Skip to content

Navigation Menu

Appearance settings

- AI CODE CREATION
  GitHub CopilotWrite better code with AI
  GitHub Copilot appDirect agents from issue to merge
  MCP Registry^NewIntegrate external tools
- DEVELOPER WORKFLOWS
  ActionsAutomate any workflow
  CodespacesInstant dev environments
  IssuesPlan and track work
  Code ReviewManage code changes
- APPLICATION SECURITY
  GitHub Advanced SecurityFind and fix vulnerabilities
  Code securitySecure your code as you build
  Secret protectionStop leaks before they start
- EXPLORE
  Why GitHub
  Documentation
  Blog
  Changelog
  Marketplace
View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

Uh oh!

There was an error while loading. Please reload this page.

wolfSSL / wolfProvider Public

Notifications You must be signed in to change notification settings
Fork 35
Star 26

Code
Issues 5
Pull requests 19
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Issues
Pull requests
Actions
Projects
Security and quality
Insights

Add ML-KEM and ML-DSA support#399

Merged

ColtonWilley merged 55 commits into

wolfSSL:masterwolfSSL/wolfProvider:masterfrom

aidangarske:pqc-supportaidangarske/wolfProvider:pqc-supportCopy head branch name to clipboard

Jun 30, 2026

Conversation Commits55 (55)Checks Files changed

Merged

Add ML-KEM and ML-DSA support#399
ColtonWilley merged 55 commits into
wolfSSL:masterfrom
aidangarske:pqc-support

Commits

Commits on Jun 25, 2026

Add PQC scaffolding: ML-KEM/ML-DSA macros, names, externs, build flag
aidangarske
committed
Add ML-KEM keymgmt and KEM dispatch for 512/768/1024
aidangarske
committed
Add ML-DSA keymgmt and signature dispatch for 44/65/87
aidangarske
committed
Add ML-KEM and ML-DSA unit tests + dupctx buffer copy fix
aidangarske
committed
Add PQC version-compat CI: pre-PQC, latest stable, master
aidangarske
committed
Add FIPS 204 ctx mode for ML-DSA + three-way interop validator in CI
aidangarske
committed
Add ML-KEM and ML-DSA raw key import/export roundtrip tests
aidangarske
committed
Gate PQC macros on header availability via __has_include
aidangarske
committed
Address Copilot review + dynamic wolfSSL version matrix with PQC floor
aidangarske
committed
Document ML-KEM and ML-DSA support in README and integration guide
aidangarske
committed
Address Skoll review: input validation, consistency checks, dup selection honoring
aidangarske
committed
Run PQC version matrix on draft PRs too (match wolfTPM behavior)
aidangarske
committed
Use wc_mlkem.h (mlkem.h removed on wolfssl master); drop absence check
aidangarske
committed
CI: diagnose OpenSSL default provider PQC support
aidangarske
committed
interop: use global lib ctx for default provider side (CI lib ctx fix)
aidangarske
committed
CI: include lib64 in LD_LIBRARY_PATH so Linux finds the local libcrypto
aidangarske
committed
PQC: canonical ML-KEM/ML-DSA APIs + address review feedback
aidangarske
committed
PQC: address skoll review (empty msg, NULL-key reinit, KEM mixed-NULL, get_params, KEM op name, debian pqc)
aidangarske
committed
PQC: address review nits (drop experimental mentions, early-return inits)
aidangarske
committed
Add PQC OpenSSL-vector KAT CI, ML-DSA message API, seed/ikme keygen params, and WP_LOG_COMP_PQC tracing
aidangarske
committed
Make ML-KEM/ML-DSA opt-in (--enable-pqc/--enable-mlkem/--enable-mldsa) with version-floor gates and per-algorithm CI coverage
aidangarske
committed
KAT CI: add --enable-openssl-test so replace-default builds OpenSSL evp_test (replace-default uses no-tests)
aidangarske
committed
Add pure ML-KEM TLS groups (MLKEM512/768/1024) with encoded-public-key support for TLS 1.3 key exchange
aidangarske
committed
Add hybrid PQC TLS groups (X25519MLKEM768, SecP256r1MLKEM768, SecP384r1MLKEM1024)
aidangarske
committed
PQC interop: add TLS 1.3 handshake group interop (wolfProvider <-> default, both directions, all ML-KEM and hybrid groups)
aidangarske
committed
Add ML-DSA encoder/decoder (PEM/DER SPKI+PKCS8) so ML-DSA keys and certs load through wolfProvider
aidangarske
committed
Register ML-DSA TLS signature algorithms (mldsa44/65/87) so ML-DSA certs authenticate in TLS 1.3
aidangarske
committed
Provide ML-DSA X509 signature AlgorithmIdentifier so wolfProvider can sign ML-DSA certificates
aidangarske
committed
Register ML-DSA keymgmt OID/short-name aliases so ML-DSA CA certs validate as trust anchors (EVP_PKEY_is_a / check_sig_alg_match)
aidangarske
committed
Add nginx PQC OSP CI: ML-DSA cert auth + ML-KEM/hybrid KEX via nginx Test::Nginx harness (wolfSSL stable+master, latest OpenSSL, force-fail, pinned nginx/nginx-tests)
aidangarske
committed
nginx PQC OSP: run oqs-demos nginx in Docker with wolfProvider swapped for oqs-provider, exercising ML-DSA auth + ML-KEM/hybrid KEX via their connection test
aidangarske
committed
Add unit tests for ML-DSA encoder/decoder, ML-DSA X.509 signing, and hybrid-group KEM; run all PQC unit tests in CI
aidangarske
committed
PQC interop: add ML-DSA certificate TLS authentication test (sign+verify per group), validating the ML-DSA TLS signature algorithm end-to-end
aidangarske
committed
PQC security review fixes: zeroize seed/entropy/randomizer on free, apply FIPS 204 sig params in all init paths, reject wrong-length keygen seed, close hybrid match fail-open
aidangarske
committed
PQC security review round 2: apply+validate keygen seed params at init, reject wrong-length IKME/test-entropy, scrub hybrid shared secret on failure, fix fill_rnd log flag
aidangarske
committed
PQC security review round 3: use sigSize as authoritative capacity, derive ECC public on hybrid private import, scrub ML-KEM shared secret on failure
aidangarske
committed
PQC security review round 4: fix ML-KEM KEM out-of-bounds scrub on undersized buffer (early-return on size check), reject mismatched public on hybrid keypair import
aidangarske
committed
PQC security review round 5: copy IKME on KEM dupctx, advertise ML-DSA public only when actually decoded, give hybrid variant tables internal linkage
aidangarske
committed
PQC security review round 6: reject NULL ML-DSA message update with non-zero length
aidangarske
committed
nginx PQC test: lengthen HTTP response wait to avoid handshake-timing flakes
aidangarske
committed
nginx PQC CI: skip pre-PQC-floor wolfSSL stable (master-only until v5.9.2); fix wget TLS by setting LD_LIBRARY_PATH after nginx download
aidangarske
committed
nginx PQC test: rename GROUPS->KEX_GROUPS (GROUPS is a bash special array of GIDs, so the loop ran once with a GID); drop install-layout-dependent mime.types include; add startup debug
aidangarske
committed
nginx PQC: add replace-default/non-replace as a matrix axis (4 modes per wolfSSL ref), loading wolfProvider via provider.conf in non-replace builds
aidangarske
committed
ci: run nginx PQC OSP test nightly via reusable workflow (Wave 1), drop self push/PR trigger
aidangarske
committed
ML-DSA import: drop dead pub-probe (a FIPS 204 raw private key never yields the public via ExportPubRaw)
aidangarske
committed
ML-KEM import/match: set pub when priv is decoded (drop probe); compare private first since its encode embeds the public
aidangarske
committed
ML-DSA sign: let wolfSSL hedge the randomizer via SignCtx; supply a seed only for test-entropy/deterministic signing
aidangarske
committed
ML-DSA digest-sign: support FIPS 204 HashML-DSA via a digest object + wc_MlDsaKey_SignCtxHash/VerifyCtxHash (pure path unchanged for md=NULL)
aidangarske
committed
ML-DSA pre-hash: allowlist SHA2/SHA3 digests (reject MD5/SHA-1) and reject the external-mu + pre-hash combination both ways
aidangarske
committed
ML-DSA sig ctx: set hashType to WC_HASH_TYPE_NONE explicitly in newctx (do not assume the enum is zero)
aidangarske
committed
ML-DSA pre-hash: allow SHA-512/256 in the digest allowlist and NULL-guard sigLen/key in the prehash sign path
aidangarske
committed
ML-DSA pre-hash: set dup hashType only after a successful hash copy and NULL-guard the prehash verify path
aidangarske
committed
ML-DSA pure sign/verify: stream the message into mu via SHAKE-256 (wc_Shake256_Update) and SignMuWithSeed/VerifyMu, instead of buffering the whole message
aidangarske
committed
ML-DSA streaming sign: reject public-only keys (restore the prvKeySet gate lost with SignMuWithSeed) and reject context/mu/encoding changes after streaming starts
aidangarske
committed
ML-DSA sig params: also reject context/mu/encoding changes once external-mu input has been buffered, not just after pure streaming starts
aidangarske
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.