Issues integrating with ML-DSA

Santiago de Vicente Poutás

unread,

Jul 16, 2025, 3:52:45 AMJul 16

to openssl-users

Hi all,

I am trying to modify libp11 to support a HSM that has PQC capabilities. For that right now I am trying to create a EVP_PKEY with the new keytype EVP_PKEY_ML_DSA_44. The problem I'm encountering right now is that I'm trying to call EVP_PKEY_assign() with a key_type of EVP_PKEY_ML_DSA_44 but it returns a 0.

I also don't know what to put on the *key part to be honest.

Best Regards,

Neil Horman

unread,

Jul 16, 2025, 8:33:06 AMJul 16

to Santiago de Vicente Poutás, openssl-users

Whats the output of ERR_print_errors_fp after EVP_PKEY_assign returns 0

--
You received this message because you are subscribed to the Google Groups "openssl-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to openssl-user...@openssl.org.
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-users/3c3f7860-5a55-4719-a504-3784fedffe3dn%40openssl.org.

Matt Caswell

unread,

Jul 21, 2025, 6:55:15 AMJul 21

to Santiago de Vicente Poutás, openssl-users

Calling `EVP_PKEY_assign` for ML-DSA really doesn't make any sense. `EVP_PKEY_assign` is deprecated, and only really useful if you are assigning a legacy "low level" key to the EVP_PKEY. Newer provider based keys don't work this way so you should not call EVP_PKEY_assign() for them.