Allow ML-DSA roots and intermediates - #517
Conversation
Sorry, something went wrong.
Forking individual package from Go's standard library is almost impossible, I tried. See the reason here. As I already mentioned in golang/go#64537, check out AgiliGo. |
Sorry, something went wrong.
|
Should this use assembly for the ML-DSA operations to prevent side-channel attacks? Or is that not an issue because production users will use an HSM? |
Sorry, something went wrong.
Pebble is not intended for production use; as documented in its README and as demonstrated by the fact that it generates its signing keys on startup and forgets them on shutdown, it is intended for testing and development use only. It's fine if its signing operations are not constant-time. |
Sorry, something went wrong.
|
We should be able to issue mldsa65 roots and intermediates once go1.27 is released. golang/go#78888 |
Sorry, something went wrong.
Add support for using ML-DSA-65 to generate Pebble's root and intermediate keys and certificates.
This uses Cloudflare's "circl" library to handle generating ML-DSA keys, serializing pubkeys, and generating signatures. Specifically, it uses the mldsa44, mldsa65, and mldsa87 packages, as well as the abstractions provided by the sign and pki packages:
However, the Go stdlib crypto/x509 package does not support using these keys. Although they implement the crypto.Signer interface, the x509 package also needs to be able to map keys to PublicKeyAlgorithm and SignatureAlgorithm OIDs, and does not provide any hooks for crypto.Signers to provide that information. As such, this PR also forks the relevant portions of crypto/x509 (MarshalPKIXPublicKey, CreateCertificate, and ParseCertificate), strips them down to their bare bones, and then adds support for ML-DSA.