CVS commit: pkgsrc/security

["Alistair G. Crooks" <agc%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   agc
Date:           Sun Nov  1 18:07:19 UTC 2026

Modified Files:
        pkgsrc/security: Makefile
Added Files:
        pkgsrc/security/libmldsa: DESCR Makefile PLIST buildlink3.mk distinfo

Log Message:
Add the library part of pkgsrc/security/mldsa functionality into its own package

Thanks to wiz for pointing out my oversight


To generate a diff of this commit:
cvs rdiff -u -r1.1034 -r1.1035 pkgsrc/security/Makefile
cvs rdiff -u -r0 -r1.1 pkgsrc/security/libmldsa/DESCR \
    pkgsrc/security/libmldsa/Makefile pkgsrc/security/libmldsa/PLIST \
    pkgsrc/security/libmldsa/buildlink3.mk pkgsrc/security/libmldsa/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/Makefile
diff -u pkgsrc/security/Makefile:1.1034 pkgsrc/security/Makefile:1.1035
--- pkgsrc/security/Makefile:1.1034     Tue Oct 27 11:52:53 2026
+++ pkgsrc/security/Makefile    Sun Nov  1 18:07:18 2026
@@ -1,4 +1,4 @@
-# $NetBSD: Makefile,v 1.1034 2026/10/27 11:52:53 wiz Exp $
+# $NetBSD: Makefile,v 1.1035 2026/11/01 18:07:18 agc Exp $
 #
 
 COMMENT=       Security and cryptography tools and libraries
@@ -213,6 +213,7 @@ SUBDIR+=    libkleo
 SUBDIR+=       libksba
 SUBDIR+=       libmcrypt
 SUBDIR+=       libmerkletree
+SUBDIR+=       libmldsa
 SUBDIR+=       libmultigest
 SUBDIR+=       libnetpgpverify
 SUBDIR+=       libnitrokey

Added files:

Index: pkgsrc/security/libmldsa/DESCR
diff -u /dev/null pkgsrc/security/libmldsa/DESCR:1.1
--- /dev/null   Sun Nov  1 18:07:19 2026
+++ pkgsrc/security/libmldsa/DESCR      Sun Nov  1 18:07:18 2026
@@ -0,0 +1,10 @@
+This is mldsa, a module-lattice-based digital signature algorithm
+utility for generating keypairs, signing and verifying files and data.
+It has an alter ego, mlsignify, implementing the same command line
+switches as signify(1).  The mldsa and mlsignify utilities are based
+on the libmldsa(3) library, which uses parts of liboqs and openssl to
+provide ML-DSA-65 (NIST FIPS 204) post-quantum digital signatures.
+The secret key is usually protected by passphrase-based encryption,
+which uses Argon2id as a KDF, and AES256-GCM.
+
+SHA 3 512 is used for digests.
Index: pkgsrc/security/libmldsa/Makefile
diff -u /dev/null pkgsrc/security/libmldsa/Makefile:1.1
--- /dev/null   Sun Nov  1 18:07:19 2026
+++ pkgsrc/security/libmldsa/Makefile   Sun Nov  1 18:07:19 2026
@@ -0,0 +1,32 @@
+# $NetBSD: Makefile,v 1.1 2026/11/01 18:07:19 agc Exp $
+
+DISTNAME=              mldsa-${VERSION}
+PKGNAME=               libmldsa-${VERSION}
+VERSION=               20261029
+CATEGORIES=            security
+MASTER_SITES=          -${MASTER_SITE_CODEBERG:=agc-codeberg/mldsa/archive/${VERSION}.tar.gz}
+
+MAINTAINER=            agc%NetBSD.org@localhost
+HOMEPAGE=              https://codeberg.org/agc-codeberg/mldsa/
+COMMENT=               ML-DSA-65 post-quantum signing and verification
+LICENSE=               mit
+
+WRKSRC=                        ${WRKDIR}/mldsa/dist
+
+USE_LANGUAGES=         c
+
+GNU_CONFIGURE=         yes
+USE_LIBTOOL=           yes
+MAKE_FILE=             Makefile.libtool
+AUTO_MKDIRS=           yes
+TEST_TARGET=           t
+
+_WRAP_EXTRA_ARGS.CC+=  ${_RELRO_LDFLAGS}
+CWRAPPERS_PREPEND.cc+= ${_RELRO_LDFLAGS}
+
+.include "../../security/liboqs/buildlink3.mk"
+
+BUILDLINK_API_DEPENDS.openssl+= openssl>=3.5   # needed for ML-DSA-65
+.include "../../security/openssl/buildlink3.mk"
+
+.include "../../mk/bsd.pkg.mk"
Index: pkgsrc/security/libmldsa/PLIST
diff -u /dev/null pkgsrc/security/libmldsa/PLIST:1.1
--- /dev/null   Sun Nov  1 18:07:19 2026
+++ pkgsrc/security/libmldsa/PLIST      Sun Nov  1 18:07:19 2026
@@ -0,0 +1,7 @@
+@comment $NetBSD: PLIST,v 1.1 2026/11/01 18:07:19 agc Exp $
+include/mldsa.h
+lib/libmldsa.la
+man/man3/libmldsa.3
+@pkgdir man/man3
+@pkgdir man/man1
+@pkgdir bin
Index: pkgsrc/security/libmldsa/buildlink3.mk
diff -u /dev/null pkgsrc/security/libmldsa/buildlink3.mk:1.1
--- /dev/null   Sun Nov  1 18:07:19 2026
+++ pkgsrc/security/libmldsa/buildlink3.mk      Sun Nov  1 18:07:19 2026
@@ -0,0 +1,12 @@
+# $NetBSD: buildlink3.mk,v 1.1 2026/11/01 18:07:19 agc Exp $
+
+BUILDLINK_TREE+=       libmldsa
+
+.if !defined(LIBMLDSA_BUILDLINK3_MK)
+LIBMLDSA_BUILDLINK3_MK:=
+
+BUILDLINK_API_DEPENDS.libmldsa+=       libmldsa>=20261028
+BUILDLINK_PKGSRCDIR.libmldsa?=         ../../security/libmldsa
+.endif # LIBMLDSA_BUILDLINK3_MK
+
+BUILDLINK_TREE+=       -libmldsa
Index: pkgsrc/security/libmldsa/distinfo
diff -u /dev/null pkgsrc/security/libmldsa/distinfo:1.1
--- /dev/null   Sun Nov  1 18:07:19 2026
+++ pkgsrc/security/libmldsa/distinfo   Sun Nov  1 18:07:19 2026
@@ -0,0 +1,5 @@
+$NetBSD: distinfo,v 1.1 2026/11/01 18:07:19 agc Exp $
+
+BLAKE2s (mldsa-20261029.tar.gz) = 3e0e00e516aa3b6420e9aa5fdc1b95e6e36c5ef09ff51309a14cd6c0ce3bbc2e
+SHA512 (mldsa-20261029.tar.gz) = 580633105b5cc9a5cf5978dd8f6717c7ef9b5377ffd6c8341f2f05876e1ac8b774a370b47ec8530bb6a62c4872322b9143e18fa671772e9dbc90bd6a3bc6b700
+Size (mldsa-20261029.tar.gz) = 125570 bytes