diff --git a/src/content/docs/ssl/post-quantum-cryptography/pqc-support.mdx b/src/content/docs/ssl/post-quantum-cryptography/pqc-support.mdx index 28328db1604f65..6e07fbbcb7a7cc 100644 --- a/src/content/docs/ssl/post-quantum-cryptography/pqc-support.mdx +++ b/src/content/docs/ssl/post-quantum-cryptography/pqc-support.mdx @@ -14,28 +14,37 @@ The list below is for reference only. Responsibility for third-party software li ::: ## X25519MLKEM768 -- Default for [Firefox 132+](https://www.mozilla.org/firefox/channel/desktop/) (Beta) -- Default for [Chrome 131+](https://www.google.com/chrome/beta/) (Beta) +- Default for [Firefox 132+](https://www.mozilla.org/firefox/) on Desktop + - For QUIC/HTTP3, use Firefox 135+ +- Default for [Chrome 131+](https://www.google.com/chrome/) +- Default for [Edge 131+](https://microsoft.com/edge/) +- Default for recent [Opera](https://opera.com) and [Brave](https://brave.com) - Cloudflare's [fork of Go](https://github.com/cloudflare/go) +- Default for [Go 1.24+](https://go.dev/doc/go1.24#cryptotlspkgcryptotls) - [BoringSSL](https://boringssl.googlesource.com/boringssl/) - [rustls-post-quantum 0.2.0+](https://crates.io/crates/rustls-post-quantum) ([blog](https://www.memorysafety.org/blog/pq-key-exchange/)) - Default for [rpxy 0.9.4+](https://github.com/junkurihara/rust-rpxy) +- [Open Quantum Safe](https://openquantumsafe.org/) + - C library: liboqs 0.10.0+ + - OpenSSL provider: oqs-provider 0.7.0+ +- [Caddy HTTP server](https://caddyserver.com/) nightly compiled with Go 1.24+ ([instructions](https://gist.github.com/bwesterb/2f7bfa7ae689de0d242b56ea3ecac424)) +- [Botan C++ library 3.7.0+](https://botan.randombit.net/) ## X25519Kyber768Draft00 - Default for [Chrome 124-130](https://www.google.com/chrome/) on Desktop - For older Chrome or on mobile, toggle _TLS 1.3 hybridized Kyber support_ (`enable-tls13-kyber`) in `chrome://flags`. -- Default for [Edge 124+](https://microsoft.com/edge/) -- Default for recent [Opera](https://opera.com) and [Brave](https://brave.com) -- [Firefox 124+](https://www.mozilla.org/firefox) if you turn on `security.tls.enable_kyber` in `about:config` +- Default for [Edge 124-130](https://microsoft.com/edge/) +- [Firefox 124-131](https://www.mozilla.org/firefox) if you turn on `security.tls.enable_kyber` in `about:config` - For QUIC/HTTP3, use Firefox 128+ with `network.http.http3.enable_kyber`. - Cloudflare's [fork of Go](https://github.com/cloudflare/go) - Default for [Go 1.23](https://github.com/golang/go/issues/67061) - [BoringSSL](https://boringssl.googlesource.com/boringssl/) - Cloudflare's [fork of QUIC-go](https://github.com/cloudflare/qtls-pq) - Goutam Tamvada's [fork of Firefox](https://github.com/xvzcf/firefox-pq-demos) -- [Open Quantum Safe](https://openquantumsafe.org/) C library -- [Zig 0.11.0+](https://ziglang.org/) +- [Open Quantum Safe](https://openquantumsafe.org/) + - C library: `liboqs` 0.5.0-0.12.0 + - OpenSSL provider: `oqs-provider` 0.5.0-0.8.0 +- [Zig 0.11.0-0.13.0](https://ziglang.org/) - [nginx](https://www.nginx.org/) when [compiled with BoringSSL](https://mailman.nginx.org/pipermail/nginx/2023-August/NOISOYU3QTB2DGIYUBGF7CAMQHDI2QLT.html) ([guide](https://blog.centminmod.com/2023/10/03/2860/how-to-enable-cloudflare-post-quantum-x25519kyber768-key-exchange-support-in-centmin-mod-nginx/)) -- [Caddy HTTP server](https://caddyserver.com/) nightly [compiled with Go 1.23+](https://gist.github.com/bwesterb/2f7bfa7ae689de0d242b56ea3ecac424) - [Botan C++ library 3.2.0+](https://botan.randombit.net/) ([instructions](https://github.com/randombit/botan/discussions/3747))