Adding ECC KEM

[Simon Josefsson]

NIIBE Yutaka <gniibe at fsij.org> writes:

> Hello,
>
> In the task T6755, we introduced KEM API.  ML-KEM is added.
>
> Today, I'd like to propose adding ECC KEM implementation in the API.
> The intention of mine is use in gpg-agent to support PQC (task T7014).
>
> Attached is a patch adding ECC KEM for X25519.

Nice!  Is this intended to be compatible with HPKE ECC KEM?

https://www.rfc-editor.org/rfc/rfc9180.html#name-dh-based-kem-dhkem

Did you validate test vectors?

/Simon
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 255 bytes
Desc: not available
URL: <https://lists.gnupg.org/pipermail/gcrypt-devel/attachments/20240328/10931416/attachment.sig>