rpms/crypto-policies
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Update from upstream (nss ML-KEM/ML-DSA)

Browse Source 
- nss: enable mlkem1024secp384r1, rename mlkem768secp256r1
- nss: enable ML-DSA

Resolves: RHEL-106868
Resolves: RHEL-103962
This commit is contained in:
Alexander Sosedkin 2025-08-01 17:30:25 +02:00
parent e045e42116
commit 22c41095a0
2 changed files with 13 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
crypto-policies.spec
View File

@ -1,5 +1,5 @@
%global git_date 20250714
%global git_commit 95bf40e7f8853024a2f04fa4687afa5b89b99e98
%global git_date 20250804
%global git_commit 2ca4115362b7d3be02e5ef860cb4abc286dc4b26
%{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
%global _python_bytecompile_extra 0
@ -68,9 +68,13 @@ sed -i "s/:TLS-REQUIRE-EMS:/:/" tests/outputs/*FIPS*.txt
%endif
%if 0%{?rhel} == 11
# currently ELN NSS doesn't support mlkem768secp256r1
# currently ELN NSS doesn't support mlkem768secp256r1, mlkem1024secp384r1, mldsa
sed -i '/P256-MLKEM768/d' python/policygenerators/nss.py
sed -i "s/:mlkem768secp256r1:/:/" tests/outputs/*-nss.txt
sed -i '/P384-MLKEM1024/d' python/policygenerators/nss.py
sed -i "/ML-DSA/d" python/policygenerators/nss.py
sed -i "s/:secp256r1mlkem768:/:/" tests/outputs/*-nss.txt
sed -i "s/:secp384r1mlkem1024:/:/" tests/outputs/*-nss.txt
sed -i "s/:ML-DSA-[0-9][0-9]//g" tests/outputs/*-nss.txt
%endif
%make_build
@ -236,6 +240,10 @@ exit 0
%{_datarootdir}/crypto-policies/python
%changelog
* Mon Aug 04 2025 Alexander Sosedkin <asosedkin@redhat.com> - 20250804-1.git2ca4115
- nss: enable mlkem1024secp384r1, rename mlkem768secp256r1
- nss: enable ML-DSA
* Mon Jul 14 2025 Alexander Sosedkin <asosedkin@redhat.com> - 20250714-1.git95bf40e
- sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
- sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...

2
sources
View File

@ -1 +1 @@
SHA512 (crypto-policies-git95bf40e.tar.gz) = 733689f356fad8052d084b721e0b87a171de90aaa2889725ccad6180d3cc95ca22b79e17894d1bd0dde40438f94d70148f765b33a215361df217015d803f5114
SHA512 (crypto-policies-git2ca4115.tar.gz) = 38df76067514cf2de890a495c94e155884bf051cf1f4212d112954ea414f3686892d0605311acdbe70d0030e7d7566b98dadfad319f6bdbae96c34b246813514