README.md (1091B)
1 # Cryptographic audit vectors 2 3 ml_dsa44_audit.json is a curated subset of two upstream ML-DSA-44 verification corpora. The 4 source commit, path, and SHA-256 digest of each complete upstream JSON file are recorded inside the 5 fixture so an auditor can reproduce the selection without trusting this repository. 6 7 Included cases: 8 9 - NIST ACVP tcId 11: valid pure ML-DSA-44 signature with an external context; 10 - Project Wycheproof tcId 18: invalid signature with a repeated hint index, the regression case 11 for CVE-2026-24850 / GHSA-5x2r-hc65-25f9; 12 - Project Wycheproof tcId 56: valid signature immediately below the ML-DSA-44 z norm limit. 13 14 The full upstream files are deliberately not vendored: together they exceed 5 MB. This small set is 15 a permanent integration regression suite, not evidence that the upstream implementation itself has 16 been comprehensively audited. Run it with: 17 18 ```sh 19 cargo test ml_dsa44_matches_pinned_nist_and_wycheproof_vectors --lib 20 ``` 21 22 NIST ACVP material is published by the United States government. Project Wycheproof test vectors 23 are Apache-2.0 licensed.