For both ML-DSA and ML-KEM algorithms: 1. OpenSSL is able to create and read files in the IETF standard format, with "seed", "expandedKey" and "both" variants of the private key format 2. OpenSSL is able to read files created by the oqsprovider we shipped in RHEL-10.0 and convert them to the "expandedKey" format

.OpenSSL stores ML-KEM and ML-DSA private keys in standard formats In RHEL 10.0, the open quantum-safe provider for OpenSSL (`oqsprovider`) generated private keys in a format that did not conform to any of the file formats proposed by the IETF LAMPS work group. Consequently, the key files were unreadable by other applications that follow the IETF standard and could not be handled by applications that require providing the key in the seed format for import. With this update, OpenSSL no longer uses `oqsprovider` and its post-quantum cryptography (PQC) implementation generates the keys in standard formats. As a result, you can use OpenSSL ML-KEM and ML-DSA keys for storing long-term secrets.