[{"id":38668,"web_url":"https://patchwork.libcamera.org/comment/38668/","msgid":"<177748051557.45302.441369128341593855@ping.linuxembedded.co.uk>","date":"2026-04-29T16:35:15","subject":"Re: [PATCH v2 0/4] Implement ML-DSA-65 for Post-Quantum\n\tCryptographic compliance","submitter":{"id":4,"url":"https://patchwork.libcamera.org/api/people/4/","name":"Kieran Bingham","email":"kieran.bingham@ideasonboard.com"},"content":"Hi Kate,\n\nCould you check through the CI report please? It seems to have failed on\nthis series:\n\nhttps://gitlab.freedesktop.org/camera/libcamera/-/pipelines/1656212\n\n--\nKieran\n\nQuoting Kate Hsuan (2026-04-22 05:47:32)\n> This patchset integrates the ML-DSA-65 [1] signature algorithm to ensure\n> Post-Quantum Cryptography (PQC) compliance. Following NIST's finalization\n> of PQC standards [2], ML-DSA has been established as the primary\n> quantum-resistant signature standard. As quantum computing advances, legacy\n> algorithms like RSA are becoming increasingly vulnerable and are slated\n> for replacement by 2035 [3]. By adopting ML-DSA for IPA library signing,\n> this work secures the long-term integrity of the IPA library and aligns\n> libcamera with the latest NIST security frameworks.\n> \n> [1] https://csrc.nist.gov/pubs/fips/204/final\n> [2] https://csrc.nist.gov/projects/post-quantum-cryptography/post-quantum-cryptography-standardization/evaluation-criteria/security-(evaluation-criteria)]\n> [3] https://nvlpubs.nist.gov/nistpubs/ir/2024/NIST.IR.8547.ipd.pdf\n> \n> Changes in v2:\n> - Change the meson option name from \"fips\" to \"isp-signature-algo\".\n> - Drop the debug print in the pub_key.cpp.\n> - One line command \"openssl pkeyutl\" is used to sign the IPA library.\n> \n> Kate Hsuan (4):\n> libcamera: pub_key: Add ML-DSA-65 signature algorithm for PQC\n> compliance\n> utils: codegen: gen-ipa-pub-key: replace openssl rsa with openssl pkey\n> ipa: ipa-sign: Sign IPA according to the signature algorithm of the\n> key\n> meson: Add ipa-signature-algo option\n> \n> meson_options.txt | 8 +++++\n> src/ipa/ipa-sign.sh | 2 +-\n> src/libcamera/meson.build | 6 ++++\n> src/libcamera/pub_key.cpp | 53 ++++++++++++++++++++++++++++++--\n> src/meson.build | 14 +++++++--\n> utils/codegen/gen-ipa-pub-key.py | 2 +-\n> utils/gen-ipa-priv-key.sh | 16 ++++++++--\n> 7 files changed, 91 insertions(+), 10 deletions(-)\n> \n> -- \n> 2.53.0\n>","headers":{"Return-Path":"","X-Original-To":"parsemail@patchwork.libcamera.org","Delivered-To":"parsemail@patchwork.libcamera.org","Received":["from lancelot.ideasonboard.com (lancelot.ideasonboard.com\n\t[92.243.16.209])\n\tby patchwork.libcamera.org (Postfix) with ESMTPS id 21589BE173\n\tfor ;\n\tWed, 29 Apr 2026 16:35:22 +0000 (UTC)","from lancelot.ideasonboard.com (localhost [IPv6:::1])\n\tby lancelot.ideasonboard.com (Postfix) with ESMTP id B6F2362FDA;\n\tWed, 29 Apr 2026 18:35:20 +0200 (CEST)","from perceval.ideasonboard.com (perceval.ideasonboard.com\n\t[IPv6:2001:4b98:dc2:55:216:3eff:fef7:d647])\n\tby lancelot.ideasonboard.com (Postfix) with ESMTPS id BF9A862010\n\tfor ;\n\tWed, 29 Apr 2026 18:35:18 +0200 (CEST)","from monstersaurus.ideasonboard.com\n\t(cpc89244-aztw30-2-0-cust6594.18-1.cable.virginm.net [86.31.185.195])\n\tby perceval.ideasonboard.com (Postfix) with ESMTPSA id E56BC56D;\n\tWed, 29 Apr 2026 18:33:34 +0200 (CEST)"],"Authentication-Results":"lancelot.ideasonboard.com; dkim=pass (1024-bit key;\n\tunprotected) header.d=ideasonboard.com header.i=@ideasonboard.com\n\theader.b=\"pOKhfoqv\"; dkim-atps=neutral","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/simple; d=ideasonboard.com;\n\ts=mail; t=1777480415;\n\tbh=z5PyJ0U53KsbLDy4Kalmh4abpsJ58tKUnk02WAX1Q+4=;\n\th=In-Reply-To:References:Subject:From:Cc:To:Date:From;\n\tb=pOKhfoqvvkLlQrJPA10t1u1xmvXFdrfUsO/mJS3qz66vFET1Oslax2EZT/xxIL+Oz\n\tuZ/Tr4QCSVrsbDEl3sZhNHLYeV9kKMV0P2yeN3yg4nqopIyeIvRKzy8GyNJivREc6r\n\tJaoZyme1pZR/fmrwCEJlDoL34vtjmT2bNHXGYixY=","Content-Type":"text/plain; charset=\"utf-8\"","MIME-Version":"1.0","Content-Transfer-Encoding":"quoted-printable","In-Reply-To":"<20260422044736.24717-1-hpa@redhat.com>","References":"<20260422044736.24717-1-hpa@redhat.com>","Subject":"Re: [PATCH v2 0/4] Implement ML-DSA-65 for Post-Quantum\n\tCryptographic compliance","From":"Kieran Bingham ","Cc":"Kate Hsuan ","To":"=?utf-8?q?Barnab=C3=A1s_P=C5=91cze?= ,\n\tKate Hsuan , libcamera-devel@lists.libcamera.org","Date":"Wed, 29 Apr 2026 17:35:15 +0100","Message-ID":"<177748051557.45302.441369128341593855@ping.linuxembedded.co.uk>","User-Agent":"alot/0.9.1","X-BeenThere":"libcamera-devel@lists.libcamera.org","X-Mailman-Version":"2.1.29","Precedence":"list","List-Id":"","List-Unsubscribe":",\n\t","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n\t","Errors-To":"libcamera-devel-bounces@lists.libcamera.org","Sender":"\"libcamera-devel\" "}},{"id":38684,"web_url":"https://patchwork.libcamera.org/comment/38684/","msgid":"","date":"2026-05-04T05:18:34","subject":"Re: [PATCH v2 0/4] Implement ML-DSA-65 for Post-Quantum\n\tCryptographic compliance","submitter":{"id":105,"url":"https://patchwork.libcamera.org/api/people/105/","name":"Kate Hsuan","email":"hpa@redhat.com"},"content":"Hi Kieran,\n\nOn Thu, Apr 30, 2026 at 12:42 AM Kieran Bingham\n wrote:\n>\n> Hi Kate,\n>\n> Could you check through the CI report please? It seems to have failed on\n> this series:\n>\n> https://gitlab.freedesktop.org/camera/libcamera/-/pipelines/1656212\n\nThis may be caused by the incorrect bash if statement. I'll fix it in v3 patch.\nBTW, May I find the results of different OS, such as Fedora?\n\nThank you :)\n\n>\n> --\n> Kieran\n>\n> Quoting Kate Hsuan (2026-04-22 05:47:32)\n> > This patchset integrates the ML-DSA-65 [1] signature algorithm to ensure\n> > Post-Quantum Cryptography (PQC) compliance. Following NIST's finalization\n> > of PQC standards [2], ML-DSA has been established as the primary\n> > quantum-resistant signature standard. As quantum computing advances, legacy\n> > algorithms like RSA are becoming increasingly vulnerable and are slated\n> > for replacement by 2035 [3]. By adopting ML-DSA for IPA library signing,\n> > this work secures the long-term integrity of the IPA library and aligns\n> > libcamera with the latest NIST security frameworks.\n> >\n> > [1] https://csrc.nist.gov/pubs/fips/204/final\n> > [2] https://csrc.nist.gov/projects/post-quantum-cryptography/post-quantum-cryptography-standardization/evaluation-criteria/security-(evaluation-criteria)]\n> > [3] https://nvlpubs.nist.gov/nistpubs/ir/2024/NIST.IR.8547.ipd.pdf\n> >\n> > Changes in v2:\n> > - Change the meson option name from \"fips\" to \"isp-signature-algo\".\n> > - Drop the debug print in the pub_key.cpp.\n> > - One line command \"openssl pkeyutl\" is used to sign the IPA library.\n> >\n> > Kate Hsuan (4):\n> > libcamera: pub_key: Add ML-DSA-65 signature algorithm for PQC\n> > compliance\n> > utils: codegen: gen-ipa-pub-key: replace openssl rsa with openssl pkey\n> > ipa: ipa-sign: Sign IPA according to the signature algorithm of the\n> > key\n> > meson: Add ipa-signature-algo option\n> >\n> > meson_options.txt | 8 +++++\n> > src/ipa/ipa-sign.sh | 2 +-\n> > src/libcamera/meson.build | 6 ++++\n> > src/libcamera/pub_key.cpp | 53 ++++++++++++++++++++++++++++++--\n> > src/meson.build | 14 +++++++--\n> > utils/codegen/gen-ipa-pub-key.py | 2 +-\n> > utils/gen-ipa-priv-key.sh | 16 ++++++++--\n> > 7 files changed, 91 insertions(+), 10 deletions(-)\n> >\n> > --\n> > 2.53.0\n> >\n>","headers":{"Return-Path":"","X-Original-To":"parsemail@patchwork.libcamera.org","Delivered-To":"parsemail@patchwork.libcamera.org","Received":["from lancelot.ideasonboard.com (lancelot.ideasonboard.com\n\t[92.243.16.209])\n\tby patchwork.libcamera.org (Postfix) with ESMTPS id 085C9BDCB5\n\tfor ;\n\tMon, 4 May 2026 05:18:55 +0000 (UTC)","from lancelot.ideasonboard.com (localhost [IPv6:::1])\n\tby lancelot.ideasonboard.com (Postfix) with ESMTP id 1CAC563022;\n\tMon, 4 May 2026 07:18:54 +0200 (CEST)","from us-smtp-delivery-124.mimecast.com\n\t(us-smtp-delivery-124.mimecast.com [170.10.133.124])\n\tby lancelot.ideasonboard.com (Postfix) with ESMTPS id B430762E6A\n\tfor ;\n\tMon, 4 May 2026 07:18:51 +0200 (CEST)","from mail-oo1-f69.google.com (mail-oo1-f69.google.com\n\t[209.85.161.69]) by relay.mimecast.com with ESMTP with STARTTLS\n\t(version=TLSv1.3, cipher=TLS_AES_256_GCM_SHA384) id\n\tus-mta-358-KnXmIbqbNrupITlD9Yc4UA-1; Mon, 04 May 2026 01:18:49 -0400","by mail-oo1-f69.google.com with SMTP id\n\t006d021491bc7-6948d83a548so10755097eaf.0\n\tfor ;\n\tSun, 03 May 2026 22:18:49 -0700 (PDT)"],"Authentication-Results":"lancelot.ideasonboard.com; dkim=pass (1024-bit key;\n\tunprotected) header.d=redhat.com header.i=@redhat.com\n\theader.b=\"Dt/pxSYY\"; dkim-atps=neutral","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com;\n\ts=mimecast20190719; t=1777871930;\n\th=from:from:reply-to:subject:subject:date:date:message-id:message-id:\n\tto:to:cc:cc:mime-version:mime-version:content-type:content-type:\n\tcontent-transfer-encoding:content-transfer-encoding:\n\tin-reply-to:in-reply-to:references:references;\n\tbh=jOd/9nK4zo9HN/FVW70zGcj0VGC84BIGzi/uys2OrpY=;\n\tb=Dt/pxSYYPaJnbFrJAYstfOMiufeUGBnDQBlO7X3t3n8DMLEFPCHIwsB7Eb/Y/hijE6buwK\n\twomSMqdmMXsxnMshC5immLJzvMmhnXHeul1ETVAU7JTTYnFCaoRCH5DNqblRicqhkK9AmV\n\tfYRowaIC+MRiIewWy3T71fs0pt4qqCo=","X-MC-Unique":"KnXmIbqbNrupITlD9Yc4UA-1","X-Mimecast-MFC-AGG-ID":"KnXmIbqbNrupITlD9Yc4UA_1777871928","X-Google-DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed;\n\td=1e100.net; s=20251104; t=1777871928; x=1778476728;\n\th=content-transfer-encoding:cc:to:subject:message-id:date:from\n\t:in-reply-to:references:mime-version:x-gm-gg:x-gm-message-state:from\n\t:to:cc:subject:date:message-id:reply-to;\n\tbh=jOd/9nK4zo9HN/FVW70zGcj0VGC84BIGzi/uys2OrpY=;\n\tb=FI09GBzwkfL+QKHEo9tmDpjpoWH9abiKFPmqpEPe4/Cck+AkBl3qk3+IymBmoVmbQD\n\tEiSbFIHzwgjK9jOUPB21l3k+3lKw6nvlwyC/xyBkmeeaP2P9DBbwbr/2MqkNsB25ygXB\n\ttV0PHIMw0g3/h8e18+BV9f9Oe+TfWLd2yuUssbvaDZ1rEURCHnrM2Sxs4MvrSsd0svyV\n\tjBMTi0gXf2jTJOhG8n805JUA8WbsP/1+9fNRbxiFjigodjb3ev238/iYR/bRz8VugLNW\n\txaGV8K71khHf49r2uyUB6Fr/CS998w+IDFi0WaAfpXCSHThg19kyZTryC0Ksi0ud7eVt\n\tmPVA==","X-Forwarded-Encrypted":"i=1;\n\tAFNElJ+43N9x+GLe7dNp+NTv5t070wCbLULfL9fSyQx9X3RZ1Kz+YMrSQvWEhlG0YUV1S0GmZQJM/gYTezxGYWWTUdc=@lists.libcamera.org","X-Gm-Message-State":"AOJu0Yzb2R9xn0Z8Uf7ReJ063pEcOhQpAoqxpdY6VtV5P7G4WcAcuxpc\n\t9kTH+mB7RzLDk7APGTixzMgn/xxyhW25VDn5ad8kCXGHsgsDR21ylJYCRztm3x1nsXvo5zTlYmh\n\tfr9U6PT4lJJBop8XIiWcR4vMKa749FOgcEs2SXCIETuBuB/NuZ4JcBg0EjNXAwukVSX3GvGxs45\n\t5ydhooISTgMylDK5lmkOjY7Ja0oEM4GtQ8rUzic9pmOjiebLOv+CLuyhKA/Q==","X-Gm-Gg":"AeBDietPsX2ZpymkNm4v4kAJWZB80VVGUHmy8oIIZky0jhjaR6d0m1M64C2MIt4hgbt\n\tSXd7s02+Q3YAX+KTWKjjKsR/Iq08V/Z4a9CO4Cm75m2+ng18RlyVKtWcdq7z5amRCPciJXnjCud\n\tkWxuzV8yoRJ255w44P6zZOk2ycn4svhb3CKw23Wm9A6+/jQNQfSxUkm6+4XXipzHhfs+WmUwgJZ\n\t06+LSOLBIl7wxL2","X-Received":["by 2002:a05:6820:a0b:b0:694:8e28:fd87 with SMTP id\n\t006d021491bc7-696979cc6c4mr3851548eaf.8.1777871928019; \n\tSun, 03 May 2026 22:18:48 -0700 (PDT)","by 2002:a05:6820:a0b:b0:694:8e28:fd87 with SMTP id\n\t006d021491bc7-696979cc6c4mr3851537eaf.8.1777871927471;\n\tSun, 03 May 2026 22:18:47 -0700 (PDT)"],"MIME-Version":"1.0","References":"<20260422044736.24717-1-hpa@redhat.com>\n\t<177748051557.45302.441369128341593855@ping.linuxembedded.co.uk>","In-Reply-To":"<177748051557.45302.441369128341593855@ping.linuxembedded.co.uk>","From":"Kate Hsuan ","Date":"Mon, 4 May 2026 13:18:34 +0800","X-Gm-Features":"AVHnY4K6Q46KP1wtxRuPwEX3wXM8nFNIDziigMecaywkkfp4vNJStcPcFRxm6ac","Message-ID":"","Subject":"Re: [PATCH v2 0/4] Implement ML-DSA-65 for Post-Quantum\n\tCryptographic compliance","To":"Kieran Bingham ","Cc":"=?utf-8?q?Barnab=C3=A1s_P=C5=91cze?= ,\n\tlibcamera-devel@lists.libcamera.org","X-Mimecast-Spam-Score":"0","X-Mimecast-MFC-PROC-ID":"FrItGha539LV3XgWLq6vfgB8jXPJabGG-u8wUlOSJag_1777871928","X-Mimecast-Originator":"redhat.com","Content-Type":"text/plain; charset=\"UTF-8\"","Content-Transfer-Encoding":"quoted-printable","X-BeenThere":"libcamera-devel@lists.libcamera.org","X-Mailman-Version":"2.1.29","Precedence":"list","List-Id":"","List-Unsubscribe":",\n\t","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n\t","Errors-To":"libcamera-devel-bounces@lists.libcamera.org","Sender":"\"libcamera-devel\" "}},{"id":38697,"web_url":"https://patchwork.libcamera.org/comment/38697/","msgid":"<177788464005.45302.2277393916239647904@ping.linuxembedded.co.uk>","date":"2026-05-04T08:50:40","subject":"Re: [PATCH v2 0/4] Implement ML-DSA-65 for Post-Quantum\n\tCryptographic compliance","submitter":{"id":4,"url":"https://patchwork.libcamera.org/api/people/4/","name":"Kieran Bingham","email":"kieran.bingham@ideasonboard.com"},"content":"Quoting Kate Hsuan (2026-05-04 06:18:34)\n> Hi Kieran,\n> \n> On Thu, Apr 30, 2026 at 12:42 AM Kieran Bingham\n> wrote:\n> >\n> > Hi Kate,\n> >\n> > Could you check through the CI report please? It seems to have failed on\n> > this series:\n> >\n> > https://gitlab.freedesktop.org/camera/libcamera/-/pipelines/1656212\n> \n> This may be caused by the incorrect bash if statement. I'll fix it in v3 patch.\n> BTW, May I find the results of different OS, such as Fedora?\n\nI'm afraid I think all of our CI is debian based.\n\n--\nKieran","headers":{"Return-Path":"","X-Original-To":"parsemail@patchwork.libcamera.org","Delivered-To":"parsemail@patchwork.libcamera.org","Received":["from lancelot.ideasonboard.com (lancelot.ideasonboard.com\n\t[92.243.16.209])\n\tby patchwork.libcamera.org (Postfix) with ESMTPS id 4DB89BDCB5\n\tfor ;\n\tMon, 4 May 2026 08:50:44 +0000 (UTC)","from lancelot.ideasonboard.com (localhost [IPv6:::1])\n\tby lancelot.ideasonboard.com (Postfix) with ESMTP id D713762FEC;\n\tMon, 4 May 2026 10:50:43 +0200 (CEST)","from perceval.ideasonboard.com (perceval.ideasonboard.com\n\t[213.167.242.64])\n\tby lancelot.ideasonboard.com (Postfix) with ESMTPS id 90C046271A\n\tfor ;\n\tMon, 4 May 2026 10:50:42 +0200 (CEST)","from monstersaurus.ideasonboard.com\n\t(cpc89244-aztw30-2-0-cust6594.18-1.cable.virginm.net [86.31.185.195])\n\tby perceval.ideasonboard.com (Postfix) with ESMTPSA id D05C4175;\n\tMon, 4 May 2026 10:50:40 +0200 (CEST)"],"Authentication-Results":"lancelot.ideasonboard.com; dkim=pass (1024-bit key;\n\tunprotected) header.d=ideasonboard.com header.i=@ideasonboard.com\n\theader.b=\"GSjQ/JW2\"; dkim-atps=neutral","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/simple; d=ideasonboard.com;\n\ts=mail; t=1777884640;\n\tbh=0IswZOLl3OsXKWz/b1U4c0jWKoA3Y9ys02fsrXyOh2U=;\n\th=In-Reply-To:References:Subject:From:Cc:To:Date:From;\n\tb=GSjQ/JW2MGG9mRzQC8pJO+9ux4rhe6jIzerHxQBtoG7CgFPmP35AwzqpIRL/Xs3Yz\n\t6nNQ8P4C/kERt/2RUzocEAGkAC6fk+5y8p9rYl3iyqmIEIRk1UyUEOh9C3m5pMJXck\n\t4pUgTHVtt+gbQ6DVd3RwjPzXQCptrmmIguV2KXYc=","Content-Type":"text/plain; charset=\"utf-8\"","MIME-Version":"1.0","Content-Transfer-Encoding":"quoted-printable","In-Reply-To":"","References":"<20260422044736.24717-1-hpa@redhat.com>\n\t<177748051557.45302.441369128341593855@ping.linuxembedded.co.uk>\n\t","Subject":"Re: [PATCH v2 0/4] Implement ML-DSA-65 for Post-Quantum\n\tCryptographic compliance","From":"Kieran Bingham ","Cc":"=?utf-8?q?Barnab=C3=A1s_P=C5=91cze?= ,\n\tlibcamera-devel@lists.libcamera.org","To":"Kate Hsuan ","Date":"Mon, 04 May 2026 09:50:40 +0100","Message-ID":"<177788464005.45302.2277393916239647904@ping.linuxembedded.co.uk>","User-Agent":"alot/0.9.1","X-BeenThere":"libcamera-devel@lists.libcamera.org","X-Mailman-Version":"2.1.29","Precedence":"list","List-Id":"","List-Unsubscribe":",\n\t","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n\t","Errors-To":"libcamera-devel-bounces@lists.libcamera.org","Sender":"\"libcamera-devel\" "}}]