openssl/test/ml_dsa_test.c, branch dependabot/github_actions/actions/setup-python-7

Once initialised, ML-DSA keys should be immutable

2026-06-25T02:03:26Z

ML-DSA keys should become immutable once key material has been added. This is already the case for at least ML-KEM keys, and should generally be the case across all key types. - Added the requisite check in the key management provider ml_dsa_import() function. - Also, consolidated the ML-KEM checks in ml_kem_import(). These were previously partly in ml_kem_key_fromdata(). Reviewed-by: Shane Lontis Reviewed-by: Paul Dale MergeDate: Thu Jun 25 02:03:35 2026 (Merged from https://github.com/openssl/openssl/pull/30421)

ML_DSA/ML_KEM: Add fromdata property query support.

2026-03-13T17:24:40Z

This allows ML_KEM/ML_DSA keys to set a "properties" value that is used to refetch the digests. This may be used when doing an import using EVP_PKEY_fromdata(). Note that this is not used by EVP_PKEY_new_raw_private_key_ex() or EVP_PKEY_new_raw_public_key_ex() since the propq used here is associated with the keymanager (i.e. via EVP_PKEY_CTX_new_from_name()) not the propq associated with internal fetches used by the key to fetch digest algorithms. Reviewed-by: Dmitry Belyavskiy Reviewed-by: Paul Dale MergeDate: Fri Mar 13 17:24:41 2026 (Merged from https://github.com/openssl/openssl/pull/30243)

4.0-POST-CLANG-FORMAT-WEBKIT

2025-12-09T07:28:19Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman Reviewed-by: Nikola Pajkovsky (Merged from https://github.com/openssl/openssl/pull/29242)

test: Silence warnings on Win64 builds

2025-07-02T15:26:26Z

Reviewed-by: Saša Nedvědický Reviewed-by: Neil Horman (Merged from https://github.com/openssl/openssl/pull/27806)

Add test for ML-DSA sig/ver message update

2025-04-23T11:35:03Z

Signed-off-by: Simo Sorce Reviewed-by: Viktor Dukhovni Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27342)

ML_DSA - Fix bug in OSSL_PKEY_PARAM_SECURITY_BITS getter.

2025-03-21T04:57:31Z

Reported by @romen It was off by a factor of 8. Reviewed-by: Tim Hudson Reviewed-by: Viktor Dukhovni Reviewed-by: Paul Dale Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/27110)

Copyright year updates

2025-03-12T13:35:59Z

Reviewed-by: Neil Horman Reviewed-by: Matt Caswell Release: yes

Address non-FP coverity nits

2025-02-16T19:48:01Z

Reviewed-by: Neil Horman Reviewed-by: Tomas Mraz Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/26765)

ML-DSA: Change ossl_ml_dsa_key_public_from_private() to check that the

2025-02-14T17:02:28Z

decoded value of t0 matches the calculated value of t0. Reviewed-by: Viktor Dukhovni Reviewed-by: Tim Hudson (Merged from https://github.com/openssl/openssl/pull/26681)

Make the ML-DSA seed gettable as documented

2025-02-14T09:46:04Z

- Also fix the get_params keymgmt function to always return what's available. Requested, but unavailable, parameters are simply left unmodified. It is not an error to request more than is present. Reviewed-by: Tim Hudson Reviewed-by: Shane Lontis (Merged from https://github.com/openssl/openssl/pull/26674)