specification icon indicating copy to clipboard operation
specification copied to clipboard

[FEATURE]: Support for post-quantum ML-DSA algorithms in JSF

Open prabhu opened this issue 4 months ago • 0 comments

Describe the feature

The specification currently supports the following JWA [RFC7518] and RFC8037 [RFC8037] asymmetric key algorithms:

"RS256",
"RS384",
"RS512",
"PS256",
"PS384",
"PS512",
"ES256",
"ES384",
"ES512",
"Ed25519",
"Ed448",
"HS256",
"HS384",
"HS512"

To ensure long-term signature validity and supply-chain integrity, the proposal is to add support for post-quantum ML-DSA algorithms. A draft pull-request will be shared shortly.

Possible solutions

A draft pull-request will be shared for discussion purposes.

Alternatives

Will be discussed in the PR.

Additional context

https://docs.openssl.org/3.5/man7/EVP_PKEY-ML-DSA/ https://github.com/nodejs/node/pull/59259

prabhu avatar Aug 16 '25 12:08 prabhu