Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-92148

Enable PQC algorithms in FIPS mode

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: Generate New Ti...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • crypto-policies-20250602-1.gita6d4d0c.el10
    • No
    • Low
    • 1
    • rhel-security-crypto
    • ssg_security
    • 26
    • 1.5
    • False
    • False
    • Hide

      None

      Show
      None
    • Yes
    • Crypto25August
    • Hide

      AC1) FIPS policy:

      • prepend the following to group: P256-MLKEM768, P384-MLKEM1024 and MLKEM768-X25519
      • prepend the following to sign: MLDSA44, MLDSA65 and MLDSA87
      • prepend the following to key_exchange: KEM-ECDH

      AC2) Applying FIPS policy does not cause warnings.

      Show
      AC1) FIPS policy: prepend the following to group: P256-MLKEM768, P384-MLKEM1024 and MLKEM768-X25519 prepend the following to sign: MLDSA44, MLDSA65 and MLDSA87 prepend the following to key_exchange: KEM-ECDH AC2) Applying FIPS policy does not cause warnings.
    • Pass
    • Enabled
    • Automated
    • Feature
    • Hide
      RN text in RHEL-113008.

      Feature, enhancement: FIPS cryptographic policy now enables hybrid ML-KEM and pure ML-DSA post-quantum cryptographic algorithms
      Reason: demand for post-quantum cryptographic algorithms
      Result: hosts in FIPS might start negotiating hybrid ML-KEM and pure ML-DSA algorithms; apply NO-PQ subpolicy (e.g., with update-crypto-policies --set FIPS:NO-PQ) to disable them back
      Show
      RN text in RHEL-113008 . Feature, enhancement: FIPS cryptographic policy now enables hybrid ML-KEM and pure ML-DSA post-quantum cryptographic algorithms Reason: demand for post-quantum cryptographic algorithms Result: hosts in FIPS might start negotiating hybrid ML-KEM and pure ML-DSA algorithms; apply NO-PQ subpolicy (e.g., with update-crypto-policies --set FIPS:NO-PQ) to disable them back
    • Done
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      We intend to support PQC algorithms in FIPS mode too, when and in which modules we will certify them is unclear, but that doesn't change the overall intention.

      Please include hybrid ML-KEM algorithms (including x25519 hybrids for TLS since that's compliant, but not for SSH yet, since algorithm fetching would fail in FIPS mode) and pure ML-DSA in the FIPS policy.

              asosedki@redhat.com Alexander Sosedkin
              hkario@redhat.com Alicja Kario
              Alexander Sosedkin Alexander Sosedkin
              Ondrej Moris Ondrej Moris
              Mirek Jahoda Mirek Jahoda
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: