CycloneDX / CycloneDX/specification
[FEATURE]: Support for post-quantum ML-DSA algorithms in JSF
- Dominant language
- XSLT
- Stars
- 547
- Forks
- 93
- Avg merge
- 7h 11m
- Merged PRs (30d)
- 37
Description
## Describe the feature
The specification currently supports the following JWA [RFC7518] and RFC8037 [RFC8037] asymmetric key algorithms:
```
"RS256",
"RS384",
"RS512",
"PS256",
"PS384",
"PS512",
"ES256",
"ES384",
"ES512",
"Ed25519",
"Ed448",
"HS256",
"HS384",
"HS512"
```
To ensure long-term signature validity and supply-chain integrity, the proposal is to add support for post-quantum ML-DSA algorithms. A draft pull-request will be shared shortly.
## Possible solutions
A draft pull-request will be shared for discussion purposes.
## Alternatives
Will be discussed in the PR.
## Additional context
https://docs.openssl.org/3.5/man7/EVP_PKEY-ML-DSA/
https://github.com/nodejs/node/pull/59259
Contributor guide
Assessment
This issue has not been assessed yet.