Add wolfcrypt ML-DSA (dilithium) support.

[philljj]

Description

Adds wolfcrypt ML-DSA (wolfcrypt/src/dilithium.c) support to wolfBoot.

Also covers some missing testing for sim target with PQ.

Config

Added sim ML-DSA example:

• config/examples/sim-ml-dsa.config

Use ML_DSA_LEVEL=<num> to configure the ML-DSA parameter set. See the config example and updated PQ docs for explanation of parameters.

Docs

Updated docs/PQ.md to describe ML-DSA and all three NIST approved PQ sig algs we have implemented.

Testing

• Added script tools/scripts/sim-pq-sunnyday-update.sh. This is to simplify sim-PQ sunnyday tests.
• Added LMS, XMSS, ML-DSA to .github/workflows/test-sunnyday-simulator.yml.
• Added renode-nrf52 ML-DSA-44 test to github workflow.

Prereqs

Requires this PR to build:

• dilithium: small cleanup to support wolfboot. wolfssl#7983

Requires this PR to conform to FIPS 204:

• Dilithium: Final and draft available in one build wolfssl#8016

Requires these PRs to update lib/wolfssl submodule to master:

• Allow building with WOLFSSL_NO_MALLOC again wolfssl#8053
• Update wolfssl #509

[danielinux]

Tested OK against wolfssl bf29b686

Please do:

• update wolfSSL submodule to master
• add simulator tests

[danielinux]

re: simulator tests

It looks like we don't have those tests for LMS/XMSS either. Can we perhaps extend test-sunnyday-simulator.yml workflow, adding cases for LMS, XMSS, ML-DSA?

[philljj]

re: simulator tests

It looks like we don't have those tests for LMS/XMSS either. Can we perhaps extend test-sunnyday-simulator.yml workflow, adding cases for LMS, XMSS, ML-DSA?

I'll add them all. It will be good to have sim coverage for all PQ as well!

[philljj]

Can reproduce one of the failures locally. Seems to be from introduction of USE_WOLF_STRDUP over summer.

Comments have been addressed