Re: [PATCH v11 3/8] pkcs7, x509: Add ML-DSA support

From: David Howells

Date: Tue Jan 06 2026 - 04:37:46 EST


Eric Biggers <ebiggers@xxxxxxxxxx> wrote:

> This "PKCS#7" (really CMS -- the kernel misleadingly uses the old name)

I implemented PKCS#7 first and then added CMS on top of that.

> That needs to either be implemented correctly, or not at all. (If only
> (2) is actually needed, then "not at all" probably would be preferable.)

At the time of writing, openssl didn't fully support CMS with ML-DSA, and that
limited things.

David