@@ -1916,6 +1916,9 @@ This can be called many times with new data as it is streamed.
19161916<!-- YAML
19171917added: v11.6.0
19181918changes:
1919+ - version: REPLACEME
1920+ pr-url: https://github.com/nodejs/node/pull/59259
1921+ description: Add support for ML-KEM keys.
19191922 - version: REPLACEME
19201923 pr-url: https://github.com/nodejs/node/pull/59259
19211924 description: Add support for ML-DSA keys.
@@ -2024,6 +2027,9 @@ Other key details might be exposed via this API using additional attributes.
20242027<!-- YAML
20252028added: v11.6.0
20262029changes:
2030+ - version: REPLACEME
2031+ pr-url: https://github.com/nodejs/node/pull/59259
2032+ description: Add support for ML-KEM keys.
20272033 - version: REPLACEME
20282034 pr-url: https://github.com/nodejs/node/pull/59259
20292035 description: Add support for ML-DSA keys.
@@ -2064,6 +2070,9 @@ types are:
20642070* ` 'ml-dsa-44' ` [ ^ openssl35 ] (OID 2.16.840.1.101.3.4.3.17)
20652071* ` 'ml-dsa-65' ` [ ^ openssl35 ] (OID 2.16.840.1.101.3.4.3.18)
20662072* ` 'ml-dsa-87' ` [ ^ openssl35 ] (OID 2.16.840.1.101.3.4.3.19)
2073+ * ` 'ml-kem-512' ` [ ^ openssl35 ] (OID 2.16.840.1.101.3.4.4.1)
2074+ * ` 'ml-kem-768' ` [ ^ openssl35 ] (OID 2.16.840.1.101.3.4.4.2)
2075+ * ` 'ml-kem-1024' ` [ ^ openssl35 ] (OID 2.16.840.1.101.3.4.4.3)
20672076
20682077This property is ` undefined ` for unrecognized ` KeyObject ` types and symmetric
20692078keys.
@@ -2134,6 +2143,8 @@ encryption mechanism, PEM-level encryption is not supported when encrypting
21342143a PKCS #8 key. See [ RFC 5208] [ ] for PKCS #8 encryption and [ RFC 1421] [ ] for
21352144PKCS #1 and SEC1 encryption.
21362145
2146+ Note: ML-KEM keys JWK export is not yet supported.
2147+
21372148### ` keyObject.symmetricKeySize `
21382149
21392150<!-- YAML
@@ -3412,6 +3423,9 @@ input.on('readable', () => {
34123423<!-- YAML
34133424added: v11.6.0
34143425changes:
3426+ - version: REPLACEME
3427+ pr-url: https://github.com/nodejs/node/pull/59259
3428+ description: Add support for ML-KEM keys.
34153429 - version: REPLACEME
34163430 pr-url: https://github.com/nodejs/node/pull/59259
34173431 description: Add support for ML-DSA keys.
@@ -3446,13 +3460,16 @@ must be an object with the properties described above.
34463460If the private key is encrypted, a ` passphrase ` must be specified. The length
34473461of the passphrase is limited to 1024 bytes.
34483462
3449- Note: ML-DSA keys JWK import is not yet supported.
3463+ Note: ML-DSA and ML-KEM keys JWK import is not yet supported.
34503464
34513465### ` crypto.createPublicKey(key) `
34523466
34533467<!-- YAML
34543468added: v11.6.0
34553469changes:
3470+ - version: REPLACEME
3471+ pr-url: https://github.com/nodejs/node/pull/59259
3472+ description: Add support for ML-KEM keys.
34563473 - version: REPLACEME
34573474 pr-url: https://github.com/nodejs/node/pull/59259
34583475 description: Add support for ML-DSA keys.
@@ -3501,7 +3518,7 @@ extracted from the returned `KeyObject`. Similarly, if a `KeyObject` with type
35013518` 'private' ` is given, a new ` KeyObject ` with type ` 'public' ` will be returned
35023519and it will be impossible to extract the private key from the returned object.
35033520
3504- Note: ML-DSA keys JWK import is not yet supported.
3521+ Note: ML-DSA and ML-KEM keys JWK import is not yet supported.
35053522
35063523### ` crypto.createSecretKey(key[, encoding]) `
35073524
@@ -3667,6 +3684,9 @@ underlying hash function. See [`crypto.createHmac()`][] for more information.
36673684<!-- YAML
36683685added: v10.12.0
36693686changes:
3687+ - version: REPLACEME
3688+ pr-url: https://github.com/nodejs/node/pull/59259
3689+ description: Add support for ML-KEM key pairs.
36703690 - version: REPLACEME
36713691 pr-url: https://github.com/nodejs/node/pull/59259
36723692 description: Add support for ML-DSA key pairs.
@@ -3725,7 +3745,8 @@ changes:
37253745 * ` privateKey ` : {string | Buffer | KeyObject}
37263746
37273747Generates a new asymmetric key pair of the given ` type ` . RSA, RSA-PSS, DSA, EC,
3728- Ed25519, Ed448, X25519, X448, and DH are currently supported.
3748+ Ed25519, Ed448, X25519, X448, DH, ML-DSA[ ^ openssl35 ] , and ML-KEM[ ^ openssl35 ]
3749+ are currently supported.
37293750
37303751If a ` publicKeyEncoding ` or ` privateKeyEncoding ` was specified, this function
37313752behaves as if [ ` keyObject.export() ` ] [ ] had been called on its result. Otherwise,
@@ -3789,6 +3810,9 @@ a `Promise` for an `Object` with `publicKey` and `privateKey` properties.
37893810<!-- YAML
37903811added: v10.12.0
37913812changes:
3813+ - version: REPLACEME
3814+ pr-url: https://github.com/nodejs/node/pull/59259
3815+ description: Add support for ML-KEM key pairs.
37923816 - version: REPLACEME
37933817 pr-url: https://github.com/nodejs/node/pull/59259
37943818 description: Add support for ML-DSA key pairs.
@@ -3818,7 +3842,8 @@ changes:
38183842
38193843* ` type ` : {string} Must be ` 'rsa' ` , ` 'rsa-pss' ` , ` 'dsa' ` , ` 'ec' ` , ` 'ed25519' ` ,
38203844 ` 'ed448' ` , ` 'x25519' ` , ` 'x448' ` , ` 'dh' ` , ` 'ml-dsa-44' ` [ ^ openssl35 ] ,
3821- ` 'ml-dsa-65' ` [ ^ openssl35 ] , or ` 'ml-dsa-87' ` [ ^ openssl35 ] .
3845+ ` 'ml-dsa-65' ` [ ^ openssl35 ] , ` 'ml-dsa-87' ` [ ^ openssl35 ] , ` 'ml-kem-512' ` [ ^ openssl35 ] ,
3846+ ` 'ml-kem-768' ` [ ^ openssl35 ] , and ` 'ml-kem-1024' ` [ ^ openssl35 ] .
38223847* ` options ` : {Object}
38233848 * ` modulusLength ` : {number} Key size in bits (RSA, DSA).
38243849 * ` publicExponent ` : {number} Public exponent (RSA). ** Default:** ` 0x10001 ` .
@@ -3842,7 +3867,8 @@ changes:
38423867 * ` privateKey ` : {string | Buffer | KeyObject}
38433868
38443869Generates a new asymmetric key pair of the given ` type ` . RSA, RSA-PSS, DSA, EC,
3845- Ed25519, Ed448, X25519, X448, DH, and ML-DSA[ ^ openssl35 ] are currently supported.
3870+ Ed25519, Ed448, X25519, X448, DH, ML-DSA[ ^ openssl35 ] , and ML-KEM[ ^ openssl35 ]
3871+ are currently supported.
38463872
38473873If a ` publicKeyEncoding ` or ` privateKeyEncoding ` was specified, this function
38483874behaves as if [ ` keyObject.export() ` ] [ ] had been called on its result. Otherwise,
0 commit comments