Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-58252

OpenSSH should not use its own implementation of MLKEM

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: Generate New Ti...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • openssh-9.9p1-9.el10
    • No
    • Low
    • 2
    • rhel-security-crypto
    • ssg_security
    • 11
    • 0.5
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • Crypto25Q1, Crypto25Q2
    • Hide

      AC1: ssh connection using mlkem hybrid algo between upstream openssh package and our downstream package works
      AC2: manual check if connection between x86_64 and s390x platforms works

      Show
      AC1: ssh connection using mlkem hybrid algo between upstream openssh package and our downstream package works AC2: manual check if connection between x86_64 and s390x platforms works
    • Pass
    • Not Needed
    • New Test Coverage
    • Unspecified Release Note Type - Unknown
    • None

      OpenSSH 9.9+ (not in RHEL yet) will have its own implementation of MLKEM on board.

      We should implement a patch making it using OpenSSL implementation of MLKEM.

              dbelyavs@redhat.com Dmitry Belyavskiy
              dbelyavs@redhat.com Dmitry Belyavskiy
              Dmitry Belyavskiy Dmitry Belyavskiy
              Miluse Bezo Konecna Miluse Bezo Konecna
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: