diff --git a/crypto-policies.spec b/crypto-policies.spec
index 4384531..971b544 100644
--- a/crypto-policies.spec
+++ b/crypto-policies.spec
@@ -1,5 +1,5 @@
-%global git_date 20250714
-%global git_commit 95bf40e7f8853024a2f04fa4687afa5b89b99e98
+%global git_date 20250804
+%global git_commit 2ca4115362b7d3be02e5ef860cb4abc286dc4b26
 %{?git_commit:%global git_commit_hash %(c=%{git_commit}; echo ${c:0:7})}
 
 %global _python_bytecompile_extra 0
@@ -68,9 +68,13 @@ sed -i "s/:TLS-REQUIRE-EMS:/:/" tests/outputs/*FIPS*.txt
 %endif
 
 %if 0%{?rhel} == 11
-# currently ELN NSS doesn't support mlkem768secp256r1
+# currently ELN NSS doesn't support mlkem768secp256r1, mlkem1024secp384r1, mldsa
 sed -i '/P256-MLKEM768/d' python/policygenerators/nss.py
-sed -i "s/:mlkem768secp256r1:/:/" tests/outputs/*-nss.txt
+sed -i '/P384-MLKEM1024/d' python/policygenerators/nss.py
+sed -i "/ML-DSA/d" python/policygenerators/nss.py
+sed -i "s/:secp256r1mlkem768:/:/" tests/outputs/*-nss.txt
+sed -i "s/:secp384r1mlkem1024:/:/" tests/outputs/*-nss.txt
+sed -i "s/:ML-DSA-[0-9][0-9]//g" tests/outputs/*-nss.txt
 %endif
 
 %make_build
@@ -236,6 +240,10 @@ exit 0
 %{_datarootdir}/crypto-policies/python
 
 %changelog
+* Mon Aug 04 2025 Alexander Sosedkin <asosedkin@redhat.com> - 20250804-1.git2ca4115
+- nss: enable mlkem1024secp384r1, rename mlkem768secp256r1
+- nss: enable ML-DSA
+
 * Mon Jul 14 2025 Alexander Sosedkin <asosedkin@redhat.com> - 20250714-1.git95bf40e
 -  sequoia: add sha3, x25519, ed25519, x448, ed448, but not for rpm-sequoia
 -  sequoia, rpm-sequoia: use ignore_invalid with sha3, x25519, ...
diff --git a/sources b/sources
index 799428b..d81df3a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (crypto-policies-git95bf40e.tar.gz) = 733689f356fad8052d084b721e0b87a171de90aaa2889725ccad6180d3cc95ca22b79e17894d1bd0dde40438f94d70148f765b33a215361df217015d803f5114
+SHA512 (crypto-policies-git2ca4115.tar.gz) = 38df76067514cf2de890a495c94e155884bf051cf1f4212d112954ea414f3686892d0605311acdbe70d0030e7d7566b98dadfad319f6bdbae96c34b246813514