samples: crypto: Add ML-DSA signature verification sample

The sample includes a demonstration of a signature verification
supported both by Oberon and CRACEN crypto drivers.

Ref: NCSDK-40102

Signed-off-by: Anton Zyma <anton.zyma@nordicsemi.no>

Author: AntonZma

doc/nrf/releases_and_maturity/releases/release-notes-changelog.rst

@@ -387,7 +387,10 @@ Cellular samples
 Cryptography samples
 --------------------
 
-* Added support for the nRF54LC10A SoC (with and without TF-M) in the crypto samples.
+* Added:
+
+  * Support for the nRF54LC10A SoC (with and without TF-M) in the crypto samples.
+  * The :ref:`crypto_ml_dsa` sample.
 
 Debug samples
 -------------

samples/crypto/ml_dsa/CMakeLists.txt

@@ -0,0 +1,15 @@
+#
+# Copyright (c) 2026 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+
+cmake_minimum_required(VERSION 3.20.0)
+
+find_package(Zephyr REQUIRED HINTS $ENV{ZEPHYR_BASE})
+
+project(ml_dsa)
+
+target_sources(app PRIVATE
+  src/main.c
+)

samples/crypto/ml_dsa/README.rst

@@ -0,0 +1,81 @@
+.. _crypto_ml_dsa:
+
+Crypto: ML-DSA
+###############
+
+.. contents::
+   :local:
+   :depth: 2
+
+The ML-DSA sample demonstrates how to use the :ref:`PSA Crypto API <ug_psa_certified_api_overview_crypto>` to verify a message signature using the ML-DSA-65 post-quantum signature algorithm.
+
+Requirements
+************
+
+The sample supports the following development kits:
+
+.. table-from-sample-yaml::
+
+Overview
+********
+
+The sample :ref:`enables PSA Crypto API <psa_crypto_support_enable>` and configures the following Kconfig options for the cryptographic features:
+
+* :kconfig:option:`CONFIG_PSA_WANT_KEY_TYPE_ML_DSA_PUBLIC_KEY` - Used to enable support for the ML-DSA public key type from among the supported cryptographic operations for :ref:`ug_crypto_supported_features_key_types`.
+* :kconfig:option:`CONFIG_PSA_WANT_ALG_ML_DSA` - Used to enable support for the ML-DSA signature algorithm from among the supported cryptographic operations for :ref:`ug_crypto_supported_features_signature_algorithms`.
+* :kconfig:option:`CONFIG_PSA_WANT_ML_DSA_KEY_SIZE_65` - Used to enable support for the ML-DSA-65 key type.
+* :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE128` and :kconfig:option:`CONFIG_PSA_WANT_ALG_SHAKE256` - Used to enable support for the XOF algorithms required internally by ML-DSA.
+
+Once built and run, the sample performs the following operations:
+
+1. Initialization:
+
+   a. The PSA Crypto API is initialized using the :c:func:`psa_crypto_init` function.
+   #. A known ML-DSA-65 public key is imported using the :c:func:`psa_import_key` function.
+      The public key is configured with usage flags for verification.
+      The public key, the message, and the signature used in this sample are taken from a NIST ACVP ML-DSA signature verification test vector.
+
+#. ML-DSA signature verification:
+
+   The signature is verified using the :c:func:`psa_verify_message` function with the imported public key.
+
+#. Cleanup:
+
+   The public key is removed from the PSA crypto keystore using the :c:func:`psa_destroy_key` function.
+
+Building and running
+********************
+
+.. |sample path| replace:: :file:`samples/crypto/ml_dsa`
+
+.. include:: /includes/build_and_run.txt
+
+Testing
+=======
+
+.. include:: /samples/crypto/aes_cbc/README.rst
+   :start-after: crypto_sample_testing_start
+   :end-before: crypto_sample_testing_end
+
+.. code-block:: text
+
+   *** Booting nRF Connect SDK v3.4.99-baaa74699d09 ***
+   *** Using Zephyr OS v4.4.0-bc35f6fe0b34 ***
+   [00:00:00.003,144] <inf> ml_dsa: Starting ML-DSA example...
+   [00:00:00.003,152] <inf> ml_dsa: Importing an ML-DSA-65 public key...
+   [00:00:00.003,368] <inf> ml_dsa: ML-DSA-65 public key imported successfully!
+   [00:00:00.003,383] <inf> ml_dsa: ---- ML-DSA-65 public key (total len: 1952, printing 16 bytes): ----
+   [00:00:00.003,393] <inf> ml_dsa: Content:
+                                    91 52 c0 c6 86 77 60 8f  42 6f b1 6f 8f 75 f7 6c |.R...w`. Bo.o.u.l
+   [00:00:00.003,403] <inf> ml_dsa: ---- ML-DSA-65 public key end  ----
+   [00:00:00.003,409] <inf> ml_dsa: Verifying the ML-DSA signature...
+   [00:00:00.138,565] <inf> ml_dsa: ---- Message (total len: 1554, printing 16 bytes): ----
+   [00:00:00.138,578] <inf> ml_dsa: Content:
+                                    88 45 ad 39 4b ce 60 b2  84 76 b2 13 99 b0 d4 72 |.E.9K.`. .v.....r
+   [00:00:00.138,588] <inf> ml_dsa: ---- Message end  ----
+   [00:00:00.138,597] <inf> ml_dsa: ---- Signature (total len: 3309, printing 16 bytes): ----
+   [00:00:00.138,606] <inf> ml_dsa: Content:
+                                    6e 8c 4b 20 61 c2 cd f2  71 54 bf 70 85 f6 3c b1 |n.K a... qT.p..<.
+   [00:00:00.138,615] <inf> ml_dsa: ---- Signature end  ----
+   [00:00:00.138,620] <inf> ml_dsa: Signature verification was successful!
+   [00:00:00.138,730] <inf> ml_dsa: Example finished successfully!

samples/crypto/ml_dsa/prj.conf

@@ -0,0 +1,34 @@
+#
+# Copyright (c) 2026 Nordic Semiconductor ASA
+#
+# SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+#
+# The Zephyr CMSIS emulation assumes that ticks are ms, currently
+CONFIG_SYS_CLOCK_TICKS_PER_SEC=1000
+
+CONFIG_MAIN_STACK_SIZE=32768
+CONFIG_HEAP_MEM_POOL_SIZE=16384
+
+# Enable logging
+CONFIG_CONSOLE=y
+CONFIG_LOG=y
+
+CONFIG_SPEED_OPTIMIZATIONS=y
+
+# Enable cryptographic features
+CONFIG_PSA_CRYPTO=y
+
+CONFIG_PSA_CRYPTO_DRIVER_OBERON=n
+CONFIG_PSA_CRYPTO_DRIVER_CRACEN=y
+
+CONFIG_MBEDTLS_ENABLE_HEAP=y
+CONFIG_MBEDTLS_HEAP_SIZE=16384
+
+CONFIG_PSA_WANT_ALG_ML_DSA=y
+CONFIG_PSA_WANT_KEY_TYPE_ML_DSA_KEY_PAIR_IMPORT=y
+CONFIG_PSA_WANT_KEY_TYPE_ML_DSA_PUBLIC_KEY=y
+CONFIG_PSA_WANT_ML_DSA_KEY_SIZE_65=y
+
+# Required by CRACEN to implement the ML-DSA algorithm
+CONFIG_PSA_WANT_ALG_SHAKE128=y
+CONFIG_PSA_WANT_ALG_SHAKE256=y

samples/crypto/ml_dsa/src/main.c

@@ -0,0 +1,154 @@
+/*
+ * Copyright (c) 2026 Nordic Semiconductor ASA
+ *
+ * SPDX-License-Identifier: LicenseRef-Nordic-5-Clause
+ */
+
+#include <zephyr/sys/util.h>
+#include <zephyr/logging/log.h>
+#include <psa/crypto.h>
+#include <psa/crypto_extra.h>
+
+#include "ml_dsa_65_vectors.h"
+
+#define APP_SUCCESS		(0)
+#define APP_ERROR		(-1)
+#define APP_SUCCESS_MESSAGE "Example finished successfully!"
+#define APP_ERROR_MESSAGE "Example exited with error!"
+
+/* ML-DSA signatures and keys are long, so printing is limited to just first bytes of these */
+#define PRINT_HEX_BYTE_LIMIT	(16u)
+
+#define PRINT_HEX(p_label, p_text, len)\
+	({\
+		size_t print_len = (size_t)(len);\
+		size_t hex_bytes_to_print = MIN(print_len, (size_t)PRINT_HEX_BYTE_LIMIT); \
+		LOG_INF("---- %s (total len: %zu, printing %zu bytes): ----",             \
+			p_label, print_len, hex_bytes_to_print);                          \
+		LOG_HEXDUMP_INF(p_text, hex_bytes_to_print, "Content:");                  \
+		LOG_INF("---- %s end  ----", p_label);                                    \
+	})
+
+LOG_MODULE_REGISTER(ml_dsa, LOG_LEVEL_DBG);
+
+/* ====================================================================== */
+/*		Global variables/defines for the ML-DSA example		  */
+
+static psa_key_id_t pub_key_id;
+/* ====================================================================== */
+
+int crypto_init(void)
+{
+	psa_status_t status;
+
+	/* Initialize PSA Crypto */
+	status = psa_crypto_init();
+	if (status != PSA_SUCCESS) {
+		LOG_ERR("psa_crypto_init failed! (Error: %d)", status);
+		return APP_ERROR;
+	}
+
+	return APP_SUCCESS;
+}
+
+int crypto_finish(void)
+{
+	psa_status_t status;
+
+	/* Destroy the key handle */
+	status = psa_destroy_key(pub_key_id);
+	if (status != PSA_SUCCESS) {
+		LOG_ERR("psa_destroy_key failed! (Error: %d)", status);
+		return APP_ERROR;
+	}
+
+	return APP_SUCCESS;
+}
+
+int import_ml_dsa_pub_key(void)
+{
+	/* Configure the key attributes */
+	psa_key_attributes_t key_attributes = PSA_KEY_ATTRIBUTES_INIT;
+	psa_status_t status;
+
+	LOG_INF("Importing an ML-DSA-65 public key...");
+
+	/* Configure the key attributes */
+	psa_set_key_usage_flags(&key_attributes, PSA_KEY_USAGE_VERIFY_MESSAGE);
+	psa_set_key_lifetime(&key_attributes, PSA_KEY_LIFETIME_VOLATILE);
+	psa_set_key_algorithm(&key_attributes, PSA_ALG_ML_DSA);
+	psa_set_key_type(&key_attributes, PSA_KEY_TYPE_ML_DSA_PUBLIC_KEY);
+
+	status = psa_import_key(&key_attributes, ml_dsa_65_pub_key, sizeof(ml_dsa_65_pub_key),
+				&pub_key_id);
+	if (status != PSA_SUCCESS) {
+		LOG_ERR("psa_import_key failed! (Error: %d)", status);
+		return APP_ERROR;
+	}
+
+	LOG_INF("ML-DSA-65 public key imported successfully!");
+	PRINT_HEX("ML-DSA-65 public key", ml_dsa_65_pub_key, sizeof(ml_dsa_65_pub_key));
+
+	/* Reset key attributes and free any allocated resources. */
+	psa_reset_key_attributes(&key_attributes);
+
+	return APP_SUCCESS;
+}
+
+int verify_message(void)
+{
+	psa_status_t status;
+
+	LOG_INF("Verifying the ML-DSA signature...");
+
+	/* Verify the signature of the message */
+	status = psa_verify_message(pub_key_id, PSA_ALG_ML_DSA, ml_dsa_65_message,
+				    sizeof(ml_dsa_65_message), ml_dsa_65_signature,
+				    sizeof(ml_dsa_65_signature));
+	if (status != PSA_SUCCESS) {
+		LOG_ERR("psa_verify_message failed! (Error: %d)", status);
+		return APP_ERROR;
+	}
+
+	PRINT_HEX("Message", ml_dsa_65_message, sizeof(ml_dsa_65_message));
+	PRINT_HEX("Signature", ml_dsa_65_signature, sizeof(ml_dsa_65_signature));
+	LOG_INF("Signature verification was successful!");
+
+	return APP_SUCCESS;
+}
+
+int main(void)
+{
+	int status;
+
+	LOG_INF("Starting ML-DSA example...");
+
+	status = crypto_init();
+	if (status != APP_SUCCESS) {
+		LOG_INF(APP_ERROR_MESSAGE);
+		return APP_ERROR;
+	}
+
+	status = import_ml_dsa_pub_key();
+	if (status != APP_SUCCESS) {
+		LOG_INF(APP_ERROR_MESSAGE);
+		return APP_ERROR;
+	}
+
+	status = verify_message();
+	if (status != APP_SUCCESS) {
+		LOG_INF(APP_ERROR_MESSAGE);
+		(void)crypto_finish();
+		return APP_ERROR;
+	}
+
+	status = crypto_finish();
+	if (status != APP_SUCCESS) {
+		LOG_INF(APP_ERROR_MESSAGE);
+		return APP_ERROR;
+	}
+
+	LOG_INF(APP_SUCCESS_MESSAGE);
+
+	return APP_SUCCESS;
+}