Added support for ML-DSA in softhsm2-util

Author: antoinelochet

.github/workflows/ci.yml

@@ -142,7 +142,7 @@ jobs:
         run: |
           make check || (find . -name test-suite.log -exec cat {} \; && false)
 
-  windows:
+  windows_botan_ossl11:
     name: Windows (${{ matrix.arch }}, ${{ matrix.backend }})
     runs-on: windows-2022
     strategy:
@@ -156,11 +156,11 @@ jobs:
           - arch: x64
             backend: botan
             target-platform: x64
-            build-options: -DENABLE_ECC=OFF -DENABLE_EDDSA=OFF
+            build-options: -DENABLE_ECC=OFF -DENABLE_EDDSA=OFF 
           - arch: x86
             backend: openssl
             target-platform: Win32
-            build-options: -DENABLE_ECC=OFF -DENABLE_EDDSA=OFF
+            build-options: -DENABLE_ECC=OFF -DENABLE_EDDSA=OFF 
     steps:
       - uses: actions/checkout@v4
       - uses: ilammy/msvc-dev-cmd@v1
@@ -188,3 +188,78 @@ jobs:
           CTEST_OUTPUT_ON_FAILURE: 1
         run: |
           cmake --build build --target RUN_TESTS
+  windows_ossl30:
+    name: Windows (${{ matrix.arch }}, OpenSSL 3.4)
+    runs-on: windows-2022
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - arch: x64
+            target-platform: x64
+            build-options:
+          - arch: x86
+            target-platform: Win32
+            build-options: -DENABLE_ECC=OFF -DENABLE_EDDSA=OFF 
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ilammy/msvc-dev-cmd@v1
+        with:
+          arch: ${{ matrix.arch }}
+      - name: Create vcpkg.json
+        run: >
+          echo '{ "dependencies": [ "openssl", "cppunit" ],
+                  "overrides": [ { "name": "openssl", "version-string": "3.4.1" } ],
+                  "builtin-baseline": "38d1652f152d36481f2f4e8a85c0f1e14f3769f7" }' > vcpkg.json
+      - uses: seanmiddleditch/vcpkg-action@master
+        id: vcpkg
+        with:
+          manifest-dir: ${{ github.workspace }}
+          triplet: ${{ matrix.arch }}-windows
+          token: ${{ github.token }}
+      - name: Build
+        run: |
+          mkdir build
+          cmake -B build ${{ steps.vcpkg.outputs.vcpkg-cmake-config }} -A ${{ matrix.target-platform }} -DWITH_CRYPTO_BACKEND=openssl ${{ matrix.build-options }} -DDISABLE_NON_PAGED_MEMORY=ON -DBUILD_TESTS=ON
+          cmake --build build
+      - name: Test
+        env:
+          CTEST_OUTPUT_ON_FAILURE: 1
+        run: |
+          cmake --build build --target RUN_TESTS
+  windows_ossl35:
+    name: Windows (${{ matrix.arch }}, OpenSSL 3.5)
+    runs-on: windows-2022
+    strategy:
+      fail-fast: false
+      matrix:
+        include:
+          - arch: x64
+            target-platform: x64
+            build-options: -DENABLE_MLDSA=ON 
+    steps:
+      - uses: actions/checkout@v4
+      - uses: ilammy/msvc-dev-cmd@v1
+        with:
+          arch: ${{ matrix.arch }}
+      - name: Create vcpkg.json
+        run: >
+          echo '{ "dependencies": [ "openssl", "cppunit" ],
+                  "overrides": [ { "name": "openssl", "version-string": "3.5.4" } ],
+                  "builtin-baseline": "38d1652f152d36481f2f4e8a85c0f1e14f3769f7" }' > vcpkg.json
+      - uses: seanmiddleditch/vcpkg-action@master
+        id: vcpkg
+        with:
+          manifest-dir: ${{ github.workspace }}
+          triplet: ${{ matrix.arch }}-windows
+          token: ${{ github.token }}
+      - name: Build
+        run: |
+          mkdir build
+          cmake -B build ${{ steps.vcpkg.outputs.vcpkg-cmake-config }} -A ${{ matrix.target-platform }} -DWITH_CRYPTO_BACKEND=openssl ${{ matrix.build-options }} -DDISABLE_NON_PAGED_MEMORY=ON -DBUILD_TESTS=ON
+          cmake --build build
+      - name: Test
+        env:
+          CTEST_OUTPUT_ON_FAILURE: 1
+        run: |
+          cmake --build build --target RUN_TESTS

.gitignore

@@ -81,5 +81,5 @@ src/lib/test/softhsm2-reset-on-fork.conf
 src/lib/test/softhsm2-mech.conf
 src/lib/test/softhsm2-negative-mech.conf
 src/lib/test/softhsm2.conf
-src/lib/test/tokens/64d6c3fe-1575-1736-1d26-5ccb28440ea7/
-src/lib/test/tokens/dummy
+src/lib/test/tokens
+src/bin/util/test/tokens

cmake/modules/CompilerOptions.cmake

@@ -370,6 +370,27 @@ elseif(WITH_CRYPTO_BACKEND STREQUAL "openssl")
         message(STATUS "OpenSSL: Support for EDDSA is disabled")
     endif(ENABLE_EDDSA)
 
+    # acx_openssl_mldsa.m4
+    if(ENABLE_MLDSA)
+        # ML-DSA
+        set(testfile ${CMAKE_SOURCE_DIR}/cmake/modules/tests/test_openssl_mldsa.c)
+        try_run(RUN_MLDSA COMPILE_RESULT
+                "${CMAKE_BINARY_DIR}/prebuild_santity_tests" ${testfile}
+                LINK_LIBRARIES ${CRYPTO_LIBS}
+                CMAKE_FLAGS
+                    "-DINCLUDE_DIRECTORIES=${CRYPTO_INCLUDES}"
+                )
+        if(COMPILE_RESULT AND RUN_MLDSA EQUAL 0)
+            set(WITH_ML_DSA 1)
+            message(STATUS "OpenSSL: Found ML-DSA")
+        else()
+            set(error_msg "OpenSSL: Cannot find ML-DSA! OpenSSL library has no ML-DSA support!")
+            message(FATAL_ERROR ${error_msg})
+        endif()
+    else(ENABLE_MLDSA)
+        message(STATUS "OpenSSL: Support for ML-DSA is disabled")
+    endif(ENABLE_MLDSA)
+
     # acx_openssl_gost.m4
     if(ENABLE_GOST)
         set(testfile ${CMAKE_SOURCE_DIR}/cmake/modules/tests/test_openssl_gost.c)

cmake/modules/tests/test_openssl_mldsa.c

@@ -0,0 +1,11 @@
+#include <openssl/evp.h>
+#include <openssl/objects.h>
+int main()
+{
+    EVP_PKEY_CTX *ctx;
+    ctx = EVP_PKEY_CTX_new_from_name(NULL, "ML-DSA-44", NULL);
+    
+    if (ctx == NULL)
+        return 1;
+    return 0;
+}

configure.ac

@@ -232,6 +232,7 @@ AC_CONFIG_FILES([
 	src/bin/keyconv/Makefile
 	src/bin/migrate/Makefile
 	src/bin/util/Makefile
+	src/bin/util/test/Makefile
 ])
 
 AC_OUTPUT

src/bin/util/CMakeLists.txt

@@ -43,3 +43,7 @@ install(TARGETS ${PROJECT_NAME}
 install(FILES ${PROJECT_NAME}.1
         DESTINATION ${CMAKE_INSTALL_MANDIR}/man1
         )
+
+if(BUILD_TESTS)
+    add_subdirectory(test)
+endif(BUILD_TESTS)

src/bin/util/Makefile.am

@@ -36,6 +36,8 @@ if WITH_BOTAN
 softhsm2_util_SOURCES +=	softhsm2-util-botan.cpp
 endif
 
+SUBDIRS =		test
+
 EXTRA_DIST =		$(srcdir)/CMakeLists.txt \
 			$(srcdir)/*.h \
 			$(srcdir)/*.cpp