Skip to content

Move ML-DSA to FIPSMODULE#2095

Merged
WillChilds-Klein merged 4 commits intoaws:mainfrom
jakemas:mldsa-to-module
Jan 7, 2025
Merged

Move ML-DSA to FIPSMODULE#2095
WillChilds-Klein merged 4 commits intoaws:mainfrom
jakemas:mldsa-to-module

Conversation

@jakemas
Copy link
Copy Markdown
Contributor

@jakemas jakemas commented Jan 6, 2025

Issues:

Move ML-DSA to FIPS module.

ML-DSA is still off by default in the FIPS module. We will be removing the enable_dilithium flag in #2096.

Description of changes:

The following files have been moved from the crypto/dilithium/ directory:

  • Testing framework p_pqdsa_test.cc moved to evp_extra/p_pqdsa_test.cc
  • Reference implementation directory pqcrystals_dilithium_ref_common/ moved to fipsmodule/ml_dsa/ml_dsa_ref/
  • ml_dsa.{h/c} moved to fipsmodule/ml_dsa/

This is consistant with the ML-KEM implementation in the fipsmodule, that has a kem folder (analogous to the pqdsa folder) and ml_kem folder (analogous to ml_dsa folder).

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license.

@jakemas jakemas requested a review from a team as a code owner January 6, 2025 21:47
@codecov-commenter
Copy link
Copy Markdown

codecov-commenter commented Jan 6, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 78.76%. Comparing base (edeb62f) to head (5e54cda).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #2095      +/-   ##
==========================================
+ Coverage   78.74%   78.76%   +0.01%     
==========================================
  Files         598      598              
  Lines      103656   103656              
  Branches    14720    14719       -1     
==========================================
+ Hits        81629    81645      +16     
+ Misses      21375    21359      -16     
  Partials      652      652              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@WillChilds-Klein WillChilds-Klein enabled auto-merge (squash) January 7, 2025 22:26
@WillChilds-Klein WillChilds-Klein merged commit c826c21 into aws:main Jan 7, 2025
@jakemas jakemas mentioned this pull request Feb 6, 2025
@jakemas jakemas deleted the mldsa-to-module branch February 6, 2025 23:10
justsmth pushed a commit that referenced this pull request Feb 12, 2025
Note: **Merge after #2177 is merged**.

### Issues:
Resolves #CryptoAlg-2826

As part of validating ML-DSA into AWS-LC-FIPS we must include both
`PQDSA` and `ML-DSA` directories into the fipsmodule.

This PR is a repeat of:
- #2095

### Description of changes: 

Much like the series of PRs for ML-KEM we will implement the move into
the FIPS module across split PRs:
- #1828
- #1832
- #1838

Previous PR:
- #2166

This PR is part (2) to move `ML-DSA` from `crypto/ml_dsa/` to
`crypto/fipsmodule/ml_dsa/`.

We did this once before:
- #2095

But had to revert it here due to static fips builds for ARM failing in
CI (CryptoAlg-2899)
- #2104

We are now unblocked by:
- #2177

By submitting this pull request, I confirm that my contribution is made
under the terms of the Apache 2.0 license and the ISC license.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants