Add ML-KEM and ML-DSA support#399

Open

aidangarske wants to merge 44 commits into

wolfSSL:masterfrom

aidangarske:pqc-support

Commits on Jun 11, 2026

Add PQC scaffolding: ML-KEM/ML-DSA macros, names, externs, build flag
aidangarske
committed
Add ML-KEM keymgmt and KEM dispatch for 512/768/1024
aidangarske
committed
Add ML-DSA keymgmt and signature dispatch for 44/65/87
aidangarske
committed
Add ML-KEM and ML-DSA unit tests + dupctx buffer copy fix
aidangarske
committed
Add PQC version-compat CI: pre-PQC, latest stable, master
aidangarske
committed
Add FIPS 204 ctx mode for ML-DSA + three-way interop validator in CI
aidangarske
committed
Add ML-KEM and ML-DSA raw key import/export roundtrip tests
aidangarske
committed
Gate PQC macros on header availability via __has_include
aidangarske
committed
Address Copilot review + dynamic wolfSSL version matrix with PQC floor
aidangarske
committed
Document ML-KEM and ML-DSA support in README and integration guide
aidangarske
committed
Address Skoll review: input validation, consistency checks, dup selection honoring
aidangarske
committed
Run PQC version matrix on draft PRs too (match wolfTPM behavior)
aidangarske
committed
Use wc_mlkem.h (mlkem.h removed on wolfssl master); drop absence check
aidangarske
committed
CI: diagnose OpenSSL default provider PQC support
aidangarske
committed
interop: use global lib ctx for default provider side (CI lib ctx fix)
aidangarske
committed
CI: include lib64 in LD_LIBRARY_PATH so Linux finds the local libcrypto
aidangarske
committed
PQC: canonical ML-KEM/ML-DSA APIs + address review feedback
aidangarske
committed
PQC: address skoll review (empty msg, NULL-key reinit, KEM mixed-NULL, get_params, KEM op name, debian pqc)
aidangarske
committed
PQC: address review nits (drop experimental mentions, early-return inits)
aidangarske
committed
Add PQC OpenSSL-vector KAT CI, ML-DSA message API, seed/ikme keygen params, and WP_LOG_COMP_PQC tracing
aidangarske
committed
Make ML-KEM/ML-DSA opt-in (--enable-pqc/--enable-mlkem/--enable-mldsa) with version-floor gates and per-algorithm CI coverage
aidangarske
committed
KAT CI: add --enable-openssl-test so replace-default builds OpenSSL evp_test (replace-default uses no-tests)
aidangarske
committed
Add pure ML-KEM TLS groups (MLKEM512/768/1024) with encoded-public-key support for TLS 1.3 key exchange
aidangarske
committed
Add hybrid PQC TLS groups (X25519MLKEM768, SecP256r1MLKEM768, SecP384r1MLKEM1024)
aidangarske
committed
PQC interop: add TLS 1.3 handshake group interop (wolfProvider <-> default, both directions, all ML-KEM and hybrid groups)
aidangarske
committed
Add ML-DSA encoder/decoder (PEM/DER SPKI+PKCS8) so ML-DSA keys and certs load through wolfProvider
aidangarske
committed
Register ML-DSA TLS signature algorithms (mldsa44/65/87) so ML-DSA certs authenticate in TLS 1.3
aidangarske
committed
Provide ML-DSA X509 signature AlgorithmIdentifier so wolfProvider can sign ML-DSA certificates
aidangarske
committed
Register ML-DSA keymgmt OID/short-name aliases so ML-DSA CA certs validate as trust anchors (EVP_PKEY_is_a / check_sig_alg_match)
aidangarske
committed
Add nginx PQC OSP CI: ML-DSA cert auth + ML-KEM/hybrid KEX via nginx Test::Nginx harness (wolfSSL stable+master, latest OpenSSL, force-fail, pinned nginx/nginx-tests)
aidangarske
committed
nginx PQC OSP: run oqs-demos nginx in Docker with wolfProvider swapped for oqs-provider, exercising ML-DSA auth + ML-KEM/hybrid KEX via their connection test
aidangarske
committed
Add unit tests for ML-DSA encoder/decoder, ML-DSA X.509 signing, and hybrid-group KEM; run all PQC unit tests in CI
aidangarske
committed
PQC interop: add ML-DSA certificate TLS authentication test (sign+verify per group), validating the ML-DSA TLS signature algorithm end-to-end
aidangarske
committed
PQC security review fixes: zeroize seed/entropy/randomizer on free, apply FIPS 204 sig params in all init paths, reject wrong-length keygen seed, close hybrid match fail-open
aidangarske
committed
PQC security review round 2: apply+validate keygen seed params at init, reject wrong-length IKME/test-entropy, scrub hybrid shared secret on failure, fix fill_rnd log flag
aidangarske
committed
PQC security review round 3: use sigSize as authoritative capacity, derive ECC public on hybrid private import, scrub ML-KEM shared secret on failure
aidangarske
committed
PQC security review round 4: fix ML-KEM KEM out-of-bounds scrub on undersized buffer (early-return on size check), reject mismatched public on hybrid keypair import
aidangarske
committed
PQC security review round 5: copy IKME on KEM dupctx, advertise ML-DSA public only when actually decoded, give hybrid variant tables internal linkage
aidangarske
committed
PQC security review round 6: reject NULL ML-DSA message update with non-zero length
aidangarske
committed
nginx PQC test: lengthen HTTP response wait to avoid handshake-timing flakes
aidangarske
committed
nginx PQC CI: skip pre-PQC-floor wolfSSL stable (master-only until v5.9.2); fix wget TLS by setting LD_LIBRARY_PATH after nginx download
aidangarske
committed
nginx PQC test: rename GROUPS->KEX_GROUPS (GROUPS is a bash special array of GIDs, so the loop ran once with a GID); drop install-layout-dependent mime.types include; add startup debug
aidangarske
committed
nginx PQC: add replace-default/non-replace as a matrix axis (4 modes per wolfSSL ref), loading wolfProvider via provider.conf in non-replace builds
aidangarske
committed
ci: run nginx PQC OSP test nightly via reusable workflow (Wave 1), drop self push/PR trigger
aidangarske
committed