Skip to content

Implement support for post-quantum certificate signing algorithms #113

@chucklever

Description

@chucklever

This requires some changes to the GnuTLS priority string, which controls the selection of both the certificate signing algorithms and the enc/dec algorithms. tlshd's priority string contains "SECURE-256", which disables the PQ algorithms.

In addition, TLS servers will need to have two certificates; one signed using the traditional RSA signing algorithm, and one signed using a PQ signing algorithm.

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions