MLDSA (Dilithium) template
Example:
{
"key_gen": {
"enabled": true,
"key_type": {
"allowed_types": [
"MLDSA"
],
"default_key_type": "MLDSA"
},
"dilithium_key_size": {
"allowed_sizes": [
"MLDSA-44",
"MLDSA-65",
"MLDSA-87"
],
"default_size": "MLDSA-44"
}
},
"issue_types": [
"client_authentication"
],
"signature_algorithm": {
"allowed_algorithms": [
"MLDSA-44",
"MLDSA-65",
"MLDSA-87",
"match_issuer"
],
"default_algorithm": "match_issuer"
},
"subject": {
"attributes": [
{
"type": "common_name",
"include": "optional",
"encoding": "auto",
"allowed_source": [
"csr",
"fixed_value",
"user_supplied"
]
},
{
"type": "organization_name",
"include": "optional",
"encoding": "auto",
"allowed_source": [
"csr",
"fixed_value",
"user_supplied"
]
},
{
"type": "organization_unit",
"include": "optional",
"encoding": "auto",
"allowed_source": [
"csr",
"fixed_value",
"user_supplied"
]
},
{
"type": "street_address",
"include": "optional",
"encoding": "auto",
"allowed_source": [
"csr",
"fixed_value",
"user_supplied"
]
},
{
"type": "postal_code",
"include": "optional",
"encoding": "auto",
"allowed_source": [
"csr",
"fixed_value",
"user_supplied"
]
},
{
"type": "locality",
"include": "optional",
"encoding": "auto",
"allowed_source": [
"csr",
"fixed_value",
"user_supplied"
]
},
{
"type": "state",
"include": "optional",
"encoding": "auto",
"allowed_source": [
"csr",
"fixed_value",
"user_supplied"
]
},
{
"type": "country",
"include": "optional",
"encoding": "auto",
"allowed_source": [
"csr",
"fixed_value",
"user_supplied"
]
},
{
"type": "email",
"include": "optional",
"encoding": "auto",
"allowed_source": [
"csr",
"fixed_value",
"user_supplied"
]
}
]
},
"extensions": {
"key_usage": {
"critical": true,
"required_usages": {
"dilithium": [
"digital_signature"
]
},
"optional_usages": {
"dilithium": [
"non_repudiation"
]
}
},
"extended_key_usage": {
"critical": true,
"include": "optional",
"required_usages": [
{
"oid": "client_authentication",
"name": "Client Authentication"
}
]
}
},
"serial_number_size": 20,
"validity": {
"min_duration": {
"value": 1,
"unit": "DAYS"
},
"max_duration": {
"value": 10,
"unit": "YEARS"
},
"default_duration": {
"value": 10,
"unit": "YEARS"
}
}
}