[openssl/openssl] 2fabd5: Once initialised, ML-DSA keys should be immutable

  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: 2fabd5d2741a577e2c26c74baf4f50405ece6814
      https://github.com/openssl/openssl/commit/2fabd5d2741a577e2c26c74baf4f50405ece6814
  Author: Viktor Dukhovni <[email protected]>
  Date:   2026-06-25 (Thu, 25 Jun 2026)

  Changed paths:
    M crypto/err/openssl.txt
    M include/openssl/proverr.h
    M providers/common/provider_err.c
    M providers/implementations/keymgmt/ml_dsa_kmgmt.c
    M providers/implementations/keymgmt/ml_kem_kmgmt.c
    M test/ml_dsa_test.c
    M test/ml_kem_evp_extra_test.c

  Log Message:
  -----------
  Once initialised, ML-DSA keys should be immutable

ML-DSA keys should become immutable once key material has been added.
This is already the case for at least ML-KEM keys, and should generally
be the case across all key types.

- Added the requisite check in the key management provider ml_dsa_import()
  function.
- Also, consolidated the ML-KEM checks in ml_kem_import().  These were
  previously partly in ml_kem_key_fromdata().

Reviewed-by: Shane Lontis <[email protected]>
Reviewed-by: Paul Dale <[email protected]>
MergeDate: Thu Jun 25 02:03:35 2026
(Merged from https://github.com/openssl/openssl/pull/30421)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/8d7bec-2fabd5%40github.com.