Skip to content

genpkey support for PQ mechs: ML-KEM, ML-DSA, SLHDSA #677

Description

@hsmguy

Hi chaps!

openssl genpkey command line not working for these PQ mechs
MLDSA
MLKEM
SLHDSA

[root@rhel98libp11sw1395 nfast]# openssl genpkey -algorithm ML-KEM-512 -provider pkcs11prov -propquery "provider=pkcs11prov" -pkeyopt "pkcs11_uri:pkcs11:token=accelerator;object=mlkem99;"
Error initializing ML-KEM-512 context
4007EDCB3F7F0000:error:03000096:digital envelope routines:gen_init:operation not supported for this keytype:crypto/evp/pmeth_gn.c:87:

It would be great to add this in since CKA_ID is required for most things (certs, csr's, some signing etc)

thank you :-)

Metadata

Metadata

Assignees

No one assigned

    Labels

    featureSuggest a new feature or improvement

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions