Draft: sigsum-agent: add support for ML-DSA-44 key and multiple signers

Daniel Lublinrequested to merge
quite/mldsa44 into main

Adding new -mldsa-file flag.

Now supports multiple signers, up to 1 of each from:

  • Ed25519 softkey on disk
  • ML-DSA44 softkey on disk
  • Ed25519 on YubiHSM

The ML-DSA-44 private key on disk is currently just the raw bytes (32 bytes). Adding new genkey-mldsa44 tool to generate private key in this format.

Merge request reports