Add ML-DSA signature and public key algorithm OID constants#14884
Merged
Conversation
Add ML_DSA_44/65/87 to SignatureAlgorithmOID and PublicKeyAlgorithmOID, along with their human-readable names and documentation. https://claude.ai/code/session_01ENDmAD4rsLTkCw1QG9txBL
alex
commented
May 21, 2026
| We now only publish ``arm64`` wheels for macOS. | ||
| * **BACKWARDS INCOMPATIBLE:** Support for 32-bit Windows has been removed. | ||
| Users should move to a 64-bit Python installation. | ||
| * Added :attr:`~cryptography.x509.oid.SignatureAlgorithmOID.ML_DSA_44`, |
Member
Author
There was a problem hiding this comment.
I don't think these need changelog docs
Per review feedback, the new OID constants don't need a changelog note. https://claude.ai/code/session_01ENDmAD4rsLTkCw1QG9txBL
reaperhulk
approved these changes
May 21, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Adds the ML-DSA (FIPS 204) algorithm OID constants to the public OID classes:
SignatureAlgorithmOID.ML_DSA_44/ML_DSA_65/ML_DSA_87PublicKeyAlgorithmOID.ML_DSA_44/ML_DSA_65/ML_DSA_87These correspond to the dotted strings
2.16.840.1.101.3.4.3.17,.18, and.19. The change also registers their human-readable names in_OID_NAMESand documents them in the X.509 reference.This is a small, purely-additive precursor split out from the larger work to support ML-DSA keys/signatures in X.509 (certificates, CSRs, CRLs), so the constants can be reviewed on their own.
Test plan
SignatureAlgorithmOID.ML_DSA_{44,65,87}andPublicKeyAlgorithmOID.ML_DSA_{44,65,87}resolve to the correct dotted strings_OID_NAMESentries (ML-DSA-44/-65/-87)rufflint/format passhttps://claude.ai/code/session_01ENDmAD4rsLTkCw1QG9txBL
Generated by Claude Code