./security/oqs-provider, Open Quantum Safe provider for OpenSSL

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 0.8.0, Package name: oqs-provider-0.8.0, Maintainer: jschauma

oqs-provider provides an Open Quantum Safe provider for OpenSSL (3.x) to
enable quantum-safe cryptography (QSC).

Currently this provider fully enables quantum-safe cryptography for KEM
key establishment in TLS1.3 including management of such keys via the
OpenSSL (3.0) provider interface and hybrid KEM schemes. Also, QSC
signatures including CMS and CMP functionality are available via the
OpenSSL EVP interface. Key persistence is provided via the encode/decode
mechanism, X.509 data structures, and PKCS#12 for bundling a private key
with its corresponding X.509 certificate.


Master sites:


Version history: (Expand)


CVS history: (Expand)


   2025-01-06 21:58:01 by Jan Schaumann | Files touched by this commit (2)
Log message:
Update to 0.8.0

Deprecation notice

This is to notify users of Kyber and Dilithium (Round
3 version) to switch to the ML-KEM (FIPS 203 final
version) and ML-DSA (FIPS 204 final version),
respectively, as support for both will be removed with
the next release of oqsprovider.

Security considerations

CVE-2024-54137: The associated liboqs v0.12.0 release
fixed a bug in HQC decapsulation that leads to
incorrect shared secret value during decapsulation
when called with an invalid ciphertext. Thank you to
Célian Glénaz and Dahmun Goudarzi from Quarkslab for
identifying the issue.

What's New

In addition to improving testing, CI, and fixing
platform specific build issues this release of
oqs-provider:

Updates IANA code points for ML-KEM and changes
FrodoKEM code points.

Adds support for ML-DSA (FIPS 204 final version).

Adds support for context strings in OpenSSL versions
>= 3.2.

Updates the implementation of
draft-ietf-lamps-pq-composite-sigs from version 01 to
version 02.

Adds a SBOM template in the CycloneDX 1.6 format.

Adds support for DTLS 1.3 (pending support in
OpenSSL).
   2024-10-23 17:54:52 by Jan Schaumann | Files touched by this commit (2) | Package updated
Log message:
update distinfo again (no functional change)

Upstream had reported the wrong release version in the module and the fix
updated the already released archive without bumping the version.

See:
https://github.com/open-quantum-safe/oqs-provider/issues/550
   2024-10-17 16:19:06 by Jan Schaumann | Files touched by this commit (2) | Package updated
Log message:
upstream updated the distfile, so bump pkg revision and regen checksum

noted by @wiz

Upstream says:

> "This release was updated on October 10, 2024 after
> being first published on October 08, 2024. Prior to
> being updated the release notes heading incorrectly
> reported the release version number to be 0.7.1; this
> error was limited to oqs-provider 0.7.0 release notes
> and did not affect any oqs-provider functionality."
   2024-09-23 14:30:56 by Thomas Klausner | Files touched by this commit (1)
Log message:
ioqs-provider: needs openssl 3

(Might need to be passed the location of openssl 3 for this to work.)