You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@cxf.apache.org by "Freeman Yue Fang (Jira)" <ji...@apache.org> on 2026/07/10 18:47:00 UTC

[jira] [Commented] (CXF-9231) sign/verify and encrypt/decrypt soap payload with PQC compatible Alg

    [ https://issues.apache.org/jira/browse/CXF-9231?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18095386#comment-18095386 ] 

Freeman Yue Fang commented on CXF-9231:
---------------------------------------

h2. Overview

This sub-task implements end-to-end sign/verify and encrypt/decrypt of SOAP payloads using post-quantum cryptography algorithms in Apache CXF's WS-Security layer. It covers three test layers — StAX interceptors, DOM interceptors, and WS-SecurityPolicy-driven interceptors — using ML-DSA (FIPS 204) for signatures and ML-KEM (FIPS 203) for key transport.

h2. Algorithms Supported

*ML-DSA (FIPS 204) — Digital Signatures*

|| Variant ||
| ML-DSA-44 |
| ML-DSA-65 |
| ML-DSA-87 |

*ML-KEM (FIPS 203) — Key Transport / Encryption*

|| Variant || 
| ML-KEM-512  | 
| ML-KEM-768  | 
| ML-KEM-1024 | 

> sign/verify and encrypt/decrypt soap payload with PQC compatible Alg
> --------------------------------------------------------------------
>
>                 Key: CXF-9231
>                 URL: https://issues.apache.org/jira/browse/CXF-9231
>             Project: CXF
>          Issue Type: Sub-task
>            Reporter: Freeman Yue Fang
>            Assignee: Freeman Yue Fang
>            Priority: Major
>




--
This message was sent by Atlassian Jira
(v8.20.10#820010)