Skip to content

Commit 428ae79

Browse files
geedo0geedo0
committed
Update PQ Algorithms
This aligns the algorithms supported by the OQS OpenSSH fork with the algorithms available in liboqs. - Added support for ML-KEM-IPD using the ML-KEM alias and the names/curves documented by the [PQ SSH draft RFC](https://datatracker.ietf.org/doc/draft-kampanakis-curdle-ssh-pq-ke/). - Added support for ML-DSA-IPD using the ML-DSA alias following the conventions from the Dilithium implementation. The Dilithium signatures have been disabled. - Updated from BIKE Round 3 to Round 4. This adds a new parameter set for BIKE-L5. - Added support for the Falcon PADDED format. It is disabled by default to preserve entries in the bit-mask. - Added support for MAYO. The level 1 variant is left disabled. The KEX algorithms specified by the draft RFC do not match the security level pairing convention followed by Kyber so we chose to prefer the pairings specified in the document. There were no proposed parameter sets for ML-KEM-512 so we defaulted to the conventional parameters. x25519 hybrids are currently not handled by the oqs-openssh fork so we've omitted `mlkem768x25519-sha256` support for now. This does not add support for sntrup761 as that requires handling the conflict with the upstream OpenSSH implementation. Related to Issue open-quantum-safe#163 Signed-off-by: Gerardo Ravago <gcr@amazon.com>
1 parent 0360c98 commit 428ae79

29 files changed

+1669
-415
lines changed

‎README.md

+12-4
Original file line numberDiff line numberDiff line change
@@ -65,32 +65,38 @@ If an algorithm is provided by liboqs but is not listed below, it can still be u
6565
The following quantum-safe algorithms from liboqs are supported (assuming they have been enabled in liboqs):
6666

6767
<!--- OQS_TEMPLATE_FRAGMENT_LIST_ALL_KEXS_START -->
68-
- **BIKE**: `bike-l1-sha512`, `bike-l3-sha512`
68+
- **BIKE**: `bike-l1-sha512`, `bike-l3-sha512`, `bike-l5-sha512`
6969
- **ClassicMcEliece**: `classic-mceliece-348864-sha256`, `classic-mceliece-348864f-sha256`, `classic-mceliece-460896-sha512`, `classic-mceliece-460896f-sha512`, `classic-mceliece-6688128-sha512`, `classic-mceliece-6688128f-sha512`, `classic-mceliece-6960119-sha512`, `classic-mceliece-6960119f-sha512`, `classic-mceliece-8192128-sha512`, `classic-mceliece-8192128f-sha512`
7070
- **FrodoKEM**: `frodokem-640-aes-sha256`, `frodokem-976-aes-sha384`, `frodokem-1344-aes-sha512`, `frodokem-640-shake-sha256`, `frodokem-976-shake-sha384`, `frodokem-1344-shake-sha512`
7171
- **HQC**: `hqc-128-sha256`, `hqc-192-sha384`, `hqc-256-sha512`†
7272
- **Kyber**: `kyber-512-sha256`, `kyber-768-sha384`, `kyber-1024-sha512`
73+
- **ML-KEM**: `ml-kem-512-sha256`, `ml-kem-768-sha256`, `ml-kem-1024-sha384`
7374
<!--- OQS_TEMPLATE_FRAGMENT_LIST_ALL_KEXS_END -->
7475

7576
The following hybrid algorithms are made available:
7677

7778
<!--- OQS_TEMPLATE_FRAGMENT_LIST_ALL_HYBRID_KEXS_START -->
78-
- **BIKE**: `ecdh-nistp256-bike-l1r3-sha512@openquantumsafe.org` `ecdh-nistp384-bike-l3r3-sha512@openquantumsafe.org`
79+
- **BIKE**: `ecdh-nistp256-bike-l1r4-sha512@openquantumsafe.org` `ecdh-nistp384-bike-l3r4-sha512@openquantumsafe.org` `ecdh-nistp521-bike-l5r4-sha512@openquantumsafe.org`
7980
- **ClassicMcEliece**: `ecdh-nistp256-classic-mceliece-348864r4-sha256@openquantumsafe.org` `ecdh-nistp256-classic-mceliece-348864fr4-sha256@openquantumsafe.org` `ecdh-nistp384-classic-mceliece-460896r4-sha512@openquantumsafe.org` `ecdh-nistp384-classic-mceliece-460896fr4-sha512@openquantumsafe.org` `ecdh-nistp521-classic-mceliece-6688128r4-sha512@openquantumsafe.org` `ecdh-nistp521-classic-mceliece-6688128fr4-sha512@openquantumsafe.org` `ecdh-nistp521-classic-mceliece-6960119r4-sha512@openquantumsafe.org` `ecdh-nistp521-classic-mceliece-6960119fr4-sha512@openquantumsafe.org` `ecdh-nistp521-classic-mceliece-8192128r4-sha512@openquantumsafe.org` `ecdh-nistp521-classic-mceliece-8192128fr4-sha512@openquantumsafe.org`
8081
- **FrodoKEM**: `ecdh-nistp256-frodokem-640-aesr2-sha256@openquantumsafe.org` `ecdh-nistp384-frodokem-976-aesr2-sha384@openquantumsafe.org` `ecdh-nistp521-frodokem-1344-aesr2-sha512@openquantumsafe.org` `ecdh-nistp256-frodokem-640-shaker2-sha256@openquantumsafe.org` `ecdh-nistp384-frodokem-976-shaker2-sha384@openquantumsafe.org` `ecdh-nistp521-frodokem-1344-shaker2-sha512@openquantumsafe.org`
8182
- **HQC**: `ecdh-nistp256-hqc-128r3-sha256@openquantumsafe.org` `ecdh-nistp384-hqc-192r3-sha384@openquantumsafe.org` `ecdh-nistp521-hqc-256r3-sha512@openquantumsafe.org`
8283
- **Kyber**: `ecdh-nistp256-kyber-512r3-sha256-d00@openquantumsafe.org` `ecdh-nistp384-kyber-768r3-sha384-d00@openquantumsafe.org` `ecdh-nistp521-kyber-1024r3-sha512-d00@openquantumsafe.org`
84+
- **ML-KEM**: `ecdh-nistp256-ml-kem-512-sha256@openquantumsafe.org` `mlkem768nistp256-sha256` `mlkem1024nistp384-sha384`
8385
<!--- OQS_TEMPLATE_FRAGMENT_LIST_ALL_HYBRID_KEXS_END -->
8486

8587
Note that algorithms marked with a dagger (†) have large stack usage and may cause failures when run on threads or in constrained environments. For example, McEliece require building `oqs-openssh` with a large(r) stack provision than is default: Adding `LDFLAGS="-Wl,--stack,20000000"` to [the `./configure` command below](#step-2-build-the-fork) is required to allow cygwin-based testing to pass.
8688

89+
Algorithms which involve ML-KEM are provided using the names as proposed in [draft-kampanakis-curdle-ssh-pq-ke](https://datatracker.ietf.org/doc/draft-kampanakis-curdle-ssh-pq-ke/). The underlying implementation uses a liboqs API name for the final ML-KEM implementation which is currently (August 13th, 2024) aliased to ML-KEM-IPD. When the final implementation for ML-KEM becomes available, the alias will also be updated to the standardized ML-KEM implementation.
90+
8791
#### Digital Signature
8892

8993
The following digital signature algorithms from liboqs are supported (assuming they have been enabled in liboqs). Note that only select L3 signature variants are enabled by default. In general, algorithms that are enabled by default are marked with an asterisk, and should you wish to enable additional variants, consult [the "Code Generation" section of the documentation in the wiki](https://github.com/open-quantum-safe/openssh/wiki/Using-liboqs-supported-algorithms-in-the-fork#code-generation).
9094

9195
<!--- OQS_TEMPLATE_FRAGMENT_LIST_ALL_SIGS_START -->
92-
- **Dilithium**: `dilithium2`\*, `dilithium3`\*, `dilithium5`\*
93-
- **Falcon**: `falcon512`\*, `falcon1024`\*
96+
- **Dilithium**: `dilithium2`, `dilithium3`, `dilithium5`
97+
- **Falcon**: `falcon512`\*, `falcon1024`\*, `falconpadded512`, `falconpadded1024`
98+
- **MAYO**: `mayo1`, `mayo2`\*, `mayo3`\*, `mayo5`\*
99+
- **ML-DSA**: `mldsa44`\*, `mldsa65`\*, `mldsa87`\*
94100
- **SPHINCS**: `sphincssha2128fsimple`\*, `sphincssha2128ssimple`, `sphincsshake128fsimple`, `sphincsshake128ssimple`, `sphincssha2192fsimple`, `sphincssha2192ssimple`, `sphincsshake192fsimple`, `sphincsshake192ssimple`, `sphincssha2256fsimple`\*, `sphincssha2256ssimple`, `sphincsshake256fsimple`, `sphincsshake256ssimple`
95101
<!--- OQS_TEMPLATE_FRAGMENT_LIST_ALL_SIGS_END -->
96102

@@ -101,6 +107,8 @@ The following hybrid algorithms are supported; they combine a quantum-safe algor
101107
- if `<SIG>` has L3 security, the fork provides the method `ecdsa-nistp384-<SIG>`, which combines `<SIG>` with ECDSA using NIST's P384 curve.
102108
- if `<SIG>` has L5 security, the fork provides the method `ecdsa-nistp521-<SIG>`, which combines `<SIG>` with ECDSA using NIST's P521 curve.
103109

110+
Algorithms which involve ML-DSA use a liboqs API name for the final ML-DSA implementation which is currently (August 13th, 2024) aliased to ML-DSA-IPD. When the final implementation for ML-DSA becomes available, the alias will also be updated to the standardized ML-DSA implementation.
111+
104112
## Quickstart
105113

106114
The steps below have been confirmed to work on Ubuntu 20.04.1 Focal

‎kex.c

+8
Original file line numberDiff line numberDiff line change
@@ -131,6 +131,7 @@ static const struct kexalg kexalgs[] = {
131131
{ KEX_KYBER_1024_SHA512, KEX_KEM_KYBER_1024_SHA512, 0, SSH_DIGEST_SHA512 },
132132
{ KEX_BIKE_L1_SHA512, KEX_KEM_BIKE_L1_SHA512, 0, SSH_DIGEST_SHA512 },
133133
{ KEX_BIKE_L3_SHA512, KEX_KEM_BIKE_L3_SHA512, 0, SSH_DIGEST_SHA512 },
134+
{ KEX_BIKE_L5_SHA512, KEX_KEM_BIKE_L5_SHA512, 0, SSH_DIGEST_SHA512 },
134135
{ KEX_CLASSIC_MCELIECE_348864_SHA256, KEX_KEM_CLASSIC_MCELIECE_348864_SHA256, 0, SSH_DIGEST_SHA256 },
135136
{ KEX_CLASSIC_MCELIECE_348864F_SHA256, KEX_KEM_CLASSIC_MCELIECE_348864F_SHA256, 0, SSH_DIGEST_SHA256 },
136137
{ KEX_CLASSIC_MCELIECE_460896_SHA512, KEX_KEM_CLASSIC_MCELIECE_460896_SHA512, 0, SSH_DIGEST_SHA512 },
@@ -144,6 +145,9 @@ static const struct kexalg kexalgs[] = {
144145
{ KEX_HQC_128_SHA256, KEX_KEM_HQC_128_SHA256, 0, SSH_DIGEST_SHA256 },
145146
{ KEX_HQC_192_SHA384, KEX_KEM_HQC_192_SHA384, 0, SSH_DIGEST_SHA384 },
146147
{ KEX_HQC_256_SHA512, KEX_KEM_HQC_256_SHA512, 0, SSH_DIGEST_SHA512 },
148+
{ KEX_ML_KEM_512_SHA256, KEX_KEM_ML_KEM_512_SHA256, 0, SSH_DIGEST_SHA256 },
149+
{ KEX_ML_KEM_768_SHA256, KEX_KEM_ML_KEM_768_SHA256, 0, SSH_DIGEST_SHA256 },
150+
{ KEX_ML_KEM_1024_SHA384, KEX_KEM_ML_KEM_1024_SHA384, 0, SSH_DIGEST_SHA384 },
147151
#ifdef OPENSSL_HAS_ECC
148152
{ KEX_FRODOKEM_640_AES_ECDH_NISTP256_SHA256, KEX_KEM_FRODOKEM_640_AES_ECDH_NISTP256_SHA256, NID_X9_62_prime256v1, SSH_DIGEST_SHA256 },
149153
{ KEX_FRODOKEM_976_AES_ECDH_NISTP384_SHA384, KEX_KEM_FRODOKEM_976_AES_ECDH_NISTP384_SHA384, NID_secp384r1, SSH_DIGEST_SHA384 },
@@ -156,6 +160,7 @@ static const struct kexalg kexalgs[] = {
156160
{ KEX_KYBER_1024_ECDH_NISTP521_SHA512, KEX_KEM_KYBER_1024_ECDH_NISTP521_SHA512, NID_secp521r1, SSH_DIGEST_SHA512 },
157161
{ KEX_BIKE_L1_ECDH_NISTP256_SHA512, KEX_KEM_BIKE_L1_ECDH_NISTP256_SHA512, NID_X9_62_prime256v1, SSH_DIGEST_SHA512 },
158162
{ KEX_BIKE_L3_ECDH_NISTP384_SHA512, KEX_KEM_BIKE_L3_ECDH_NISTP384_SHA512, NID_secp384r1, SSH_DIGEST_SHA512 },
163+
{ KEX_BIKE_L5_ECDH_NISTP521_SHA512, KEX_KEM_BIKE_L5_ECDH_NISTP521_SHA512, NID_secp521r1, SSH_DIGEST_SHA512 },
159164
{ KEX_CLASSIC_MCELIECE_348864_ECDH_NISTP256_SHA256, KEX_KEM_CLASSIC_MCELIECE_348864_ECDH_NISTP256_SHA256, NID_X9_62_prime256v1, SSH_DIGEST_SHA256 },
160165
{ KEX_CLASSIC_MCELIECE_348864F_ECDH_NISTP256_SHA256, KEX_KEM_CLASSIC_MCELIECE_348864F_ECDH_NISTP256_SHA256, NID_X9_62_prime256v1, SSH_DIGEST_SHA256 },
161166
{ KEX_CLASSIC_MCELIECE_460896_ECDH_NISTP384_SHA512, KEX_KEM_CLASSIC_MCELIECE_460896_ECDH_NISTP384_SHA512, NID_secp384r1, SSH_DIGEST_SHA512 },
@@ -169,6 +174,9 @@ static const struct kexalg kexalgs[] = {
169174
{ KEX_HQC_128_ECDH_NISTP256_SHA256, KEX_KEM_HQC_128_ECDH_NISTP256_SHA256, NID_X9_62_prime256v1, SSH_DIGEST_SHA256 },
170175
{ KEX_HQC_192_ECDH_NISTP384_SHA384, KEX_KEM_HQC_192_ECDH_NISTP384_SHA384, NID_secp384r1, SSH_DIGEST_SHA384 },
171176
{ KEX_HQC_256_ECDH_NISTP521_SHA512, KEX_KEM_HQC_256_ECDH_NISTP521_SHA512, NID_secp521r1, SSH_DIGEST_SHA512 },
177+
{ KEX_ML_KEM_512_ECDH_NISTP256_SHA256, KEX_KEM_ML_KEM_512_ECDH_NISTP256_SHA256, NID_X9_62_prime256v1, SSH_DIGEST_SHA256 },
178+
{ KEX_ML_KEM_768_ECDH_NISTP256_SHA256, KEX_KEM_ML_KEM_768_ECDH_NISTP256_SHA256, NID_X9_62_prime256v1, SSH_DIGEST_SHA256 },
179+
{ KEX_ML_KEM_1024_ECDH_NISTP384_SHA384, KEX_KEM_ML_KEM_1024_ECDH_NISTP384_SHA384, NID_secp384r1, SSH_DIGEST_SHA384 },
172180
#endif /* OPENSSL_HAS_ECC */
173181
///// OQS_TEMPLATE_FRAGMENT_ADD_KEX_ALGS_END
174182

‎kex.h

+50-2
Original file line numberDiff line numberDiff line change
@@ -76,6 +76,7 @@
7676
#define KEX_KYBER_1024_SHA512 "kyber-1024-sha512"
7777
#define KEX_BIKE_L1_SHA512 "bike-l1-sha512"
7878
#define KEX_BIKE_L3_SHA512 "bike-l3-sha512"
79+
#define KEX_BIKE_L5_SHA512 "bike-l5-sha512"
7980
#define KEX_CLASSIC_MCELIECE_348864_SHA256 "classic-mceliece-348864-sha256"
8081
#define KEX_CLASSIC_MCELIECE_348864F_SHA256 "classic-mceliece-348864f-sha256"
8182
#define KEX_CLASSIC_MCELIECE_460896_SHA512 "classic-mceliece-460896-sha512"
@@ -89,6 +90,9 @@
8990
#define KEX_HQC_128_SHA256 "hqc-128-sha256"
9091
#define KEX_HQC_192_SHA384 "hqc-192-sha384"
9192
#define KEX_HQC_256_SHA512 "hqc-256-sha512"
93+
#define KEX_ML_KEM_512_SHA256 "ml-kem-512-sha256"
94+
#define KEX_ML_KEM_768_SHA256 "ml-kem-768-sha256"
95+
#define KEX_ML_KEM_1024_SHA384 "ml-kem-1024-sha384"
9296
#ifdef WITH_OPENSSL
9397
#ifdef OPENSSL_HAS_ECC
9498
#define KEX_FRODOKEM_640_AES_ECDH_NISTP256_SHA256 "ecdh-nistp256-frodokem-640-aesr2-sha256@openquantumsafe.org"
@@ -100,8 +104,9 @@
100104
#define KEX_KYBER_512_ECDH_NISTP256_SHA256 "ecdh-nistp256-kyber-512r3-sha256-d00@openquantumsafe.org"
101105
#define KEX_KYBER_768_ECDH_NISTP384_SHA384 "ecdh-nistp384-kyber-768r3-sha384-d00@openquantumsafe.org"
102106
#define KEX_KYBER_1024_ECDH_NISTP521_SHA512 "ecdh-nistp521-kyber-1024r3-sha512-d00@openquantumsafe.org"
103-
#define KEX_BIKE_L1_ECDH_NISTP256_SHA512 "ecdh-nistp256-bike-l1r3-sha512@openquantumsafe.org"
104-
#define KEX_BIKE_L3_ECDH_NISTP384_SHA512 "ecdh-nistp384-bike-l3r3-sha512@openquantumsafe.org"
107+
#define KEX_BIKE_L1_ECDH_NISTP256_SHA512 "ecdh-nistp256-bike-l1r4-sha512@openquantumsafe.org"
108+
#define KEX_BIKE_L3_ECDH_NISTP384_SHA512 "ecdh-nistp384-bike-l3r4-sha512@openquantumsafe.org"
109+
#define KEX_BIKE_L5_ECDH_NISTP521_SHA512 "ecdh-nistp521-bike-l5r4-sha512@openquantumsafe.org"
105110
#define KEX_CLASSIC_MCELIECE_348864_ECDH_NISTP256_SHA256 "ecdh-nistp256-classic-mceliece-348864r4-sha256@openquantumsafe.org"
106111
#define KEX_CLASSIC_MCELIECE_348864F_ECDH_NISTP256_SHA256 "ecdh-nistp256-classic-mceliece-348864fr4-sha256@openquantumsafe.org"
107112
#define KEX_CLASSIC_MCELIECE_460896_ECDH_NISTP384_SHA512 "ecdh-nistp384-classic-mceliece-460896r4-sha512@openquantumsafe.org"
@@ -115,6 +120,9 @@
115120
#define KEX_HQC_128_ECDH_NISTP256_SHA256 "ecdh-nistp256-hqc-128r3-sha256@openquantumsafe.org"
116121
#define KEX_HQC_192_ECDH_NISTP384_SHA384 "ecdh-nistp384-hqc-192r3-sha384@openquantumsafe.org"
117122
#define KEX_HQC_256_ECDH_NISTP521_SHA512 "ecdh-nistp521-hqc-256r3-sha512@openquantumsafe.org"
123+
#define KEX_ML_KEM_512_ECDH_NISTP256_SHA256 "ecdh-nistp256-ml-kem-512-sha256@openquantumsafe.org"
124+
#define KEX_ML_KEM_768_ECDH_NISTP256_SHA256 "mlkem768nistp256-sha256"
125+
#define KEX_ML_KEM_1024_ECDH_NISTP384_SHA384 "mlkem1024nistp384-sha384"
118126
#endif /* OPENSSL_HAS_ECC */
119127
#endif /* WITH_OPENSSL */
120128
///// OQS_TEMPLATE_FRAGMENT_DEFINE_KEX_PRETTY_NAMES_END
@@ -169,6 +177,7 @@ enum kex_exchange {
169177
KEX_KEM_KYBER_1024_SHA512,
170178
KEX_KEM_BIKE_L1_SHA512,
171179
KEX_KEM_BIKE_L3_SHA512,
180+
KEX_KEM_BIKE_L5_SHA512,
172181
KEX_KEM_CLASSIC_MCELIECE_348864_SHA256,
173182
KEX_KEM_CLASSIC_MCELIECE_348864F_SHA256,
174183
KEX_KEM_CLASSIC_MCELIECE_460896_SHA512,
@@ -182,6 +191,9 @@ enum kex_exchange {
182191
KEX_KEM_HQC_128_SHA256,
183192
KEX_KEM_HQC_192_SHA384,
184193
KEX_KEM_HQC_256_SHA512,
194+
KEX_KEM_ML_KEM_512_SHA256,
195+
KEX_KEM_ML_KEM_768_SHA256,
196+
KEX_KEM_ML_KEM_1024_SHA384,
185197
#ifdef WITH_OPENSSL
186198
#ifdef OPENSSL_HAS_ECC
187199
KEX_KEM_FRODOKEM_640_AES_ECDH_NISTP256_SHA256,
@@ -195,6 +207,7 @@ enum kex_exchange {
195207
KEX_KEM_KYBER_1024_ECDH_NISTP521_SHA512,
196208
KEX_KEM_BIKE_L1_ECDH_NISTP256_SHA512,
197209
KEX_KEM_BIKE_L3_ECDH_NISTP384_SHA512,
210+
KEX_KEM_BIKE_L5_ECDH_NISTP521_SHA512,
198211
KEX_KEM_CLASSIC_MCELIECE_348864_ECDH_NISTP256_SHA256,
199212
KEX_KEM_CLASSIC_MCELIECE_348864F_ECDH_NISTP256_SHA256,
200213
KEX_KEM_CLASSIC_MCELIECE_460896_ECDH_NISTP384_SHA512,
@@ -208,6 +221,9 @@ enum kex_exchange {
208221
KEX_KEM_HQC_128_ECDH_NISTP256_SHA256,
209222
KEX_KEM_HQC_192_ECDH_NISTP384_SHA384,
210223
KEX_KEM_HQC_256_ECDH_NISTP521_SHA512,
224+
KEX_KEM_ML_KEM_512_ECDH_NISTP256_SHA256,
225+
KEX_KEM_ML_KEM_768_ECDH_NISTP256_SHA256,
226+
KEX_KEM_ML_KEM_1024_ECDH_NISTP384_SHA384,
211227
#endif /* OPENSSL_HAS_ECC */
212228
#endif /* WITH_OPENSSL */
213229
///// OQS_TEMPLATE_FRAGMENT_ADD_KEX_ENUMS_END
@@ -397,6 +413,10 @@ int kex_kem_bike_l1_dec(struct kex *, const struct sshbuf *, struct sshbuf **);
397413
int kex_kem_bike_l3_keypair(struct kex *);
398414
int kex_kem_bike_l3_enc(struct kex *, const struct sshbuf *, struct sshbuf **, struct sshbuf **);
399415
int kex_kem_bike_l3_dec(struct kex *, const struct sshbuf *, struct sshbuf **);
416+
/* bike_l5 prototypes */
417+
int kex_kem_bike_l5_keypair(struct kex *);
418+
int kex_kem_bike_l5_enc(struct kex *, const struct sshbuf *, struct sshbuf **, struct sshbuf **);
419+
int kex_kem_bike_l5_dec(struct kex *, const struct sshbuf *, struct sshbuf **);
400420
/* classic_mceliece_348864 prototypes */
401421
int kex_kem_classic_mceliece_348864_keypair(struct kex *);
402422
int kex_kem_classic_mceliece_348864_enc(struct kex *, const struct sshbuf *, struct sshbuf **, struct sshbuf **);
@@ -449,6 +469,18 @@ int kex_kem_hqc_192_dec(struct kex *, const struct sshbuf *, struct sshbuf **);
449469
int kex_kem_hqc_256_keypair(struct kex *);
450470
int kex_kem_hqc_256_enc(struct kex *, const struct sshbuf *, struct sshbuf **, struct sshbuf **);
451471
int kex_kem_hqc_256_dec(struct kex *, const struct sshbuf *, struct sshbuf **);
472+
/* ml_kem_512 prototypes */
473+
int kex_kem_ml_kem_512_keypair(struct kex *);
474+
int kex_kem_ml_kem_512_enc(struct kex *, const struct sshbuf *, struct sshbuf **, struct sshbuf **);
475+
int kex_kem_ml_kem_512_dec(struct kex *, const struct sshbuf *, struct sshbuf **);
476+
/* ml_kem_768 prototypes */
477+
int kex_kem_ml_kem_768_keypair(struct kex *);
478+
int kex_kem_ml_kem_768_enc(struct kex *, const struct sshbuf *, struct sshbuf **, struct sshbuf **);
479+
int kex_kem_ml_kem_768_dec(struct kex *, const struct sshbuf *, struct sshbuf **);
480+
/* ml_kem_1024 prototypes */
481+
int kex_kem_ml_kem_1024_keypair(struct kex *);
482+
int kex_kem_ml_kem_1024_enc(struct kex *, const struct sshbuf *, struct sshbuf **, struct sshbuf **);
483+
int kex_kem_ml_kem_1024_dec(struct kex *, const struct sshbuf *, struct sshbuf **);
452484
#ifdef WITH_OPENSSL
453485
#ifdef OPENSSL_HAS_ECC
454486
/* frodokem_640_aes_nistp256 prototypes */
@@ -495,6 +527,10 @@ int kex_kem_bike_l1_ecdh_nistp256_dec(struct kex *, const struct sshbuf *, stru
495527
int kex_kem_bike_l3_ecdh_nistp384_keypair(struct kex *);
496528
int kex_kem_bike_l3_ecdh_nistp384_enc(struct kex *, const struct sshbuf *, struct sshbuf **, struct sshbuf **);
497529
int kex_kem_bike_l3_ecdh_nistp384_dec(struct kex *, const struct sshbuf *, struct sshbuf **);
530+
/* bike_l5_nistp521 prototypes */
531+
int kex_kem_bike_l5_ecdh_nistp521_keypair(struct kex *);
532+
int kex_kem_bike_l5_ecdh_nistp521_enc(struct kex *, const struct sshbuf *, struct sshbuf **, struct sshbuf **);
533+
int kex_kem_bike_l5_ecdh_nistp521_dec(struct kex *, const struct sshbuf *, struct sshbuf **);
498534
/* classic_mceliece_348864_nistp256 prototypes */
499535
int kex_kem_classic_mceliece_348864_ecdh_nistp256_keypair(struct kex *);
500536
int kex_kem_classic_mceliece_348864_ecdh_nistp256_enc(struct kex *, const struct sshbuf *, struct sshbuf **, struct sshbuf **);
@@ -547,6 +583,18 @@ int kex_kem_hqc_192_ecdh_nistp384_dec(struct kex *, const struct sshbuf *, stru
547583
int kex_kem_hqc_256_ecdh_nistp521_keypair(struct kex *);
548584
int kex_kem_hqc_256_ecdh_nistp521_enc(struct kex *, const struct sshbuf *, struct sshbuf **, struct sshbuf **);
549585
int kex_kem_hqc_256_ecdh_nistp521_dec(struct kex *, const struct sshbuf *, struct sshbuf **);
586+
/* ml_kem_512_nistp256 prototypes */
587+
int kex_kem_ml_kem_512_ecdh_nistp256_keypair(struct kex *);
588+
int kex_kem_ml_kem_512_ecdh_nistp256_enc(struct kex *, const struct sshbuf *, struct sshbuf **, struct sshbuf **);
589+
int kex_kem_ml_kem_512_ecdh_nistp256_dec(struct kex *, const struct sshbuf *, struct sshbuf **);
590+
/* ml_kem_768_nistp256 prototypes */
591+
int kex_kem_ml_kem_768_ecdh_nistp256_keypair(struct kex *);
592+
int kex_kem_ml_kem_768_ecdh_nistp256_enc(struct kex *, const struct sshbuf *, struct sshbuf **, struct sshbuf **);
593+
int kex_kem_ml_kem_768_ecdh_nistp256_dec(struct kex *, const struct sshbuf *, struct sshbuf **);
594+
/* ml_kem_1024_nistp384 prototypes */
595+
int kex_kem_ml_kem_1024_ecdh_nistp384_keypair(struct kex *);
596+
int kex_kem_ml_kem_1024_ecdh_nistp384_enc(struct kex *, const struct sshbuf *, struct sshbuf **, struct sshbuf **);
597+
int kex_kem_ml_kem_1024_ecdh_nistp384_dec(struct kex *, const struct sshbuf *, struct sshbuf **);
550598
#endif /* OPENSSL_HAS_ECC */
551599
#endif /* WITH_OPENSSL */
552600
///// OQS_TEMPLATE_FRAGMENT_DECLARE_KEX_PROTOTYPES_END

0 commit comments

Comments
 (0)