Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
25 changes: 17 additions & 8 deletions src/content/docs/ssl/post-quantum-cryptography/pqc-support.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -14,28 +14,37 @@ The list below is for reference only. Responsibility for third-party software li
:::

## X25519MLKEM768
- Default for [Firefox 132+](https://www.mozilla.org/firefox/channel/desktop/) (Beta)
- Default for [Chrome 131+](https://www.google.com/chrome/beta/) (Beta)
- Default for [Firefox 132+](https://www.mozilla.org/firefox/) on Desktop
- For QUIC/HTTP3, use Firefox 135+
- Default for [Chrome 131+](https://www.google.com/chrome/)
- Default for [Edge 131+](https://microsoft.com/edge/)
- Default for recent [Opera](https://opera.com) and [Brave](https://brave.com)
- Cloudflare's [fork of Go](https://github.com/cloudflare/go)
- Default for [Go 1.24+](https://go.dev/doc/go1.24#cryptotlspkgcryptotls)
- [BoringSSL](https://boringssl.googlesource.com/boringssl/)
- [rustls-post-quantum 0.2.0+](https://crates.io/crates/rustls-post-quantum) ([blog](https://www.memorysafety.org/blog/pq-key-exchange/))
- Default for [rpxy 0.9.4+](https://github.com/junkurihara/rust-rpxy)
- [Open Quantum Safe](https://openquantumsafe.org/)
- C library: liboqs 0.10.0+
- OpenSSL provider: oqs-provider 0.7.0+
- [Caddy HTTP server](https://caddyserver.com/) nightly compiled with Go 1.24+ ([instructions](https://gist.github.com/bwesterb/2f7bfa7ae689de0d242b56ea3ecac424))
- [Botan C++ library 3.7.0+](https://botan.randombit.net/)

## X25519Kyber768Draft00

- Default for [Chrome 124-130](https://www.google.com/chrome/) on Desktop
- For older Chrome or on mobile, toggle _TLS 1.3 hybridized Kyber support_ (`enable-tls13-kyber`) in `chrome://flags`.
- Default for [Edge 124+](https://microsoft.com/edge/)
- Default for recent [Opera](https://opera.com) and [Brave](https://brave.com)
- [Firefox 124+](https://www.mozilla.org/firefox) if you turn on `security.tls.enable_kyber` in `about:config`
- Default for [Edge 124-130](https://microsoft.com/edge/)
- [Firefox 124-131](https://www.mozilla.org/firefox) if you turn on `security.tls.enable_kyber` in `about:config`
- For QUIC/HTTP3, use Firefox 128+ with `network.http.http3.enable_kyber`.
- Cloudflare's [fork of Go](https://github.com/cloudflare/go)
- Default for [Go 1.23](https://github.com/golang/go/issues/67061)
- [BoringSSL](https://boringssl.googlesource.com/boringssl/)
- Cloudflare's [fork of QUIC-go](https://github.com/cloudflare/qtls-pq)
- Goutam Tamvada's [fork of Firefox](https://github.com/xvzcf/firefox-pq-demos)
- [Open Quantum Safe](https://openquantumsafe.org/) C library
- [Zig 0.11.0+](https://ziglang.org/)
- [Open Quantum Safe](https://openquantumsafe.org/)
- C library: `liboqs` 0.5.0-0.12.0
- OpenSSL provider: `oqs-provider` 0.5.0-0.8.0
- [Zig 0.11.0-0.13.0](https://ziglang.org/)
- [nginx](https://www.nginx.org/) when [compiled with BoringSSL](https://mailman.nginx.org/pipermail/nginx/2023-August/NOISOYU3QTB2DGIYUBGF7CAMQHDI2QLT.html) ([guide](https://blog.centminmod.com/2023/10/03/2860/how-to-enable-cloudflare-post-quantum-x25519kyber768-key-exchange-support-in-centmin-mod-nginx/))
- [Caddy HTTP server](https://caddyserver.com/) nightly [compiled with Go 1.23+](https://gist.github.com/bwesterb/2f7bfa7ae689de0d242b56ea3ecac424)
- [Botan C++ library 3.2.0+](https://botan.randombit.net/) ([instructions](https://github.com/randombit/botan/discussions/3747))