Subject	BPF keyring and signed loader ML-DSA support
Author	daniel@iogearbox.net
Date	2026-08-28 17:52:17 +0000 UTC
Version	Version 1 Version 2 Version 3 Version 4
Cc	a.s.protopopov@gmail.com ast@kernel.org bpf@vger.kernel.org brauner@kernel.org daniel@iogearbox.net dhowells@redhat.com jarkko@kernel.org john.fastabend@gmail.com keyrings@vger.kernel.org kpsingh@kernel.org memxor@gmail.com

Patches (11)

Name	Content [All]
[PATCH bpf-next v4 01/11] bpf, keys: Add a bpf keyring for program signature validation	[Body]
[PATCH bpf-next v4 02/11] bpf: Refuse caller-supplied keyrings when the bpf one is active	[Body]
[PATCH bpf-next v4 03/11] bpf: Raise the bound on a program's signature size	[Body]
[PATCH bpf-next v4 04/11] bpftool: Support ML-DSA program signing	[Body]
[PATCH bpf-next v4 05/11] selftests/bpf: Add a test for the sealed bpf keyring	[Body]
[PATCH bpf-next v4 06/11] selftests/bpf: Rebuild signed lskels when signing key changes	[Body]
[PATCH bpf-next v4 07/11] selftests/bpf: Rename the verify_sig_setup.sh setup into setup-rsa	[Body]
[PATCH bpf-next v4 08/11] selftests/bpf: Add an end-to-end ML-DSA signed loader test	[Body]
[PATCH bpf-next v4 09/11] selftests/bpf: Allow appending to guest kernel cmdline in vmtest.sh	[Body]
[PATCH bpf-next v4 10/11] selftests/bpf: Add tests for bpf keyring in signed loader	[Body]
[PATCH bpf-next v4 11/11] Documentation/bpf: Document the bpf keyring and improve examples	[Body]

Sessions