Skip to content

[sival_pqc] Support PQ_UDS_44 and PQ_UDS_87 and remove UDS_MLDSA - #338

Merged
willyzha merged 1 commit into
lowRISC:mainfrom
willyzha:sival-pqc-dual-uds
Sep 22, 2026
Merged

willyzha merged 1 commit into
lowRISC:mainfrom
willyzha:sival-pqc-dual-uds

Conversation

@willyzha

Copy link
Copy Markdown
Collaborator

Update sival_pqc configuration and provisioning test utilities to align with OpenTitan's PQC UDS key strategy:

  • Expect and verify both PQ_UDS_44 (ML-DSA-44 subject key) and PQ_UDS_87 (ML-DSA-87 subject key) certificates signed by the ML-DSA-87 DICE ICA key.
  • Generate ML-DSA-44 SubjectPublicKeyInfo for PQ_UDS_44 and ML-DSA-87 SubjectPublicKeyInfo for PQ_UDS_87 / EXT_MLDSA_* in buildTestTbsCert(), returning an error on unrecognized ML-DSA certificate labels.
  • Remove legacy UDS_MLDSA label references across SPM, PA loadtest, and TBS test generators.

@willyzha
willyzha requested a review from clundin25 September 22, 2026 16:31
Update sival_pqc configuration and provisioning test utilities to align with OpenTitan's PQC UDS key strategy:
- Expect and verify both PQ_UDS_44 (ML-DSA-44 subject key) and PQ_UDS_87 (ML-DSA-87 subject key) certificates signed by the ML-DSA-87 DICE ICA key.
- Generate ML-DSA-44 SubjectPublicKeyInfo for PQ_UDS_44 and ML-DSA-87 SubjectPublicKeyInfo for PQ_UDS_87 / EXT_MLDSA_* in buildTestTbsCert(), returning an error on unrecognized ML-DSA certificate labels.
- Remove legacy UDS_MLDSA label references across SPM, PA loadtest, and TBS test generators.
@willyzha
willyzha merged commit cfe79e7 into lowRISC:main Sep 22, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants