Add LMS signature support#2707

Open

d3zd3z wants to merge 22 commits into

mcu-tools:mainfrom

d3zd3z:add-lms

Commits on Jun 5, 2026

ext/mbedtls: rename submodule to ext/mbedtls-3.6.0
d3zd3z
committed
ext/mbedtls-4.1.0: add as second Mbed TLS submodule
d3zd3z
committed
sim: build Mbed TLS 4.1.0 via upstream CMake for mbedtls-v4
d3zd3z
committed
sim: expand CI matrix to cover mbedtls-v4 combinations
d3zd3z
committed
boot: encrypted_psa: Mbed TLS 4.x compat and -Werror fixes
d3zd3z
committed
sim: enable genuine PSA encryption for sig-ecdsa-psa+enc-ec256+mbedtls-v4
d3zd3z
committed
sim: extend mbedtls-v4 PSA encryption to enc-aes256-ec256
d3zd3z
committed
ptest: ignore local .log output files
d3zd3z
committed
ext/tinycrypt: hmac.c: avoid Clang 19+ const-VLA diagnostic
d3zd3z
committed
boot: bootutil: allocate IMAGE_TLV_LMS for LMS signatures
d3zd3z
committed
imgtool: add LMS key generation and image signing
d3zd3z
committed
imgtool: add keyinfo command
d3zd3z
committed
sim: add LMS RFC 8554 wire-format compat tests against imgtool
d3zd3z
committed
sim: hook lms-signature into TlvGen for sig-lms feature
d3zd3z
committed
boot: image_validate: split shared buf into purpose-specific buffers
d3zd3z
committed
sim: hash payload before LMS signing
d3zd3z
committed
sim: switch LMS scheme from H5 to H10
d3zd3z
committed
sim: share LMS keypair process-wide via FFI to keys.c
d3zd3z
committed
sim: regenerate exhausted LMS key from saved id+seed
d3zd3z
committed
boot: add LMS signature verification via mbedtls 4.x
d3zd3z
committed
ci: add LMS sim feature combinations to test matrix
d3zd3z
committed
docs: add docs/lms.md describing LMS signature support
d3zd3z
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Add LMS signature support#2707

Add LMS signature support#2707
d3zd3z wants to merge 22 commits into
mcu-tools:mainfrom
d3zd3z:add-lms

Commits on Jun 5, 2026

ext/mbedtls: rename submodule to ext/mbedtls-3.6.0

ext/mbedtls-4.1.0: add as second Mbed TLS submodule

sim: build Mbed TLS 4.1.0 via upstream CMake for mbedtls-v4

sim: expand CI matrix to cover mbedtls-v4 combinations

boot: encrypted_psa: Mbed TLS 4.x compat and -Werror fixes

sim: enable genuine PSA encryption for sig-ecdsa-psa+enc-ec256+mbedtls-v4

sim: extend mbedtls-v4 PSA encryption to enc-aes256-ec256

ptest: ignore local .log output files

ext/tinycrypt: hmac.c: avoid Clang 19+ const-VLA diagnostic

boot: bootutil: allocate IMAGE_TLV_LMS for LMS signatures

imgtool: add LMS key generation and image signing

imgtool: add keyinfo command

sim: add LMS RFC 8554 wire-format compat tests against imgtool

sim: hook lms-signature into TlvGen for sig-lms feature

boot: image_validate: split shared buf into purpose-specific buffers

sim: hash payload before LMS signing

sim: switch LMS scheme from H5 to H10

sim: share LMS keypair process-wide via FFI to keys.c

sim: regenerate exhausted LMS key from saved id+seed

boot: add LMS signature verification via mbedtls 4.x

ci: add LMS sim feature combinations to test matrix

docs: add docs/lms.md describing LMS signature support