[ima-evm-utils PATCH 0/5] Add support for ML-DSA signing and verification

[Stefan Berger <stefanb@linux.ibm.com>]

This series adds support for ML-DSA signing and verification for EVM and
IMA using ML-DSA in pure mode and IMA's sigv3 signature format. Evmctl
will prevent users from trying to use sigv2 signatures with ML-DSA and
therefore ML-DSA requires the usage of --v3. Test cases for IMA and EVM
sigv3 are added using ML-DSA-44 (2420 bytes) and ML-DSA-65 (3309 bytes)
type of keys since those are more likely to fit into xattrs on most
filesystems than the even larger ML-DSA-87 signatures (4627 bytes).

   Stefan

Stefan Berger (5):
  checkpatch: Remove warning when function name is found in output
    string
  Set size of xattr_value to MAX_SIGNATURE_SIZE
  Support signing with ML-DSA keys when OpenSSL >=3.5 is available
  examples: Implement script to create ML-DSA-65 CA and signing keys
  test: Add tests for signing and verifying with ML-DSA keys

 README                               |   3 +-
 examples/ima-gen-local-ca-mldsa65.sh |  29 +++
 examples/ima-genkey-mldsa65.sh       |  34 ++++
 examples/ima-genkey-mldsa87.sh       |  34 ++++
 scripts/checkpatch.pl                |  14 +-
 src/evmctl.c                         |   6 +-
 src/imaevm.h                         |   5 +-
 src/libimaevm.c                      | 258 +++++++++++++++++++++++++--
 tests/gen-keys.sh                    |  22 +++
 tests/sign_verify.test               |  40 ++++-
 10 files changed, 417 insertions(+), 28 deletions(-)
 create mode 100755 examples/ima-gen-local-ca-mldsa65.sh
 create mode 100755 examples/ima-genkey-mldsa65.sh
 create mode 100755 examples/ima-genkey-mldsa87.sh

-- 
2.53.0