Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-70824

Support for hybrid ML-KEM key exchange using NIST curves in OpenSSH

Linking RHIVOS CVEs to...Migration: Automation ...RHELPRIO AssignedTeam ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Normal Normal
    • rhel-10.2
    • rhel-10.0
    • openssh
    • openssh-9.9p1-16.el10
    • No
    • Moderate
    • 1
    • rhel-security-crypto-diamonds
    • ssg_security
    • 15
    • 0
    • False
    • False
    • Hide

      None

      Show
      None
    • Yes
    • Crypto25November
    • Hide

      AC1: self-compatibility: ssh connection using newly implemented MLKEM hybrid key exchange with NIST works
      AC2: interoperability with PuTTY: ssh connection using MLKEM hybrid key exchange with NIST is successfully estabilished
      AC3: manual check if connection between x86_64 and s390x platforms works

      Show
      AC1: self-compatibility: ssh connection using newly implemented MLKEM hybrid key exchange with NIST works AC2: interoperability with PuTTY: ssh connection using MLKEM hybrid key exchange with NIST is successfully estabilished AC3: manual check if connection between x86_64 and s390x platforms works
    • Pass
    • Not Needed
    • New Test Coverage
    • Feature
    • We added support of mlkem768+nist p256 and mlkem1024+nist p384 in OpenSSH
    • Proposed
    • None

      We should have support for all three key exchange groups defined in draft-kampanakis-curdle-ssh-pq-ke-03

              dbelyavs@redhat.com Dmitry Belyavskiy
              hkario@redhat.com Alicja Kario
              Dmitry Belyavskiy Dmitry Belyavskiy
              Miluse Bezo Konecna Miluse Bezo Konecna
              Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

                Created:
                Updated: