Path to this page:
./
security/oqs-provider,
Open Quantum Safe provider for OpenSSL
Branch: CURRENT,
Version: 0.8.0,
Package name: oqs-provider-0.8.0,
Maintainer: jschaumaoqs-provider provides an Open Quantum Safe provider for OpenSSL (3.x) to
enable quantum-safe cryptography (QSC).
Currently this provider fully enables quantum-safe cryptography for KEM
key establishment in TLS1.3 including management of such keys via the
OpenSSL (3.0) provider interface and hybrid KEM schemes. Also, QSC
signatures including CMS and CMP functionality are available via the
OpenSSL EVP interface. Key persistence is provided via the encode/decode
mechanism, X.509 data structures, and PKCS#12 for bundling a private key
with its corresponding X.509 certificate.
Master sites:
Version history: (Expand)
- (2025-01-06) Updated to version: oqs-provider-0.8.0
- (2024-10-23) Updated to version: oqs-provider-0.7.0nb2
- (2024-10-17) Updated to version: oqs-provider-0.7.0nb1
- (2024-10-10) Updated to version: oqs-provider-0.7.0
- (2024-09-13) Package added to pkgsrc.se, version oqs-provider-0.6.1 (created)
CVS history: (Expand)
2025-01-06 21:58:01 by Jan Schaumann | Files touched by this commit (2) |
Log message:
Update to 0.8.0
Deprecation notice
This is to notify users of Kyber and Dilithium (Round
3 version) to switch to the ML-KEM (FIPS 203 final
version) and ML-DSA (FIPS 204 final version),
respectively, as support for both will be removed with
the next release of oqsprovider.
Security considerations
CVE-2024-54137: The associated liboqs v0.12.0 release
fixed a bug in HQC decapsulation that leads to
incorrect shared secret value during decapsulation
when called with an invalid ciphertext. Thank you to
Célian Glénaz and Dahmun Goudarzi from Quarkslab for
identifying the issue.
What's New
In addition to improving testing, CI, and fixing
platform specific build issues this release of
oqs-provider:
Updates IANA code points for ML-KEM and changes
FrodoKEM code points.
Adds support for ML-DSA (FIPS 204 final version).
Adds support for context strings in OpenSSL versions
>= 3.2.
Updates the implementation of
draft-ietf-lamps-pq-composite-sigs from version 01 to
version 02.
Adds a SBOM template in the CycloneDX 1.6 format.
Adds support for DTLS 1.3 (pending support in
OpenSSL).
|
2024-10-23 17:54:52 by Jan Schaumann | Files touched by this commit (2) | |
Log message:
update distinfo again (no functional change)
Upstream had reported the wrong release version in the module and the fix
updated the already released archive without bumping the version.
See:
https://github.com/open-quantum-safe/oqs-provider/issues/550
|
2024-10-17 16:19:06 by Jan Schaumann | Files touched by this commit (2) | |
Log message:
upstream updated the distfile, so bump pkg revision and regen checksum
noted by @wiz
Upstream says:
> "This release was updated on October 10, 2024 after
> being first published on October 08, 2024. Prior to
> being updated the release notes heading incorrectly
> reported the release version number to be 0.7.1; this
> error was limited to oqs-provider 0.7.0 release notes
> and did not affect any oqs-provider functionality."
|
2024-09-23 14:30:56 by Thomas Klausner | Files touched by this commit (1) |
Log message:
ioqs-provider: needs openssl 3
(Might need to be passed the location of openssl 3 for this to work.)
|