OpenSSH-compatible post-quantum key exchange

[lilyanatia]

as of version 9.9, OpenSSH now supports two post-quantum key exchange methods:

• mlkem768x25519-sha256
• sntrup761x25519-sha512 / sntrup761x25519@openssh.com

it would be nice to have support for at least one of these in wolfSSH.

[anhu]

Hello @lilyanatia ,

so sorry it has taken so long for me to reply. mlkem768x25519-sha256 is already on our roadmap. We maintain a list of feature requests and this is already in that list as well.

Warm regards, Anthony

[anhu]

Hi @lilyanatia ,

Please follow our blog. When we add support for mlk768x25519-sha256 I'm sure there will be an announcement there. I will now close this issue.

Warm regards, Anthony

[lilyanatia]

this doesn't seem to actually be completed.

[anhu]

Hi @lilyanatia ,
I did not realize you would want me to keep this open until the feature was implemented. I've re-opened this issue.
Warm regards, Anthony

[anhu]

Hello @lilyanatia ,

Please have a look at https://github.com/wolfSSL/wolfssh/tree/draft-ietf-sshm-mlkem-hybrid-kex . I'm guessing you will find it interesting.

Warm regards, Anthony