CycloneDX / CycloneDX/specification

[FEATURE]: Support for post-quantum ML-DSA algorithms in JSF

Open
#674 0 comments 0 reactions 0 assignees View on GitHub
proposed core enhancement
Dominant language
XSLT
Stars
547
Forks
93
Avg merge
7h 11m
Merged PRs (30d)
37

Description

## Describe the feature

The specification currently supports the following JWA [RFC7518] and RFC8037 [RFC8037] asymmetric key algorithms:

```
"RS256",
"RS384",
"RS512",
"PS256",
"PS384",
"PS512",
"ES256",
"ES384",
"ES512",
"Ed25519",
"Ed448",
"HS256",
"HS384",
"HS512"
```

To ensure long-term signature validity and supply-chain integrity, the proposal is to add support for post-quantum ML-DSA algorithms. A draft pull-request will be shared shortly.

## Possible solutions

A draft pull-request will be shared for discussion purposes.

## Alternatives

Will be discussed in the PR.

## Additional context

https://docs.openssl.org/3.5/man7/EVP_PKEY-ML-DSA/
https://github.com/nodejs/node/pull/59259

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.