mldsa-native icon indicating copy to clipboard operation
mldsa-native copied to clipboard

C Implementation: Seeds as Keys

Open jakemas opened this issue 11 months ago • 5 comments

NIST now allow the private seed to be exported during keygen and saved for later reconstruction. See:

https://csrc.nist.gov/Projects/post-quantum-cryptography/faqs#Rdc7

For both FIPS 203 and FIPS 204, a KeyGen seed is considered an acceptable alternative format for a key-pair, or for the private (i.e., decapsulation or signing) key. In particular, generating the seed in one cryptographic module and then importing or exporting it into another cryptographic module is allowed. The internal key generation functions ML-KEM.KeyGen_Internal(d, z) and ML-DSA.KeyGen_internal(ξ) can be accessed for this purpose.

Implement the ability to export private seeds during keygen.

jakemas avatar Mar 04 '25 18:03 jakemas

Will merge https://github.com/pq-code-package/mldsa-native/pull/42 first

jakemas avatar Mar 04 '25 18:03 jakemas

@jakemas, are you still planning to work on this? If not, could you unassign yourself?

mkannwischer avatar Oct 04 '25 03:10 mkannwischer

@jakemas - I don't think this is strictly needed for an alpha release. If you are not planning to implement this in the next two weeks, could we remove this from this release?

mkannwischer avatar Oct 23 '25 07:10 mkannwischer

Due to lack of feedback, I'm removing this from v1.0.0-alpha. Note that we can always add new APIs later on.

mkannwischer avatar Oct 25 '25 04:10 mkannwischer

@jakemas, is this one still needed? Are you working on it?

mkannwischer avatar Nov 28 '25 08:11 mkannwischer