After installing python3-dnf-plugin-multisig package and having enabled a repository with postquantum-safe key and a package with RPMv6 signature made with the key: "dnf install CORRECTLY_SIGNED_PACKAGE" will succeeds after (automatically or interactively) importing the key. "dnf install INCORRECTLY_SIGNED_PACKAGE" will fail. "dnf install UNSIGNED_PACKAGE" will fail. Besides, installing packages with classical RPMv4 signature will behave with respect to signature verification as usual. The only acceptable side effect will be multiple import of classical singing key (once for system rpm, once for pqrpm).

.DNF can verify RPMv6 signatures on RPM packages Quantum-safe cryptography guarantees integrity and origin of software. However, in quantum computing, standard asymmetric cryptography algorithms, such as RSA, are no longer relevant. With this update, you can use the new `multisig` DNF plugin to verify RPMv6 signatures on RPM packages, in addition to standard RPMv4 signatures. RPMv6 signatures can be based on quantum-safe algorithms, such as ML-DSA. To verify RPMv6 signatures, you can install the `multisig` plugin through the `python3-dnf-plugin-multisig` RPM package. NOTE: Successful verification is a prerequisite for installing, reinstalling, upgrading, or downgrading packages from a repository that has the `gpgcheck` option set to `True`.