Adding ECC KEM

Simon Josefsson simon at
Thu Mar 28 10:45:53 CET 2024

NIIBE Yutaka <gniibe at> writes:

> Hello,
> In the task T6755, we introduced KEM API.  ML-KEM is added.
> Today, I'd like to propose adding ECC KEM implementation in the API.
> The intention of mine is use in gpg-agent to support PQC (task T7014).
> Attached is a patch adding ECC KEM for X25519.

Nice!  Is this intended to be compatible with HPKE ECC KEM?

Did you validate test vectors?

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 255 bytes
Desc: not available
URL: <>

More information about the Gcrypt-devel mailing list