-
Notifications
You must be signed in to change notification settings - Fork 61
tls: add eddilithium2 support and fix eddilithium3 #176
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
thibmeu
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
looks good. minor comments
| EdDilithium2: "Ed25519-Dilithium2", | ||
| EdDilithium3: "Ed448-Dilithium3", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
nits: should these be named differently, like Ed25519Dilithium2 and Ed448Dilithium3?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I don't want to break current users. Let's reconsider naming when we add Ed25519-ML-DSA-44.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
is it worth creating aliases which are more precise?
Closes #175 We didn't move from eddilithium3 to eddilithium2 when dilithium3 was renamed to dilithium3.
To avoid having to regenerate all testdata files, add an option to control whether PQ signature algorithms are advertised. Tests were added for the client side. Since Go 1.19, FIPS-only mode must remain disabled to enable PQ sigalgs. [pwu: Go 1.17: moved parsePublicKey changes from x509/x509.go to x509/parser.go] [pwu: Go 1.22.5: add eddilithium2 support, fix eddilithium3, by Bas in #176] Co-authored-by: Christopher Patton <chrispatton@gmail.com> Co-authored-by: Peter Wu <pwu@cloudflare.com>
To avoid having to regenerate all testdata files, add an option to control whether PQ signature algorithms are advertised. Tests were added for the client side. Since Go 1.19, FIPS-only mode must remain disabled to enable PQ sigalgs. [pwu: Go 1.17: moved parsePublicKey changes from x509/x509.go to x509/parser.go] [pwu: Go 1.22.5: add eddilithium2 support, fix eddilithium3, by Bas in #176] Co-authored-by: Christopher Patton <chrispatton@gmail.com> Co-authored-by: Peter Wu <pwu@cloudflare.com>
Closes #175
We didn't move from eddilithium3 to eddilithium2 when dilithium3 was renamed to dilithium3.