TLS with ML-KEM #2090
-
|
Does bouncycastle support creating TLS with ML-KEM as the kex algorithm? If so, can someone please guide me how to achieve so? |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment 4 replies
-
|
No @projjwalraj707 , BouncyCastle does not natively support TLS key exchange using ML-KEM (NIST’s standardized post-quantum algorithm). BouncyCastle TLS supports standard key exchanges like ECDHE, RSA, etc. But as an alternative, you can use Opend Quantum Safe's liboqs . |
Beta Was this translation helpful? Give feedback.
-
|
what is the purpose of org.bouncycastle.tls.crypto.impl.bc.BcTlsMLKem, then? |
Beta Was this translation helpful? Give feedback.
-
|
Very perceptive! Yes, the current BC beta supports ML-KEM, as will 1.81 which will be released this week. |
Beta Was this translation helpful? Give feedback.
-
|
@dghgit So the non-beta version 1.80 of BC does not support MLKEM TLS key exchange , right? |
Beta Was this translation helpful? Give feedback.
-
|
Also correct, in it's defense 1.80 did come out 14th Jan... it was a bit early to leap on the RFC at that point. |
Beta Was this translation helpful? Give feedback.
Very perceptive! Yes, the current BC beta supports ML-KEM, as will 1.81 which will be released this week.