search for: pqc

Hi all, Back in September 2018, I started a thread about implementing the X448 key exchange (see https://lists.mindrot.org/pipermail/openssh-unix-dev/2018-September/037183.html). In February 2020, RFC 8731 (formally specifying X448 in SSH) has been finalized: https://www.ietf.org/rfc/rfc8731.txt. I thought I'd start this conversation up again to see if the interest level has

...o! We are pleased to announce the availability of a new GnuPG release: version 2.5.0. This release is the first of a series of public testing releases eventually leading to a new stable version 2.6. The main features in the 2.6 series are improvements for 64 bit Windows and the introduction of a PQC algorithms. The 2.6 series will not differ a lot from 2.4 because the majority of changes are internal to make use of newer features from the supporting libraries. The risk of regressions is thus lower than it was with the introduction of 2.4 in 2021. What is GnuPG ============= The GNU Privac...

Hey there, I know XMSS support has been experimental for quite some time. Is there any push to change the status? Just curious more than anything else. Chris

I'm not sure if collision resistance is required for DH key derivation, but generally, SHA-1 is on its way out. If it's possible (if there's not a very large percentage of servers that do not support anything newer), it should be disabled.

...eased in or before 2001 and predate the final SSH RFCs. The support in question isn't necessary for RFC-compliant SSH implementations. Changes since OpenSSH 7.6 ========================= This is primarily a bugfix release. New Features ------------ * All: Add experimental support for PQC XMSS keys (Extended Hash- Based Signatures) based on the algorithm described in https://tools.ietf.org/html/draft-irtf-cfrg-xmss-hash-based-signatures-12 The XMSS signature code is experimental and not compiled in by default. * sshd(8): Add a "rdomain" criteria for the sshd_...

...;>iHQ2 at nZ723!a3QdL!@sGd+%Y(;2|$B!R}X`FcPE#n5U#yWH6 zO#6!$FG7H%f-W*!nE5-|(<#$15S5jcI)IvkY9d9ME=;>5x)4$sLsXupftaZSC|<}q zgX2Uz)nuZBfk4Gcbwh+2otT(F3jkd*9b2S3#cQJp2&Y=OOjlP|{h>pL8d7D^m54tk zI%N&9dGqE7w}4BWJ9kb8O^81ZvQEl3)@h0{7KslYJU9VTc$~`PrDzh%W-mmT9AL_g z8#ls0SWJS)dQWBsF9?`P`pQC!!h at n^A>Vcz49w at xpDUuO1_lHALY4t$y8jvbOonh4 zMX$y~bwb~-1OtO2x*8uJ*Q*3WC527(n+)5`_<@NXJ?$pgsiO2+&3?QTLpF3UckI}q z`x<124wxnr+*}~sD-<&bj0=;Klhpu%JJD`u6B$IQtX6yW><N9>)6;`if~)b%Y%glp z!58`Y`9AWSARFg)CNVQgX=!Pgp}TkQj=301rtZ;TAc&Gdr{S|~pxcIU?GVi^WkKc^ z2xjXc<d_Ez9B8m...

...ased in or before 2001 and predate the final SSH RFCs. The support in question isn't necessary for RFC- compliant SSH implementations. Changes since OpenSSH 7.6 ========================= This is primarily a bugfix release. New Features ------------ * All: Add experimental support for PQC XMSS keys (Extended Hash- Based Signatures) based on the algorithm described in https://tools.ietf.org/html/draft-irtf-cfrg-xmss-hash-based-signatures-12 The XMSS signature code is experimental and not compiled in by default. * sshd(8): Add a "rdomain" criteria for the sshd_...

...eased in or before 2001 and predate the final SSH RFCs. The support in question isn't necessary for RFC-compliant SSH implementations. Changes since OpenSSH 7.6 ========================= This is primarily a bugfix release. New Features ------------ * All: Add experimental support for PQC XMSS keys (Extended Hash- Based Signatures) based on the algorithm described in https://tools.ietf.org/html/draft-irtf-cfrg-xmss-hash-based-signatures-12 The XMSS signature code is experimental and not compiled in by default. * sshd(8): Add a "rdomain" criteria for the sshd_...

...! We are pleased to announce the availability of a new GnuPG release: version 2.5.1. This release is the second of a series of public testing releases eventually leading to a new stable version 2.6. The main features in the 2.6 series are improvements for 64 bit Windows and the introduction of a PQC encryption algorithm. The 2.6 series will not differ a lot from 2.4 because the majority of changes are internal to make use of newer features from the supporting libraries. What is GnuPG ============= The GNU Privacy Guard (GnuPG, GPG) is a complete and free implementation of the OpenPGP and...

...WEZ+PmV+`K?V2d~cf^O*p6U&3 zJd?vRdgIzv$Vq5XOaw6!d!N_qiVWBa(|Ct{h3yW~6I1tU+Lb2~toF7n@^I6h+cy5y z+n%YjZ`ND%fz|nCrPTz%?Qr6kvFq+2a(N2D_N7an8w;qLqC)A2TqIV9T-yT4l0xNZ ztceMO%kAmfbqBg9W-x4VS1sCAR7n9oF=EFJJ!eBa^2+19z2Ydy*{g<A1A;>B`gWV{ zVzXPhyuf?AD|8*({QIqKsJcd#POx_tSKk4DGP#mbke)vm52Xnp#59l7m;G-RA%PQC zWTSFI8-Ulo`btF+NI;+v|9#RAkPSWdan5yUboot012q)1_`KRKBD<;J4~7Jht=mzz zBd)L-zu-(p{QKTiWaJpiS(E;LWu{Qt@>A@TeApw`*Wv^FU)OpSW7^oEU-)4Vp}sC# z8K-W&g;h^_rt_F!78PKNUFSqx@%H6oiDBFI^(^P{Hk_H9;#TUUBOQ4^az1Q{-sz8V z<^`f@dt!vMJc}~zxDR%FLmonH3yOr76Xuc_HqGiy+=|2;j~iWct8aS)uz`7xzw`Fo zLcl=C<D^`6DI4|...

...<e|{fYE?4fUy8{r^Psg;{lkh784Lo1WW=9<t?BxEhZz1Mq5llI2AArFdZ-hFcUBf zfO&6$hA%<&`W%&CHXpD6un at 2auo$oefRSIe6yY+J=PZXALGw8)5Uxae73ix~p0 at _! zT9wmv2-gEPsJzuCmH%!F;64D_aBfw3o9%%6!S{g5uki7<4<q`BYFvlf5WVVAl{bA1 zy?I>a?REj6N9}ea+ylU3X!iudy()L_L$UoRb5P|So<jIE;IPU&K7;hLfFpqCkbWNY zqkv;bA4hlsa1!ws5S~)`HD>@X0?q<n0=x`(1 at J21HNfkDbAUGhZvx%|ybX8<@UAFN z_%-h#d>`-u`t%{{{Y2%z{|xXs;0wT)0Iay*e}(XC0Hk-_H{knD<$w4d at Po>){}JI& zfS)1B^Qy51X8MK;D!-vY<DEwVMgztG#%lZq at OB=Da6DiFXcGaG0I09?WQ0>dp9YwY z_zZ-Yu^TW;oo6CF3+dSi=OCPma2{Yj;tLQi1YqVmFVZ+cKW|u!^b){Q...