tomaswolf opened a new issue, #606:
URL: https://github.com/apache/mina-sshd/issues/606

   ### Description
   
   Support the ML-KEM key exchanges described in a current [draft 
RFC](https://datatracker.ietf.org/doc/html/draft-kampanakis-curdle-ssh-pq-ke-04).
   
   ### Motivation
   
   ML-KEM was standardized by NIST; it is basically Crystals-Kyber with a few 
modifications. See [FIPS 
203](https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.203.pdf)
   
   OpenSSH is in the process of implementing this.
   
   ### Alternatives considered
   
   _No response_
   
   ### Additional context
   
   This needs
   
   - An OpenSSH that implements at least one of the three ML-KEM variants 
defined in the draft RFC.
   - A Bouncy Castle that provides ML-KEM. (BC 1.79 should have it; they are in 
the process of changing their Crystals-Kyber to ML-KEM.)
   
   I already have the code for Apache MINA sshd ready; it'll only need some 
interoperability testing with an OpenSSH that supports ML-KEM.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org
For additional commands, e-mail: dev-h...@mina.apache.org

Reply via email to