[gnutls-devel] GnuTLS | leancrypto: support leancrypto for post-quantum algorithms (!1925)

[Read-only notification of GnuTLS library development activities]

Stephan Mueller started a new discussion on lib/nettle/pk.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/1925#note_2311225276

 >  	if (type == LC_KYBER_UNKNOWN)
 >  		return gnutls_assert_val(GNUTLS_E_UNKNOWN_PK_ALGORITHM);
 >  
 > -	ret = lc_kyber_keypair(&pk, &sk, lc_seeded_rng, type);
 > +	ret = lc_kyber_keypair(&pk, &sk, &seeded_rng_for_key_ctx, type);

The definitions of the RNG look good. But there is one case that these calls do not cover (and FIPS made me hide it): ML-KEM enc requires a DRNG that generates the shared secret key.

To help with that, I just pushed another patch adding lc_rng_set_seeded to globally replace the seeded RNG with a provided one. I suggest you call that early on with the generate_for_key definition.

After doing that you may revert the changes for keygen. The change for siggen may stay as FIPS204 allows weaker RNGs, since this counters side channels „only“.

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1925#note_2311225276
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20250123/3abd4563/attachment.html>