Rustls 0.23.44 Released With ML-DSA Certificates Enabled By Default

Rustls as the modern TLS library implementation written in the Rust programming language is out with a new feature release. This morning's Rustls 0.23.44 release enables post-quantum secure ML-DSA certificates by default.

The headline feature of Rustls 0.23.44 is enabling post-quantum secure ML-DSA certificates by default with the aws-lc-rs crypto provider. ML-DSA certificates aren't supported in the public web PKI but can be used with private certificate hierarchies. Module-Lattice-Based Digital Signature Algorithm (ML-DSA) continues seeing nice adoption as a replacement to the likes of RSA and ECDSA while boasting fast key generation / signing / verification speeds and being secure against quantum computer attacks.

The other notable change in this new release is the SSL key log file now being restricted to read-only by the owner (owner-only permissions).

Downloads and more details on this updated Rust TLS library via GitHub.