Skip to content

Multipart sign-message and verify-message in MLDSA driver #635

@gilles-peskine-arm

Description

@gilles-peskine-arm

In the driver for ML-DSA using mldsa-native, add the PSA multipart sign-message and verify-message functions. The API is currently being finalized at ARM-software/psa-api#319.

For now this is gated behind an experimental config option, default off but enabled in full, and not yet reachable from the API.

Since mldsa-native only provides a one-shot interface, we call its “external mu” interface (signature_internal, verify_internal). Use the fips202.h functions (mld_shake256_init() etc.) to calculate mu from the message.

Prototype: (which calls mbedtls_sha3_xxx directly, but we should instead call fips202.h functions): #599

Prerequisites: #633, #629, #627

Metadata

Metadata

Labels

size-sEstimated task size: small (~2d)
No fields configured for Feature.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions