crypto: add ML-DSA support to crypto.sign and crypto.verify

Author: panva

deps/ncrypto/ncrypto.cc

@@ -2488,7 +2488,18 @@ bool EVPKeyPointer::isRsaVariant() const {
 bool EVPKeyPointer::isOneShotVariant() const {
   if (!pkey_) return false;
   int type = id();
-  return type == EVP_PKEY_ED25519 || type == EVP_PKEY_ED448;
+  switch (type) {
+    case EVP_PKEY_ED25519:
+    case EVP_PKEY_ED448:
+#if OPENSSL_VERSION_MAJOR >= 3 && OPENSSL_VERSION_MINOR >= 5
+    case EVP_PKEY_ML_DSA_44:
+    case EVP_PKEY_ML_DSA_65:
+    case EVP_PKEY_ML_DSA_87:
+#endif
+      return true;
+    default:
+      return false;
+  }
 }
 
 bool EVPKeyPointer::isSigVariant() const {

doc/api/crypto.md

@@ -5442,6 +5442,9 @@ Throws an error if FIPS mode is not available.
 <!-- YAML
 added: v12.0.0
 changes:
+  - version: REPLACEME
+    pr-url: https://github.com/nodejs/node/pull/59259
+    description: Add support for ML-DSA signing.
   - version: v18.0.0
     pr-url: https://github.com/nodejs/node/pull/41678
     description: Passing an invalid callback to the `callback` argument
@@ -5552,6 +5555,9 @@ not introduce timing vulnerabilities.
 <!-- YAML
 added: v12.0.0
 changes:
+  - version: REPLACEME
+    pr-url: https://github.com/nodejs/node/pull/59259
+    description: Add support for ML-DSA signature verification.
   - version: v18.0.0
     pr-url: https://github.com/nodejs/node/pull/41678
     description: Passing an invalid callback to the `callback` argument

test/parallel/test-crypto-pqc-sign-verify-ml-dsa.js

@@ -0,0 +1,68 @@
+'use strict';
+
+const common = require('../common');
+if (!common.hasCrypto)
+  common.skip('missing crypto');
+
+const { hasOpenSSL } = require('../common/crypto');
+
+if (!hasOpenSSL(3, 5))
+  common.skip('requires OpenSSL >= 3.5');
+
+const assert = require('assert');
+const {
+  randomBytes,
+  sign,
+  verify,
+} = require('crypto');
+
+const fixtures = require('../common/fixtures');
+
+function getKeyFileName(type, suffix) {
+  return `${type.replaceAll('-', '_')}_${suffix}.pem`;
+}
+
+for (const [asymmetricKeyType, sigLen] of [
+  ['ml-dsa-44', 2420], ['ml-dsa-65', 3309], ['ml-dsa-87', 4627],
+]) {
+  const keys = {
+    public: fixtures.readKey(getKeyFileName(asymmetricKeyType, 'public'), 'ascii'),
+    private: fixtures.readKey(getKeyFileName(asymmetricKeyType, 'private'), 'ascii'),
+    private_seed_only: fixtures.readKey(getKeyFileName(asymmetricKeyType, 'private_seed_only'), 'ascii'),
+    private_priv_only: fixtures.readKey(getKeyFileName(asymmetricKeyType, 'private_priv_only'), 'ascii'),
+  };
+
+  for (const privateKey of [keys.private, keys.private_seed_only, keys.private_priv_only]) {
+    for (const data of [randomBytes(0), randomBytes(1), randomBytes(32), randomBytes(128), randomBytes(1024)]) {
+      // sync
+      {
+        const signature = sign(undefined, data, privateKey);
+        assert.strictEqual(signature.byteLength, sigLen);
+        assert.strictEqual(verify(undefined, randomBytes(32), keys.public, signature), false);
+        assert.strictEqual(verify(undefined, data, keys.public, Buffer.alloc(sigLen)), false);
+        assert.strictEqual(verify(undefined, data, keys.public, signature), true);
+        assert.strictEqual(verify(undefined, data, privateKey, signature), true);
+        assert.throws(() => sign('sha256', data, privateKey), { code: 'ERR_OSSL_INVALID_DIGEST' });
+        assert.throws(
+          () => verify('sha256', data, keys.public, Buffer.alloc(sigLen)),
+          { code: 'ERR_OSSL_INVALID_DIGEST' });
+      }
+
+      // async
+      {
+        sign(undefined, data, privateKey, common.mustSucceed((signature) => {
+          assert.strictEqual(signature.byteLength, sigLen);
+          verify(undefined, data, privateKey, signature, common.mustSucceed((valid) => {
+            assert.strictEqual(valid, true);
+          }));
+          verify(undefined, data, privateKey, Buffer.alloc(sigLen), common.mustSucceed((valid) => {
+            assert.strictEqual(valid, false);
+          }));
+        }));
+
+        sign('sha256', data, privateKey, common.expectsError(/invalid digest/));
+        verify('sha256', data, keys.public, Buffer.alloc(sigLen), common.expectsError(/invalid digest/));
+      }
+    }
+  }
+}