[gnutls-devel] GnuTLS | Update liboqs version requirement to 0.11.0 to support final version of ML-KEM (!1883)

[Read-only notification of GnuTLS library development activities]

Geert Hendrickx commented: https://gitlab.com/gnutls/gnutls/-/merge_requests/1883#note_2151001954


@dueno This fixes SECP256R1MLKEM768:

```
--- lib/algorithms/groups.c
+++ lib/algorithms/groups.c
@@ -37,6 +37,13 @@
 	.pk = GNUTLS_PK_EXP_KYBER768,
 };
 
+static const gnutls_group_entry_st group_mlkem768 = {
+	.name = "MLKEM768",
+	.id = GNUTLS_GROUP_INVALID,
+	.curve = GNUTLS_ECC_CURVE_INVALID,
+	.pk = GNUTLS_PK_MLKEM768,
+};
+
 static const gnutls_group_entry_st group_x25519 = {
 	.name = "X25519",
 	.id = GNUTLS_GROUP_X25519,
@@ -187,9 +194,9 @@
 	{ .name = "SECP256R1-MLKEM768",
 	  .id = GNUTLS_GROUP_EXP_SECP256R1_MLKEM768,
 	  .curve = GNUTLS_ECC_CURVE_SECP256R1,
-	  .pk = GNUTLS_PK_MLKEM768,
+	  .pk = GNUTLS_PK_ECDSA,
 	  .tls_id = 0x11EB,
-	  .next = &group_secp256r1 },
+	  .next = &group_mlkem768 },
 	{ .name = "X25519-MLKEM768",
 	  .id = GNUTLS_GROUP_EXP_X25519_MLKEM768,
 	  .curve = GNUTLS_ECC_CURVE_X25519,
```

(tested against OpenSSL/oqs-provider)

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1883#note_2151001954
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20241009/ec20b2b7/attachment.html>