[gnutls-devel] GnuTLS | Update liboqs version requirement to 0.11.0 to support final version of ML-KEM (!1883)

[Read-only notification of GnuTLS library development activities]

Merge request https://gitlab.com/gnutls/gnutls/-/merge_requests/1883 was reviewed by Geert Hendrickx

--
  
Geert Hendrickx commented on a discussion on lib/ext/supported_groups.c: https://gitlab.com/gnutls/gnutls/-/merge_requests/1883#note_2183849092

 > -						} else if (IS_EC(group->pk)) {
 > +						} else if (IS_EC(group->pk) ||
 > +							   IS_KEM(group->pk)) {

X25519-MLKEM768 is still not prioritized over non-PQC ciphers.

With a priority string `PFS:-GROUP-ALL:+GROUP-X25519-MLKEM768:+GROUP-X25519:+GROUP-SECP256R1`, it puts X25519-MLKEM768 last, instead of first.  

With `PFS:-GROUP-ALL:+GROUP-X25519-KYBER768:+GROUP-X25519:+GROUP-SECP256R1` (the Kyber draft hybrid), X25519-KYBER768 is properly prioritized.


-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/-/merge_requests/1883
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20241029/b85f2a16/attachment-0001.html>