X509 support for ML-DSA and dual-alg certs

[sebastian-carpenter]

Description

Improve ML-DSA support for X509:

• Translation of pkey's
• Printing certificates
• pubkey access

Printing:

• Reworked X509PrintPubKey to lookup the item to print via the NID
• Added ML-DSA print support
• Added print for dual-alg certs
  • Unrecognized algs will not stop the print either, matching OSSL
• Added NID's for the oid's associated with the alt extensions

pkey:

• pubKey buffer normalized to hold only the raw MLDSA key
• Translation depends on the normalized buffer and extra compat support for MLDSA evp pkeys #11597

wolfSSL_X509_PUBKEY_get0_param:

• Previously just returned a pointer, modified to return just the BIT STRING within the given spki (best effort)

zd#22316

Testing

tests/api.c, new:

• do_dual_alg_root_certgen_mldsa, test_wolfSSL_X509_print_mldsa, test_wolfSSL_X509_print_dual_alg, test_wolfSSL_X509_print_dual_alg_mldsa, test_wolfSSL_X509_print_dual_alg_unsupported
• Generate certs: ecc, mldsa. Test printing ECC, MLDSA, and alt sections works.
• Unrecognized algs do not cause printing to fail. Instead that section is replaced with the alg OID.

tests/api.c, modified:

• fix invalid date 20493112 -> 20491231.

tests/api/test_ossl_x509_pk.c:

• New: test_wolfSSL_X509_PUBKEY_MLDSA
  • Test SPKI generation
• Modified:
  • test_wolfSSL_X509_PUBKEY_RSA, test_wolfSSL_X509_PUBKEY_EC wrap output in spki.
  • test_wolfSSL_X509_set_pubkey test that the needed raw pubKey buffer is given, assert failure of MLDSA public key derivation (PR Added ML-DSA MakePublicKey derivation #10985 will require an API call instead of it being on-demand), dilithium OID is preserved.

Checklist

• added tests
• updated/added doxygen
• updated appropriate READMEs
• Updated manual and documentation

[Copilot]

Copilot review overview

🟡 Changes recommended

ML-DSA X.509 public-key round trips fail in builds without asymmetric-key export support.

Review effort: Balanced
Findings: 1

Open (1)

• Initialize ML-DSA level before decoding raw keys in no-export builds · New

What changed in this PR

Adds ML-DSA and dual-algorithm certificate support across X.509 parsing, printing, key translation, and OpenSSL-compatible APIs.

Changes:

• Adds ML-DSA EVP key encoding and certificate printing.
• Adds dual-algorithm extension NIDs, OIDs, and print handling.
• Expands tests for SPKI, PKCS#8, PEM, and X.509 workflows.

File	Description
wolfssl/​wolfcrypt/​asn.h	Defines dual-algorithm extension NIDs.
wolfcrypt/​src/​evp.c	Prints ML-DSA public keys.
wolfcrypt/​src/​evp_pk.c	Adds ML-DSA DER/SPKI and PKCS#8 handling.
wolfcrypt/​src/​asn.c	Maps dual-algorithm extension OIDs.
tests/​api/​test_ossl_x509_pk.h	Registers ML-DSA X.509 tests.
tests/​api/​test_ossl_x509_pk.c	Tests ML-DSA SPKI and public-key handling.
tests/​api/​test_ossl_pem.h	Registers ML-DSA PEM tests.
tests/​api/​test_ossl_pem.c	Tests ML-DSA key round trips.
tests/​api.c	Adds certificate-generation and printing tests.
src/​x509.c	Implements ML-DSA and dual-algorithm X.509 support.
src/​ssl_asn1.c	Registers dual-algorithm object metadata.
src/​pk.c	Updates ML-DSA PKCS#8 processing.
src/​internal.c	Populates parsed ML-DSA X.509 public keys.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[Copilot]

Copilot review overview

🟡 Changes recommended

ML-DSA public-key printing fails for EVP_PKEY objects backed by PKCS#8 private-key data.

Review effort: Balanced
Findings: 1 · 1

Open (2)

• Print public keys from ML-DSA private-key objects · New
• Correct fixture comment to December 31, 2049 · New

Resolved since last review (1)

• Initialize ML-DSA level before decoding raw keys in no-export builds

[github-actions]

MemBrowse Memory Report

gcc-arm-cortex-m4-openssl-compat

• FLASH: .rodata -16 B, .text +128 B (+0.0%, 792,524 B / 1,048,576 B, total: 76% used)

linuxkm-standard

• Data: __patchable_function_entries +48 B (+0.1%, 51,648 B)
  No memory changes detected for:
• gcc-arm-cortex-m0plus
• gcc-arm-cortex-m3
• gcc-arm-cortex-m4
• gcc-arm-cortex-m4-baremetal
• gcc-arm-cortex-m4-crypto-only
• gcc-arm-cortex-m4-dtls13
• gcc-arm-cortex-m4-min-ecc
• gcc-arm-cortex-m4-pkcs7
• gcc-arm-cortex-m4-pq
• gcc-arm-cortex-m4-rsa-only
• gcc-arm-cortex-m4-sp-math
• gcc-arm-cortex-m4-tls12
• gcc-arm-cortex-m4-tls13
• gcc-arm-cortex-m7
• gcc-arm-cortex-m7-pq
• gcc-arm-cortex-m7-tls13
• linuxkm-pie
• stm32-sim-stm32h753

[sebastian-carpenter]

Jenkins retest this please

[Frauschi]

Overall looks great, just some small issues.

[Frauschi]

LGTM