definitions

2025-05-21 16:46:37 +02:00

verify_pefile.h

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 36

2019-05-24 17:27:11 +02:00

x509_akid.asn1

treewide: Add SPDX identifier to IETF ASN.1 modules

2023-10-27 18:04:28 +08:00

x509_cert_parser.c

pkcs7, x509: Add ML-DSA support

2026-01-30 11:34:34 +00:00

x509_loader.c

wifi: cfg80211: Deduplicate certificate loading

2023-01-19 14:46:45 +01:00

x509_parser.h

x509: Separately calculate sha256 for blacklist

2026-01-30 11:32:23 +00:00

x509_public_key.c

pkcs7: Allow the signing algo to do whatever digestion it wants itself

2026-01-30 11:33:19 +00:00

x509.asn1

treewide: Add SPDX identifier to IETF ASN.1 modules

2023-10-27 18:04:28 +08:00