You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@mina.apache.org by "tomaswolf (via GitHub)" <gi...@apache.org> on 2024/09/11 15:44:05 UTC

[I] Support ML-KEM key exchanges [mina-sshd]

tomaswolf opened a new issue, #606:
URL: https://github.com/apache/mina-sshd/issues/606

   ### Description
   
   Support the ML-KEM key exchanges described in a current [draft RFC](https://datatracker.ietf.org/doc/html/draft-kampanakis-curdle-ssh-pq-ke-04).
   
   ### Motivation
   
   ML-KEM was standardized by NIST; it is basically Crystals-Kyber with a few modifications. See [FIPS 203](https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.203.pdf)
   
   OpenSSH is in the process of implementing this.
   
   ### Alternatives considered
   
   _No response_
   
   ### Additional context
   
   This needs
   
   - An OpenSSH that implements at least one of the three ML-KEM variants defined in the draft RFC.
   - A Bouncy Castle that provides ML-KEM. (BC 1.79 should have it; they are in the process of changing their Crystals-Kyber to ML-KEM.)
   
   I already have the code for Apache MINA sshd ready; it'll only need some interoperability testing with an OpenSSH that supports ML-KEM.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org

Re: [I] Support ML-KEM key exchanges [mina-sshd]

Posted by "tomaswolf (via GitHub)" <gi...@apache.org>.
tomaswolf closed issue #606: Support ML-KEM key exchanges
URL: https://github.com/apache/mina-sshd/issues/606


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@mina.apache.org
For additional commands, e-mail: dev-help@mina.apache.org