Skip to content

Commit 22fc5bc

Browse files
panvanpaun
authored andcommitted
crypto: support ML-KEM in Web Cryptography
PR-URL: nodejs/node#59569 Reviewed-By: Tobias Nießen <tniessen@tnie.de> Reviewed-By: James M Snell <jasnell@gmail.com>
1 parent 4778a56 commit 22fc5bc

File tree

1 file changed

+15
-2
lines changed

1 file changed

+15
-2
lines changed

src/ncrypto.cpp

Lines changed: 15 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -2130,21 +2130,34 @@ DataPointer EVPKeyPointer::rawPublicKey() const {
21302130
#if OPENSSL_WITH_PQC
21312131
DataPointer EVPKeyPointer::rawSeed() const {
21322132
if (!pkey_) return {};
2133+
2134+
// Determine seed length and parameter name based on key type
2135+
size_t seed_len;
2136+
const char* param_name;
2137+
21332138
switch (id()) {
21342139
case EVP_PKEY_ML_DSA_44:
21352140
case EVP_PKEY_ML_DSA_65:
21362141
case EVP_PKEY_ML_DSA_87:
2142+
seed_len = 32; // ML-DSA uses 32-byte seeds
2143+
param_name = OSSL_PKEY_PARAM_ML_DSA_SEED;
2144+
break;
2145+
case EVP_PKEY_ML_KEM_512:
2146+
case EVP_PKEY_ML_KEM_768:
2147+
case EVP_PKEY_ML_KEM_1024:
2148+
seed_len = 64; // ML-KEM uses 64-byte seeds
2149+
param_name = OSSL_PKEY_PARAM_ML_KEM_SEED;
21372150
break;
21382151
default:
21392152
unreachable();
21402153
}
21412154

2142-
size_t seed_len = 32;
21432155
if (auto data = DataPointer::Alloc(seed_len)) {
21442156
const Buffer<unsigned char> buf = data;
21452157
size_t len = data.size();
2158+
21462159
if (EVP_PKEY_get_octet_string_param(
2147-
get(), OSSL_PKEY_PARAM_ML_DSA_SEED, buf.data, len, &seed_len) != 1)
2160+
get(), param_name, buf.data, len, &seed_len) != 1)
21482161
return {};
21492162
return data;
21502163
}

0 commit comments

Comments
 (0)