Repository navigation
add new EncryptionAlgorithms for crypto/mldsa #3328
Description
crypto/mldsa in planned for Go 1.27
we could add support for new values exposing some of the ML-DSA modes:
- https://github.com/kubernetes/kubernetes/blob/master/cmd/kubeadm/app/apis/kubeadm/v1beta4/types.go#L582-L592
- https://csrc.nist.gov/pubs/fips/204/final
EncryptionAlgorithmMLDSA44 EncryptionAlgorithmType = "ML-DSA-44"
EncryptionAlgorithmMLDSA65 EncryptionAlgorithmType = "ML-DSA-65"
EncryptionAlgorithmMLDSA87 EncryptionAlgorithmType = "ML-DSA-87"
there is no pressure for this ecosystem wide, because quantum computers are not widely spread yet, but would be nice to pre-date the trends.
we could add it to both v1beta4 and v1.
Activity
[-]add a new EncryptionAlgorithms for crypto/mldsa[/-][+]add new EncryptionAlgorithms for crypto/mldsa[/+]neolit123 commentedon Sep 9, 2026
xref relevant comment to have x509.KeyUsageKeyEncipherment only for RSA - existing bug with ECDSA and should not be present for MLDSA either.
kubernetes/kubernetes#141838 (comment)
https://github.com/kubernetes/kubernetes/blob/master/cmd/kubeadm/app/util/pkiutil/pki_helpers.go#L621