CVS commit: pkgsrc/security

["Alistair G. Crooks" <agc%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   agc
Date:           Tue Sep  8 18:55:27 UTC 2026

Modified Files:
        pkgsrc/security: Makefile
Added Files:
        pkgsrc/security/mldsa: DESCR Makefile PLIST distinfo

Log Message:
Add security/mldsa-20260908 to the packages collection

        This is mldsa, a module-lattice-based digital signature algorithm
        utility for generating keypairs, signing and verifying files and data.
        It has an alter ego, mlsignify, implementing the same command line
        switches as signify(1).  The mldsa and mlsignify utilities are based
        on the libmldsa(3) library, which uses parts of liboqs and openssl to
        provide ML-DSA-65 (NIST FIPS 204) post-quantum digital signatures.
        The secret key is usually protected by passphrase-based encryption,
        which uses Argon2id as a KDF, and AES256-GCM.

        SHA 3 512 is used for digests.


To generate a diff of this commit:
cvs rdiff -u -r1.1022 -r1.1023 pkgsrc/security/Makefile
cvs rdiff -u -r0 -r1.1 pkgsrc/security/mldsa/DESCR \
    pkgsrc/security/mldsa/Makefile pkgsrc/security/mldsa/PLIST \
    pkgsrc/security/mldsa/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/Makefile
diff -u pkgsrc/security/Makefile:1.1022 pkgsrc/security/Makefile:1.1023
--- pkgsrc/security/Makefile:1.1022     Thu Aug 27 08:03:27 2026
+++ pkgsrc/security/Makefile    Tue Sep  8 18:55:26 2026
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.1022 2026/08/27 08:03:27 adam Exp $
+# $NetBSD: Makefile,v 1.1023 2026/09/08 18:55:26 agc Exp $
 #
 
 COMMENT=       Security and cryptography tools and libraries
@@ -264,6 +264,7 @@ SUBDIR+=    minisign
 SUBDIR+=       mirrordir
 SUBDIR+=       mit-krb5
 SUBDIR+=       mit-krb5-appl
+SUBDIR+=       mldsa
 SUBDIR+=       monocypher
 SUBDIR+=       mozilla-rootcerts
 SUBDIR+=       mozilla-rootcerts-openssl

Added files:

Index: pkgsrc/security/mldsa/DESCR
diff -u /dev/null pkgsrc/security/mldsa/DESCR:1.1
--- /dev/null   Tue Sep  8 18:55:27 2026
+++ pkgsrc/security/mldsa/DESCR Tue Sep  8 18:55:26 2026
@@ -0,0 +1,10 @@
+This is mldsa, a module-lattice-based digital signature algorithm
+utility for generating keypairs, signing and verifying files and data.
+It has an alter ego, mlsignify, implementing the same command line
+switches as signify(1).  The mldsa and mlsignify utilities are based
+on the libmldsa(3) library, which uses parts of liboqs and openssl to
+provide ML-DSA-65 (NIST FIPS 204) post-quantum digital signatures.
+The secret key is usually protected by passphrase-based encryption,
+which uses Argon2id as a KDF, and AES256-GCM.
+
+SHA 3 512 is used for digests.
Index: pkgsrc/security/mldsa/Makefile
diff -u /dev/null pkgsrc/security/mldsa/Makefile:1.1
--- /dev/null   Tue Sep  8 18:55:27 2026
+++ pkgsrc/security/mldsa/Makefile      Tue Sep  8 18:55:26 2026
@@ -0,0 +1,24 @@
+# $NetBSD: Makefile,v 1.1 2026/09/08 18:55:26 agc Exp $
+
+DISTNAME=              mldsa-${VERSION}
+VERSION=               20260908
+CATEGORIES=            security
+MASTER_SITES=          -${MASTER_SITE_CODEBERG:=agc-codeberg/mldsa/archive/${VERSION}.tar.gz}
+
+MAINTAINER=            agc%NetBSD.org@localhost
+HOMEPAGE=              https://codeberg.org/agc-codeberg/mldsa/
+COMMENT=               ML-DSA-65 post-quantum signing and verification
+LICENSE=               mit
+
+WRKSRC=                        ${WRKDIR}/mldsa
+
+USE_LANGUAGES=         c
+
+USE_BSD_MAKEFILE=      yes
+AUTO_MKDIRS=           yes
+TEST_TARGET=           t
+
+BUILDLINK_API_DEPENDS.openssl+= openssl>=3.5   # needed for ML-DSA-65
+.include "../../security/openssl/buildlink3.mk"
+
+.include "../../mk/bsd.pkg.mk"
Index: pkgsrc/security/mldsa/PLIST
diff -u /dev/null pkgsrc/security/mldsa/PLIST:1.1
--- /dev/null   Tue Sep  8 18:55:27 2026
+++ pkgsrc/security/mldsa/PLIST Tue Sep  8 18:55:26 2026
@@ -0,0 +1,7 @@
+@comment $NetBSD: PLIST,v 1.1 2026/09/08 18:55:26 agc Exp $
+bin/mldsa
+bin/mlsignify
+lib/libmldsa.a
+lib/libmldsa_p.a
+man/man1/mldsa.1
+man/man3/libmldsa.3
Index: pkgsrc/security/mldsa/distinfo
diff -u /dev/null pkgsrc/security/mldsa/distinfo:1.1
--- /dev/null   Tue Sep  8 18:55:27 2026
+++ pkgsrc/security/mldsa/distinfo      Tue Sep  8 18:55:26 2026
@@ -0,0 +1,5 @@
+$NetBSD: distinfo,v 1.1 2026/09/08 18:55:26 agc Exp $
+
+BLAKE2s (mldsa-20260908.tar.gz) = 6655544f5637879f892d90ce812af65bedb727dcc35777d44442c11adc0d1649
+SHA512 (mldsa-20260908.tar.gz) = fdaeb9227b1d7470ef9fd9b232a7cdc1a78e303dfa4f1ea204616860c6209c98cee70ab08434514855849813f7f98f253b274b47f4de2f2521d85d9c5fe8812e
+Size (mldsa-20260908.tar.gz) = 124599 bytes