Skip to content

[hsmtool] SLH-DSA key generation support - #30726

Merged
jwnrt merged 6 commits into
lowRISC:earlgrey_1.0.0from
jwnrt:earlgrey-1.0.0-slh-dsa
Jul 24, 2026
Merged

[hsmtool] SLH-DSA key generation support#30726
jwnrt merged 6 commits into
lowRISC:earlgrey_1.0.0from
jwnrt:earlgrey-1.0.0-slh-dsa

Conversation

@jwnrt

@jwnrt jwnrt commented Jul 13, 2026

Copy link
Copy Markdown
Contributor
  1. Patches SoftHSM2 with the (not yet merged) implement SLH-DSA signing and verification using OpenSSL softhsm/SoftHSMv2#862 changes for SLH-DSA support.
  2. Adds a new command tree to HSMtool for SLH-DSA with only a generation command right now.

The spx command tree is left alone for backwards compatibility.

@jwnrt
jwnrt requested a review from luismarques July 13, 2026 15:03
@jwnrt
jwnrt requested review from a team, cfrantz and rswarbrick as code owners July 13, 2026 15:03
Comment thread sw/host/hsmtool/src/commands/slh_dsa/generate.rs Outdated
Comment thread sw/host/hsmtool/src/util/key/slh_dsa.rs Outdated
@jwnrt
jwnrt marked this pull request as draft July 13, 2026 18:35
@jwnrt
jwnrt force-pushed the earlgrey-1.0.0-slh-dsa branch from e57e58d to 6cdda3e Compare July 13, 2026 19:11
Comment thread sw/host/hsmtool/src/commands/slh_dsa/generate.rs Outdated
Comment thread sw/host/hsmtool/src/commands/slh_dsa/generate.rs Outdated
Comment thread sw/host/hsmtool/src/util/key/slh_dsa.rs Outdated
@jwnrt
jwnrt force-pushed the earlgrey-1.0.0-slh-dsa branch 2 times, most recently from 5d1b1b9 to 9a26d07 Compare July 14, 2026 09:43
Comment thread third_party/hsm/BUILD.softhsm2.bazel Outdated
@jwnrt
jwnrt force-pushed the earlgrey-1.0.0-slh-dsa branch from 9a26d07 to 8bfe655 Compare July 14, 2026 11:22
@jwnrt
jwnrt marked this pull request as ready for review July 14, 2026 11:22
Comment thread sw/host/hsmtool/src/commands/slh_dsa/generate.rs Outdated
Comment thread sw/host/hsmtool/tests/BUILD Outdated
Comment thread sw/host/hsmtool/src/commands/slh_dsa/generate.rs Outdated
Comment thread sw/host/hsmtool/src/commands/slh_dsa/generate.rs Outdated
@jwnrt
jwnrt force-pushed the earlgrey-1.0.0-slh-dsa branch from 8bfe655 to e5b4051 Compare July 15, 2026 12:41
@rswarbrick
rswarbrick removed their request for review July 16, 2026 11:44
jwnrt added 6 commits July 20, 2026 10:06
Signed-off-by: James Wainwright <james.wainwright@lowrisc.org>
Signed-off-by: James Wainwright <james.wainwright@lowrisc.org>
Selected 0.0.3 over 0.1.0 to ensure compatability with `ecdsa`'s
`signature` dependency.

Signed-off-by: James Wainwright <james.wainwright@lowrisc.org>
The types of these variables implement `Display` so we don't need to call
`to_string` on them. The next crate update triggers a warning about this
so we can fix it now.

Signed-off-by: James Wainwright <james.wainwright@lowrisc.org>
Version >= 0.11.0 is required for SlhDsa support. This is the latest
version at time of committing.

The `cryptoki-profile` patch has been upstreamed and can be removed.
The cryptoki-vendor-defined-mechanism-type patch required updating, and
the new version has been upstreamed.

Signed-off-by: James Wainwright <james.wainwright@lowrisc.org>
Signed-off-by: James Wainwright <james.wainwright@lowrisc.org>
@jwnrt
jwnrt force-pushed the earlgrey-1.0.0-slh-dsa branch 2 times, most recently from 8a87b0b to fa4b793 Compare July 21, 2026 13:13
@jwnrt
jwnrt merged commit f11678e into lowRISC:earlgrey_1.0.0 Jul 24, 2026
93 of 103 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants