wolfSSL - Embedded SSL Library — How to use Dilithium?

Re: How to use Dilithium?

null@example.com (embhorn) — Tue, 26 Aug 2025 21:18:19 +0000

Hi Sunny,

Cert creation form Dilthium keys is not currently supported in wolfCLU. We are working on some PQC cert functionality in wolfCLU. If you'd like to get this specific functionality developed, please send an email to support@wolfssl.com to make a formal feature request.

Thanks,
Eric

Re: How to use Dilithium?

null@example.com (embhorn) — Fri, 22 Aug 2025 22:04:12 +0000

I'll need to confirm that wolfCLU can handle generating certs with PQC keys

Re: How to use Dilithium?

null@example.com (Sunnysunday) — Fri, 22 Aug 2025 21:08:11 +0000

Thanks, that worked.
I have created a dilithium key pair with wolfclu.

wolfssl -genkey dilithium -level 2 -out dilithium_key -outform der -output keypair

Now how do I create and self sign a x.509 certificate with Dilithium?
I tried various commands, such as

wolfssl -req -new -key dilithium_key.priv -keyform der -out dilithium_req.pem -outform pem

but getting ASN no Header errors, etc.

Re: How to use Dilithium?

null@example.com (embhorn) — Fri, 22 Aug 2025 20:28:12 +0000

Please try adding a define for `WOLFSSL_WC_DILITHIUM`

How to use Dilithium?

null@example.com (Sunnysunday) — Fri, 22 Aug 2025 20:03:58 +0000

I am trying Dilithium with wolfssl on Zephyr.

I added

#define HAVE_DILITHIUM

which results in errors.
E.g.:

'DILITHIUM_LEVEL5_PUB_KEY_SIZE' undeclared here (not in a function); did you mean 'DILITHIUM_MAX_PUB_KEY_SIZE'?
C:/ncs/v3.1.0/modules/crypto/wolfssl/src/ssl.c:6029:21: error: 'ML_DSA_LEVEL2_KEY_SIZE' undeclared (first use in this function); did you mean 'ML_DSA_LEVEL2_TYPE'?
6029 | ML_DSA_LEVEL2_KEY_SIZE < (word16)cm->minDilithiumKeySz)

and plenty of there errors related to: DILITHIUM_LEVEL5_PUB_KEY_SIZE, DILITHIUM_LEVEL5_KEY_SIZE, DILITHIUM_LEVEL5_SIG_SIZE
ML_DSA_LEVEL{2,3,5}_KEY_SIZE

Do I need to add extra includes?