Skip to content

Navigation Menu

Sign inAppearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Sign upAppearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

Uh oh!

There was an error while loading. Please reload this page.

wolfSSL / wolfProvider Public

Notifications You must be signed in to change notification settings
Fork 36
Star 27

Code
Issues 5
Pull requests 19
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights

Add ML-KEM and ML-DSA support - #399

#399

Merged

ColtonWilley merged 55 commits into

wolfSSL:masterwolfSSL/wolfProvider:masterfrom

aidangarske:pqc-supportaidangarske/wolfProvider:pqc-supportCopy head branch name to clipboard

Jun 30, 2026

Conversation Commits55 (55)Checks Files changed

Merged

Add ML-KEM and ML-DSA support#399
ColtonWilley merged 55 commits into
wolfSSL:masterfrom
aidangarske:pqc-support

Commits

Commits on Jun 25, 2026

Add PQC scaffolding: ML-KEM/ML-DSA macros, names, externs, build flag
aidangarske
committed
1080b47
Add ML-KEM keymgmt and KEM dispatch for 512/768/1024
aidangarske
committed
a632076
Add ML-DSA keymgmt and signature dispatch for 44/65/87
aidangarske
committed
dcdb703
Add ML-KEM and ML-DSA unit tests + dupctx buffer copy fix
aidangarske
committed
08c1529
Add PQC version-compat CI: pre-PQC, latest stable, master
aidangarske
committed
361dd22
Add FIPS 204 ctx mode for ML-DSA + three-way interop validator in CI
aidangarske
committed
05ad4db
Add ML-KEM and ML-DSA raw key import/export roundtrip tests
aidangarske
committed
3099072
Gate PQC macros on header availability via __has_include
aidangarske
committed
5420064
Address Copilot review + dynamic wolfSSL version matrix with PQC floor
aidangarske
committed
7b052c9
Document ML-KEM and ML-DSA support in README and integration guide
aidangarske
committed
c522210
Address Skoll review: input validation, consistency checks, dup selection honoring
aidangarske
committed
cbf626d
Run PQC version matrix on draft PRs too (match wolfTPM behavior)
aidangarske
committed
c8ea6fc
Use wc_mlkem.h (mlkem.h removed on wolfssl master); drop absence check
aidangarske
committed
6a41dae
CI: diagnose OpenSSL default provider PQC support
aidangarske
committed
482eeca
interop: use global lib ctx for default provider side (CI lib ctx fix)
aidangarske
committed
a178d3b
CI: include lib64 in LD_LIBRARY_PATH so Linux finds the local libcrypto
aidangarske
committed
9724edf
PQC: canonical ML-KEM/ML-DSA APIs + address review feedback
aidangarske
committed
f7d6c63
PQC: address skoll review (empty msg, NULL-key reinit, KEM mixed-NULL, get_params, KEM op name, debian pqc)
aidangarske
committed
e44edc6
PQC: address review nits (drop experimental mentions, early-return inits)
aidangarske
committed
b78281b
Add PQC OpenSSL-vector KAT CI, ML-DSA message API, seed/ikme keygen params, and WP_LOG_COMP_PQC tracing
aidangarske
committed
e184a2e
Make ML-KEM/ML-DSA opt-in (--enable-pqc/--enable-mlkem/--enable-mldsa) with version-floor gates and per-algorithm CI coverage
aidangarske
committed
07b590e
KAT CI: add --enable-openssl-test so replace-default builds OpenSSL evp_test (replace-default uses no-tests)
aidangarske
committed
191c2a6
Add pure ML-KEM TLS groups (MLKEM512/768/1024) with encoded-public-key support for TLS 1.3 key exchange
aidangarske
committed
3bb68e7
Add hybrid PQC TLS groups (X25519MLKEM768, SecP256r1MLKEM768, SecP384r1MLKEM1024)
aidangarske
committed
662dfb5
PQC interop: add TLS 1.3 handshake group interop (wolfProvider <-> default, both directions, all ML-KEM and hybrid groups)
aidangarske
committed
5c81d07
Add ML-DSA encoder/decoder (PEM/DER SPKI+PKCS8) so ML-DSA keys and certs load through wolfProvider
aidangarske
committed
481a480
Register ML-DSA TLS signature algorithms (mldsa44/65/87) so ML-DSA certs authenticate in TLS 1.3
aidangarske
committed
0b284b5
Provide ML-DSA X509 signature AlgorithmIdentifier so wolfProvider can sign ML-DSA certificates
aidangarske
committed
50fc4a3
Register ML-DSA keymgmt OID/short-name aliases so ML-DSA CA certs validate as trust anchors (EVP_PKEY_is_a / check_sig_alg_match)
aidangarske
committed
ca466fc
Add nginx PQC OSP CI: ML-DSA cert auth + ML-KEM/hybrid KEX via nginx Test::Nginx harness (wolfSSL stable+master, latest OpenSSL, force-fail, pinned nginx/nginx-tests)
aidangarske
committed
0a208da
nginx PQC OSP: run oqs-demos nginx in Docker with wolfProvider swapped for oqs-provider, exercising ML-DSA auth + ML-KEM/hybrid KEX via their connection test
aidangarske
committed
048c1ab
Add unit tests for ML-DSA encoder/decoder, ML-DSA X.509 signing, and hybrid-group KEM; run all PQC unit tests in CI
aidangarske
committed
e6bf231
PQC interop: add ML-DSA certificate TLS authentication test (sign+verify per group), validating the ML-DSA TLS signature algorithm end-to-end
aidangarske
committed
e55ee80
PQC security review fixes: zeroize seed/entropy/randomizer on free, apply FIPS 204 sig params in all init paths, reject wrong-length keygen seed, close hybrid match fail-open
aidangarske
committed
b0cbd5d
PQC security review round 2: apply+validate keygen seed params at init, reject wrong-length IKME/test-entropy, scrub hybrid shared secret on failure, fix fill_rnd log flag
aidangarske
committed
a8f2c8f
PQC security review round 3: use sigSize as authoritative capacity, derive ECC public on hybrid private import, scrub ML-KEM shared secret on failure
aidangarske
committed
798c87f
PQC security review round 4: fix ML-KEM KEM out-of-bounds scrub on undersized buffer (early-return on size check), reject mismatched public on hybrid keypair import
aidangarske
committed
8fa8c86
PQC security review round 5: copy IKME on KEM dupctx, advertise ML-DSA public only when actually decoded, give hybrid variant tables internal linkage
aidangarske
committed
472676f
PQC security review round 6: reject NULL ML-DSA message update with non-zero length
aidangarske
committed
e5bce26
nginx PQC test: lengthen HTTP response wait to avoid handshake-timing flakes
aidangarske
committed
3c53164
nginx PQC CI: skip pre-PQC-floor wolfSSL stable (master-only until v5.9.2); fix wget TLS by setting LD_LIBRARY_PATH after nginx download
aidangarske
committed
e5666a6
nginx PQC test: rename GROUPS->KEX_GROUPS (GROUPS is a bash special array of GIDs, so the loop ran once with a GID); drop install-layout-dependent mime.types include; add startup debug
aidangarske
committed
78dcf82
nginx PQC: add replace-default/non-replace as a matrix axis (4 modes per wolfSSL ref), loading wolfProvider via provider.conf in non-replace builds
aidangarske
committed
6e05cde
ci: run nginx PQC OSP test nightly via reusable workflow (Wave 1), drop self push/PR trigger
aidangarske
committed
2b4fab7
ML-DSA import: drop dead pub-probe (a FIPS 204 raw private key never yields the public via ExportPubRaw)
aidangarske
committed
cfe8bd4
ML-KEM import/match: set pub when priv is decoded (drop probe); compare private first since its encode embeds the public
aidangarske
committed
b81fb5a
ML-DSA sign: let wolfSSL hedge the randomizer via SignCtx; supply a seed only for test-entropy/deterministic signing
aidangarske
committed
f46e752
ML-DSA digest-sign: support FIPS 204 HashML-DSA via a digest object + wc_MlDsaKey_SignCtxHash/VerifyCtxHash (pure path unchanged for md=NULL)
aidangarske
committed
de8fe5d
ML-DSA pre-hash: allowlist SHA2/SHA3 digests (reject MD5/SHA-1) and reject the external-mu + pre-hash combination both ways
aidangarske
committed
1366219
ML-DSA sig ctx: set hashType to WC_HASH_TYPE_NONE explicitly in newctx (do not assume the enum is zero)
aidangarske
committed
88757a0
ML-DSA pre-hash: allow SHA-512/256 in the digest allowlist and NULL-guard sigLen/key in the prehash sign path
aidangarske
committed
1b9e302
ML-DSA pre-hash: set dup hashType only after a successful hash copy and NULL-guard the prehash verify path
aidangarske
committed
2ec9547
ML-DSA pure sign/verify: stream the message into mu via SHAKE-256 (wc_Shake256_Update) and SignMuWithSeed/VerifyMu, instead of buffering the whole message
aidangarske
committed
f73e8e3
ML-DSA streaming sign: reject public-only keys (restore the prvKeySet gate lost with SignMuWithSeed) and reject context/mu/encoding changes after streaming starts
aidangarske
committed
68aff0e
ML-DSA sig params: also reject context/mu/encoding changes once external-mu input has been buffered, not just after pure streaming starts
aidangarske
committed
2880620

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.