tomaswolf commented on issue #928: URL: https://github.com/apache/mina-sshd/issues/928#issuecomment-6174273030
AFAIK the jury is still out on pure PQ algorithms for SSH. There's still lively discusssions on the SSHM WG mailing list, multiple drafts are floating around, and it's not clear at all where this will go. As to pure PQ signatures in SSH, please also see https://mailarchive.ietf.org/arch/msg/ssh/_36hNZypBtSXTHKRNrxV8znZwpU/ . Neither of these IETF drafts has been adopted by the SSHM WG yet as far as I see. https://datatracker.ietf.org/wg/sshm/documents/ For both these drafts, someone has already reserved public key names/signature names and key exchange names at IANA, though. The SSHM WG is going with the composite PQ signature route first, and we will in due time, too. I think OpenSSH shipped ssh-mldsa44-ed25519 with version 10.5, so it might be time to do that. At least we'd have simple interoperability tests. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
