The Rustls 0.23.44 release, a new version of the Rust-based TLS library, now enables post-quantum secure ML-DSA certificates by default. This feature utilizes the aws-lc-rs crypto provider.
ML-DSA certificates, while not currently supported on the public web PKI, are designed for use within private certificate hierarchies. The Module-Lattice-Based Digital Signature Algorithm (ML-DSA) is gaining traction as a potential replacement for RSA and ECDSA, offering fast key generation, signing, and verification speeds, alongside security against attacks from quantum computers.
In addition to enabling ML-DSA certificates, the latest Rustls release restricts access to the SSL key log file, limiting read and write permissions to only the file owner.
Read the original coverage
💬 Comments
📜 Comment Policy