KarpelesLab / jwt / 22744026399

79%

push

github

add post-quantum algorithm support

Signing (JWS):
- ML-DSA-44, ML-DSA-65, ML-DSA-87 (FIPS 204, via KarpelesLab/mldsa)
- SLH-DSA all 12 variants: SHA2/SHAKE × 128/192/256 × s/f (FIPS 205, via KarpelesLab/slhdsa)
- Auto-detection in GetAlgoForSigner for both ML-DSA and SLH-DSA keys

Key encapsulation (JWE):
- ML-KEM-768, ML-KEM-1024 (FIPS 203, via crypto/mlkem)
- Shared secret derived into CEK via HKDF-SHA256
- Works with all content encryption algorithms (A*GCM, A*CBC-HS*)

Requires Go 1.24+ for crypto/mlkem.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

128 of 168 new or added lines in 4 files covered. (76.19%)

1224 of 1569 relevant lines covered (78.01%)

13.45 hits per line