From 39b9bd1cb7d32428842c67e7e8b217027c16962b Mon Sep 17 00:00:00 2001 From: "djm@openbsd.org" Date: Thu, 1 Oct 2026 04:17:39 +0000 Subject: [PATCH] upstream: fix the bit length of ML-DSA 44/Ed25519 keys that was being incorrectly reported as 256. The private key length for these composite keys is 512 bits. This value is only used for display. Spotted by Yiyue Wang OpenBSD-Commit-ID: 5ba7c8a9a457434ca0652042e1c5940bbc6ef5e0 --- ssh-mldsa-eddsa.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/ssh-mldsa-eddsa.c b/ssh-mldsa-eddsa.c index 01c9bcb1c..f79348c61 100644 --- a/ssh-mldsa-eddsa.c +++ b/ssh-mldsa-eddsa.c @@ -1,4 +1,4 @@ -/* $OpenBSD: ssh-mldsa-eddsa.c,v 1.6 2026/09/16 00:43:00 djm Exp $ */ +/* $OpenBSD: ssh-mldsa-eddsa.c,v 1.7 2026/10/01 04:17:39 djm Exp $ */ /* * Copyright (c) 2026 Damien Miller * @@ -470,7 +470,7 @@ const struct sshkey_impl sshkey_mldsa44_ed25519_impl = { /* .nid = */ 0, /* .cert = */ 0, /* .sigonly = */ 0, - /* .keybits = */ 256, + /* .keybits = */ 512, /* size of the private key */ /* .funcs = */ &sshkey_mldsa44_ed25519_funcs, }; @@ -482,7 +482,7 @@ const struct sshkey_impl sshkey_mldsa44_ed25519_cert_impl = { /* .nid = */ 0, /* .cert = */ 1, /* .sigonly = */ 0, - /* .keybits = */ 256, + /* .keybits = */ 512, /* size of the private key */ /* .funcs = */ &sshkey_mldsa44_ed25519_funcs, }; #endif /* USE_MLDSA */