mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-07-08 03:40:47 +02:00
Tobias Frauenschläger
c3289f8aa9
* Enable ML-KEM by default in build systems (autoconf and CMake) * Only allow three to-be-standardized hybrid PQ/T combinations by default * Use X25519MLKEM768 as the default KeyShare in the ClientHello (if user does not override that). When Curve25519 is disabled, then either WOLFSSL_SECP384R1MLKEM1024 or WOLFSSL_SECP256R1MLKEM768 is used as default depending on the ECC configuration * Disable standalone ML-KEM in supported groups by default (enable with --enable-tls-mlkem-standalone) * Disable extra OQS-based hybrid PQ/T curves by default and gate behind --enable-experimental (enable with --enable-extra-pqc-hybrids) * Reorder the SupportedGroups extension to reflect the preferences * Reorder the preferredGroup array to also reflect the same preferences * Add async support for ML-KEM hybrids
61 lines
1.1 KiB
Plaintext
61 lines
1.1 KiB
Plaintext
# server TLSv1.3 with post-quantum group
|
|
-v 4
|
|
-l TLS13-AES256-GCM-SHA384
|
|
--pqc ML_KEM_512
|
|
|
|
# client TLSv1.3 with post-quantum group
|
|
-v 4
|
|
-l TLS13-AES256-GCM-SHA384
|
|
--pqc ML_KEM_512
|
|
|
|
# server TLSv1.3 with post-quantum group
|
|
-v 4
|
|
-l TLS13-AES256-GCM-SHA384
|
|
--pqc ML_KEM_768
|
|
|
|
# client TLSv1.3 with post-quantum group
|
|
-v 4
|
|
-l TLS13-AES256-GCM-SHA384
|
|
--pqc ML_KEM_768
|
|
|
|
# server TLSv1.3 with post-quantum group
|
|
-v 4
|
|
-l TLS13-AES256-GCM-SHA384
|
|
--pqc ML_KEM_1024
|
|
|
|
# client TLSv1.3 with post-quantum group
|
|
-v 4
|
|
-l TLS13-AES256-GCM-SHA384
|
|
--pqc ML_KEM_1024
|
|
|
|
# server TLSv1.3 with post-quantum group
|
|
-v 4
|
|
-l TLS13-AES256-GCM-SHA384
|
|
--pqc KYBER_LEVEL1
|
|
|
|
# client TLSv1.3 with post-quantum group
|
|
-v 4
|
|
-l TLS13-AES256-GCM-SHA384
|
|
--pqc KYBER_LEVEL1
|
|
|
|
# server TLSv1.3 with post-quantum group
|
|
-v 4
|
|
-l TLS13-AES256-GCM-SHA384
|
|
--pqc KYBER_LEVEL3
|
|
|
|
# client TLSv1.3 with post-quantum group
|
|
-v 4
|
|
-l TLS13-AES256-GCM-SHA384
|
|
--pqc KYBER_LEVEL3
|
|
|
|
# server TLSv1.3 with post-quantum group
|
|
-v 4
|
|
-l TLS13-AES256-GCM-SHA384
|
|
--pqc KYBER_LEVEL5
|
|
|
|
# client TLSv1.3 with post-quantum group
|
|
-v 4
|
|
-l TLS13-AES256-GCM-SHA384
|
|
--pqc KYBER_LEVEL5
|
|
|