diff options
| author | Daniel Borkmann <daniel@iogearbox.net> | 2026-08-28 19:52:20 +0200 |
|---|---|---|
| committer | Alexei Starovoitov <ast@kernel.org> | 2026-08-29 18:17:50 -0700 |
| commit | d37168c99361b6ee36d5be0c1e159b594f32473c (patch) | |
| tree | e1b8bc110eb88363278343519d8f4b4a748cbf01 /tools/lib/python | |
| parent | 300b348e6d5e8e96c065c42c9999baca224c1661 (diff) | |
bpftool: Support ML-DSA program signing
Add bpftool support for ML-DSA program signing and drop the flag for
ML-DSA keys on affected OpenSSL versions, the same way as commit
0ad9a71933e7 ("modsign: Enable ML-DSA module signing").
Also, an ML-DSA-87 signature is 4627 bytes on its own, so the blob does
not fit into the 4 KiB of MAX_SIG_SIZE anymore and signing would fail
otherwise. Bump to 16 KiB. MAX_SIG_SIZE only sizes the buffer for
what bpftool itself emits (unrelated to BPF_PROG_MAX_SIGNATURE_SIZE).
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Link: https://lore.kernel.org/r/20260828175227.1537793-5-daniel@iogearbox.net
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Diffstat (limited to 'tools/lib/python')
0 files changed, 0 insertions, 0 deletions
