diff options
| author | djm@openbsd.org <djm@openbsd.org> | 2024-09-02 14:13:56 +0200 |
|---|---|---|
| committer | Damien Miller <djm@mindrot.org> | 2024-09-02 14:32:44 +0200 |
| commit | f68312eb593943127b39ba79a4d7fa438c34c153 (patch) | |
| tree | 10f8cb337068dfd8388dccca162b049e892f850f /Makefile.in | |
| parent | Don't skip audit before exitting cleanup_exit (diff) | |
| download | openssh-f68312eb593943127b39ba79a4d7fa438c34c153.tar.xz openssh-f68312eb593943127b39ba79a4d7fa438c34c153.zip | |
upstream: Add experimental support for hybrid post-quantum key exchange
ML-KEM768 with ECDH/X25519 from the Internet-draft:
https://datatracker.ietf.org/doc/html/draft-kampanakis-curdle-ssh-pq-ke-03
This is based on previous patches from markus@ but adapted to use the
final FIPS203 standard ML-KEM using a formally-verified implementation
from libcrux.
Note this key exchange method is still a draft and thus subject to
change. It is therefore disabled by default; set MLKEM=yes to build it.
We're making it available now to make it easy for other SSH
implementations to test against it.
ok markus@ deraadt@
OpenBSD-Commit-ID: 02a8730a570b63fa8acd9913ec66353735dea42c
Diffstat (limited to 'Makefile.in')
| -rw-r--r-- | Makefile.in | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/Makefile.in b/Makefile.in index e1b77ebc6..4243006b0 100644 --- a/Makefile.in +++ b/Makefile.in @@ -111,7 +111,7 @@ LIBSSH_OBJS=${LIBOPENSSH_OBJS} \ hmac.o ed25519.o hash.o \ kex.o kex-names.o kexdh.o kexgex.o kexecdh.o kexc25519.o \ kexgexc.o kexgexs.o \ - kexsntrup761x25519.o sntrup761.o kexgen.o \ + kexsntrup761x25519.o kexmlkem768x25519.o sntrup761.o kexgen.o \ sftp-realpath.o platform-pledge.o platform-tracing.o platform-misc.o \ sshbuf-io.o |