Dilithium -> ML-DSA-65

CBonnell · Oct 21, 2024 · 4bfff2a · 4bfff2a
1 parent 9ce19c6
commit 4bfff2a
Show file tree

Hide file tree

Showing 2 changed files with 12 additions and 12 deletions.
diff --git a/draft-bonnell-lamps-chameleon-certs.md b/draft-bonnell-lamps-chameleon-certs.md
@@ -881,9 +881,9 @@ fvRCLit6wo0=
 
 ~~~
 
-### Dilithium root certificate
+### ML-DSA-65 root certificate
 
-This is the Dilithium root certificate. It contains a Delta Certificate
+This is the ML-DSA-65 root certificate. It contains a Delta Certificate
 Descriptor extension which includes sufficient information to recreate
 the ECDSA P-521 root.
 
@@ -1303,9 +1303,9 @@ fYAjMD9K/AAAAAAAAAAAAAAAAAAAAAUNFR4jKA==
 
 ## Algorithm migration example
 
-### Dilithium signing end-entity certificate
+### ML-DSA-65 signing end-entity certificate
 
-This is an end-entity signing certificate which certifies a Dilithium
+This is an end-entity signing certificate which certifies a ML-DSA-65
 key.
 
 ~~~
@@ -1570,7 +1570,7 @@ AAAAAAAIEhcbIA==
 
 This is an end-entity signing certificate which certifies an EC key. It
 contains a Delta Certificate Descriptor extension which includes
-sufficient information to recreate the Dilithium signing end-entity
+sufficient information to recreate the ML-DSA-65 signing end-entity
 certificate.
 
 ~~~

diff --git a/example_generator/main.py b/example_generator/main.py
@@ -144,7 +144,7 @@ def _issue_certificate(builder: x509.CertificateBuilder, subject_key: Union[PqcK
 
 
 _DILITHIUM_ROOT_NAME = x509.Name(_ROOT_SHARED_RDNS + [
-    x509.NameAttribute(x509.OID_COMMON_NAME, 'Dilithium Root - G1')
+    x509.NameAttribute(x509.OID_COMMON_NAME, 'ML-DSA-65 Root - G1')
 ])
 
 
@@ -164,7 +164,7 @@ def _add_shared_root_extensions(builder: x509.CertificateBuilder):
 
 
 def _generate_dilthium_key() -> PqcKeyPair:
-    instance = oqs.Signature('Dilithium3')
+    instance = oqs.Signature('ML-DSA-653')
     public_bytes = instance.generate_keypair()
 
     return PqcKeyPair(univ.ObjectIdentifier('1.3.6.1.4.1.2.267.7.6.5'), instance, public_bytes)
@@ -289,23 +289,23 @@ def print_cert(name, description, pyasn1_cert: rfc5280.Certificate):
 print_cert('EC P-521 root certificate', 'This is the EC root certificate.', ecdsa_root)
 
 dilithium_root = issue_dilthium_root(dilithium_root_key, ecdsa_root)
-print_cert('Dilithium root certificate',
-           'This is the Dilithium root certificate. It contains a Delta Certificate Descriptor extension which '
+print_cert('ML-DSA-65 root certificate',
+           'This is the ML-DSA-65 root certificate. It contains a Delta Certificate Descriptor extension which '
         'includes sufficient information to recreate the ECDSA P-521 root.',
            dilithium_root)
 
 print('## Algorithm migration example')
 print()
 
 dilithium_signing_ee = issue_dilithium_signing_ee(dilithium_ee_key, dilithium_root_key)
-print_cert('Dilithium signing end-entity certificate',
-           'This is an end-entity signing certificate which certifies a Dilithium key.',
+print_cert('ML-DSA-65 signing end-entity certificate',
+           'This is an end-entity signing certificate which certifies a ML-DSA-65 key.',
            dilithium_signing_ee)
 
 ecdsa_signing_ee_base = issue_ecdsa_signing_ee(dilithium_signing_ee)
 print_cert('EC signing end-entity certificate with encoded Delta Certificate',
            'This is an end-entity signing certificate which certifies an EC key. It contains a Delta '
-            'Certificate Descriptor extension which includes sufficient information to recreate the Dilithium '
+            'Certificate Descriptor extension which includes sufficient information to recreate the ML-DSA-65 '
             'signing end-entity certificate.',
            ecdsa_signing_ee_base),