Skip to contentSkip to conversation

Post-Quantum Algorithms for kernel crypto API

DISCUSSION Stephan Mueller 1 participant 1 message Oct 24, 2024 Crypto API

lore
Share & tools
lore
#0 lore raw

Hi,

with the release of leancrypto 1.1.0 [1], the following PQC algorithms are usable in the Linux kernel:

- ML-DSA and HashML-DSA

- ML-DSA and HashML-DSA hybrid with ED25519

- SLH-DSA and HashSLH-DSA

- ML-KEM

- ML-KEM hybrid with X25519

- BIKE (round 4 KEM member)

All algorithms can be used with their native leancrypto API as well as via the kernel crypto API where they are usable either as akcipher for signature operation or as KPP.

All algorithms are offered as C implementation offer accelerations for X86, ARMv8 and ARMv7.

All algorithm implementations (except BIKE, which is not offered by NIST so far) are validated against a NIST reference implementation by obtaining CAVP certificates as outlined in [2]. Those certificates are also obtained for the in-kernel binaries of the mentioned algorithms.

See [3] for the Linux kernel support.

[1] https://leancrypto.org/leancrypto/releases/leancrypto-1.1.0/index.html

[2] https://leancrypto.org/leancrypto/cavp_certificates/index.html

[3] https://leancrypto.org/leancrypto/linux_kernel/index.html

Ciao
Stephan