Commit 52f9fb9b48 for bind
commit 52f9fb9b48ce5fe54e9e5419ff90f64872c71f57
Merge: 50522ba048 20378a1980
Author: OndÅ™ej Surý <ondrej@isc.org>
Date: Tue Nov 3 14:32:48 2026 +0100
new: usr: Add support for the ML-DSA-44 post-quantum DNSSEC algorithm
BIND 9 can now generate keys, sign zones, and validate signatures using ML-DSA-44 (DNSSEC algorithm number 18), the post-quantum signature scheme specified in
draft-westerbaan-dnssec-mldsa. The algorithm is available in dnssec-keygen, dnssec-signzone, and dnssec-policy when BIND 9 is built against OpenSSL 3.5 or newer. ML-DSA-44 public keys
are about 1.3 KB and signatures about 2.4 KB, so signed responses are considerably larger than with the existing algorithms.
Merge branch 'ondrej/ml-dsa-for-dnssec' into 'main'
See merge request isc-projects/bind9!12769