Example ML-KEM credentials from draft-ietf-lamps-kyber-certificates-11

Author: peterdettman

pkix/src/test/java/org/bouncycastle/cert/test/MLKEMCredentialsTest.java

@@ -0,0 +1,37 @@
+package org.bouncycastle.cert.test;
+
+import java.security.GeneralSecurityException;
+import java.security.Security;
+
+import org.bouncycastle.jce.provider.BouncyCastleProvider;
+import org.bouncycastle.util.test.SimpleTest;
+
+public class MLKEMCredentialsTest
+    extends SimpleTest
+{
+    public String getName()
+    {
+        return "MLKEMCredentials";
+    }
+
+    public void performTest()
+        throws Exception
+    {
+        checkSampleCredentials(SampleCredentials.ML_KEM_512, SampleCredentials.ML_DSA_44);
+        checkSampleCredentials(SampleCredentials.ML_KEM_768, SampleCredentials.ML_DSA_65);
+        checkSampleCredentials(SampleCredentials.ML_KEM_1024, SampleCredentials.ML_DSA_87);
+    }
+
+    private static void checkSampleCredentials(SampleCredentials subject, SampleCredentials issuer)
+        throws GeneralSecurityException
+    {
+        subject.getCertificate().verify(issuer.getCertificate().getPublicKey(), BouncyCastleProvider.PROVIDER_NAME);
+    }
+
+    public static void main(String[] args)
+    {
+        Security.addProvider(new BouncyCastleProvider());
+
+        runTest(new MLKEMCredentialsTest());
+    }
+}

pkix/src/test/java/org/bouncycastle/cert/test/SampleCredentials.java

@@ -27,6 +27,10 @@ public class SampleCredentials
     public static final SampleCredentials ML_DSA_65 = load("ML-DSA-65", "pkix/cert/mldsa", "ML-DSA-65.pem");
     public static final SampleCredentials ML_DSA_87 = load("ML-DSA-87", "pkix/cert/mldsa", "ML-DSA-87.pem");
 
+    public static final SampleCredentials ML_KEM_512 = load("ML-KEM-512", "pkix/cert/mlkem", "ML-KEM-512.pem");
+    public static final SampleCredentials ML_KEM_768 = load("ML-KEM-768", "pkix/cert/mlkem", "ML-KEM-768.pem");
+    public static final SampleCredentials ML_KEM_1024 = load("ML-KEM-1024", "pkix/cert/mlkem", "ML-KEM-1024.pem");
+
     public static final SampleCredentials SLH_DSA_SHA2_128S = load("SLH-DSA-SHA2-128S", "pkix/cert/slhdsa",
         "SLH-DSA-SHA2-128S.pem");