Skip to content

Conversation

bwesterb
Copy link
Member

@bwesterb bwesterb commented Jul 14, 2025

From draft-ietf-hpke-pq-01 implements:

  • The one-stage SHAKE-based KDFs in the key schedule.
  • Hybrid QSF-X25519-MLKEM768 KEM (a.k.a. X-Wing)
  • Pure ML-KEM-{512,768,1024} KEMs.

Does not include QSF-P384-MLKEM1024, QSF-P256-MLKEM768 (yet).

The test vectors pass.

From draft-ietf-hpke-pq-01 implements:

- The one-stage SHAKE-based KDFs in the key schedule.
- Hybrid QSF-X25519-MLKEM768 KEM (a.k.a. X-Wing)
- Pure ML-KEM-{512,768,1024} KEMs.

Does not include QSF-P384-MLKEM1024, QSF-P256-MLKEM768 (yet), nor
support for the one-stage KDFs in DHKEM.
@bwesterb bwesterb marked this pull request as draft July 14, 2025 19:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant