Skip to content

Add PQC ML-DSA support - #785

Merged
MasterKale merged 10 commits into
milestone/v14.0.0from
feat/pqc-support
Aug 14, 2026
Merged

Add PQC ML-DSA support#785
MasterKale merged 10 commits into
milestone/v14.0.0from
feat/pqc-support

Conversation

@MasterKale

@MasterKale MasterKale commented Aug 14, 2026

Copy link
Copy Markdown
Owner

This PR adds the ability to support WebAuthn responses leveraging PQC algorithms. Support for this is dependent on the runtime's support for ML-DSA-44, ML-DSA-65, and ML-DSA-87. As of August 2026, the following Deno and Node runtimes should support this:

  • Node: v24.7.0 and up
  • Deno: v2.8.2 and up

When the runtime does not support ML-DSA, SimpleWebAuthn will try to help RPs understand this:

$ node -v
v22.23.2
$ node node_mldsa.mjs
Error: This runtime's WebCrypto.subtle does not support use of ML-DSA-44. See the `cause` property of this error for more info
    at verifyAKP (...)
    at async verifyAuthenticationResponse (...)
    at async file:///.../node_mldsa.mjs:5:20 {
  [cause]: DOMException [NotSupportedError]: Unrecognized algorithm name
      at normalizeAlgorithm (node:internal/crypto/util:366:11)
      at normalizeAlgorithm (node:internal/crypto/util:338:12)
      at SubtleCrypto.importKey (node:internal/crypto/webcrypto:572:15)
      at importJWKKey (...)
      at async verifyAKP (...)
      at async verifyAuthenticationResponse (...)
      at async file:///.../node_mldsa.mjs:5:20
}

Fixes #770.

@MasterKale MasterKale changed the title Feat/pqc support Add PQC ML-DSA support Aug 14, 2026
@MasterKale
MasterKale merged commit 1aa2a21 into milestone/v14.0.0 Aug 14, 2026
15 checks passed
@MasterKale
MasterKale deleted the feat/pqc-support branch August 14, 2026 15:55
@MasterKale MasterKale linked an issue Aug 14, 2026 that may be closed by this pull request
@MasterKale MasterKale added the package:server @simplewebauthn/server label Aug 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

package:server @simplewebauthn/server

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add PQC support

1 participant