GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — TLS: Initial work on draft-kwiatkowski-tls-ecdhe-mlkem-03 by yuhh0328 · Pull Request #1996 · bcgit/bc-java

Conversation

@yuhh0328

@yuhh0328 yuhh0328 commented Feb 14, 2025

Copy link
Copy Markdown
Contributor

This PR adds post-quantum hybrid ecdhe-mlkem key agreement for TLSv1.3
(https://datatracker.ietf.org/doc/html/draft-kwiatkowski-tls-ecdhe-mlkem-03)

[namedgroups]

  • X25519MLKEM768
  • SecP256r1MLKEM768
  • SecP384r1MLKEM1024

I'd be happy to address any feedback or questions you may have.

Thanks,
Hunhee.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

All reactions
gefeili and others added 30 commits December 2, 2024 16:52
gefeili
Add OperatorBcTest.testBcAEADSecretKeyEncryptorBuilder
6bcb85d
gefeili
Add OperatorJcajceTest.testJcaAEADSecretKeyEncryptorBuilder
6647e01
gefeili
Merge branch 'main' into 1794-auth-enveloped-recipients-kek-keyagree
3b7c94f
gefeili
Merge branch 'pg-refactor-BcUtil-createStreamCipher' into pg-refactor…
46588f7
…-BcAEADUtil

# Conflicts:
#	pg/src/main/java/org/bouncycastle/openpgp/operator/bc/BcPBEDataDecryptorFactory.java
#	pg/src/main/java/org/bouncycastle/openpgp/operator/bc/BcPBESecretKeyDecryptorBuilder.java
gefeili
Fixed the bugs in BcPBEKeyEncryptionMethodGenerator.getEskAndTag
f68a305
@dghgit
added DigestAlgorithmIdentifierFinder support as well.
05ac657
gefeili
Merge branch 'main' into shamir-secret-splitting
b8f9492
@dghgit
removed unnecessary length check in LMS PublicKeyFactory
053d87b
added support for public key check to work out digest ID.
updated PQCSignedDataTest to use the public key approach with LMS
@dghgit
updated BufferingContentSigner to use ExtendedContentSigner
d95afbf
gefeili
Create APIs: SecretShare, SplitSecret and SecretSplitter. Change spli…
eadf2be
…t package to threshold
gefeili
Add SplitSecret.recombine
4e3d763
gefeili
Merge branch 'main' into 1857-1-javadoc
8a190b4
gefeili
Update from bcgit#1926
74b0afc
gefeili
Remove SecretSplitter.recombineShares
0cd9945
gefeili
Add a simple test for ShamirSecretSplitter
593bbd2
gefeili
Set the test method to public
14fbee9
@vanitasvitae
Prepare PublicKeyKeyEncryptionMethodGenerator for v6
6468b33
@vanitasvitae
Properly encode anonymous PKESKv6 packets
f310da4
@vanitasvitae
Fix PKESKv6 / SKESKv6 generation
6790031
gefeili
Minor changes in PBEKeyEncryptionMethodGenerator, remove unused funct…
d839606
…ions in PublicKeyKeyEncryptionMethodGenerator.
@dghgit
Merge branch 'pg-refactor-BcAEADUtil' into 'main'
33cbad1
Refactor around BcAEADUtil

See merge request root/bc-java!52
@dghgit
Merge branch '1794-auth-enveloped-recipients-kek-keyagree' into 'main'
f498371
Add auth enveloped recipients for KEK and KeyAgree

See merge request root/bc-java!53
@dghgit
Merge branch '1924-lightweight-aead-output-size' into 'main'
4953a48
Fix the bugs of getUpdateOutputSize and getOutputSize in ISAPEngine,...

See merge request root/bc-java!46
@dghgit
Merge branch '1857-1-javadoc' into 'main'
f0474a0
JavaDoc from 1857 branch: PBESecretKeyEncryptor, CryptlibObjectIdentifiers,...

See merge request root/bc-java!45
@dghgit
Merge branch 'pg-refactor-JceAEADUtil' into 'main'
ee9a871
Pg refactor jce aead util

See merge request root/bc-java!54
@dghgit
Merge branch '1857-3-pgp-keypair-generator' into 'main'
f97b21e
PGPKeyPair.assubkey, PGPKeyPairGenerator and PGPKeyPairGeneratorTest

See merge request root/bc-java!47
@dghgit
Merge branch '1857-5-aead-reencrypt' into 'main'
a012951
Add AEADProtectedPGPSecretKeyTest.reencryptKey, PublicKeyUtils, and update PGPSecretKey

See merge request root/bc-java!49
@dghgit
Merge branch 'main' into '1857-2-pgpkeyring-generator'
1aeb886
# Conflicts:
#   pg/src/test/java/org/bouncycastle/openpgp/test/RegressionTest.java
@vanitasvitae
Merge PKESK encryption methods
11b7330
@vanitasvitae
Add javadoc
1e73d11
vanitasvitae and others added 29 commits January 22, 2025 12:15
@vanitasvitae
Fix checkstyle complaining about non-static inner classes
7b87489
royb
Fixed MLS test: converted encoded P521 private keys to match required…
ee16879
… length
@peterdettman
More work in crypto.hpke
6fd0964
- Validate public key lengths and uncompressed format
- Clamp XDH private key output
- Switch to RawAgreement (add BasicRawAgreement adapter)
- Avoid String.getBytes for label conversion
@peterdettman
Add Extensions helpers
32608c8
@peterdettman
Simplify adding oracle trusted key usage attribute
075a7bb
@peterdettman
Refactoring in openpgp.operator.bc
54661c8
@peterdettman
Refactoring in legacy McEliece
b949a8f
@peterdettman
Update legacy (and old JDK) X509SignatureUtil
85493d1
@peterdettman
Refactor extensions code in X.509 types
b77d970
@peterdettman
Refactoring in pqc.crypto.mldsa
4ed7d13
- reduced allocations
@peterdettman
Refactoring in tls.crypto.impl
bee6734
gefeili
Merge remote-tracking branch 'pgpainless/fixCheckstyle' into 1976-pg-…
2ff41de
…fixcheckstyle
@ligefeiBouncycastle
Merge branch '1976-pg-fixcheckstyle' into 'main'
fa56eaa
1976 pg fixcheckstyle

See merge request root/bc-java!69
@dghgit
added exception check on UTF8 parsing to prevent escaping exceptions.
5174843
@dghgit
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
9d823e3
@dghgit
modified to use JCA.
8ee89a4
@dghgit
changed methods to private
502fddd
@dghgit
added use of local helper.
2a4ec8a
@dghgit
added encoding preservation for ML-DSA, ML-KEM, added property for tr…
0ea89a4
…iggering seed only PrivateKeyInfo generation, relates to github bcgit#1969.
@dghgit
added private key with public key test.
76d616d
@dghgit
minor formatting
7e41e48
@dghgit
minor formatting
0aa9d1c
@peterdettman
Let EC J-PAKE work with custom curves
4abc7af
@peterdettman
Tolerate custom EC curves
4189cec
@peterdettman
Use custom curves in DualEC, FWIW
3559d88
@dghgit
Merge branch 'main' of gitlab.cryptoworkshop.com:root/bc-java
f13def6
@dghgit
dealt with expiring certificate in test
9706d9a
@yu-2h
add draft-kwiatkowski-tls-ecdhe-mlkem-03
4021306
@yu-2h
modify BcTlsMLKemDomain.java
fab5566
@hubot
hubot force-pushed the main branch from d3d00d9 to 88c6a3a Compare July 29, 2026 06:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Uh oh!

There was an error while loading. Please reload this page.

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

11 participants

@yuhh0328 @dghgit @vanitasvitae @mwcw @Honzaik @peterdettman @crlorentzen @tonywasher @jmcrawford45 @ligefeiBouncycastle @yu-2h
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.