-
Notifications
You must be signed in to change notification settings - Fork 23
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
PQ KEMs behind a feature flag #221
Conversation
Codecov ReportAttention: Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #221 +/- ##
==========================================
- Coverage 90.19% 90.16% -0.04%
==========================================
Files 177 180 +3
Lines 31808 32317 +509
==========================================
+ Hits 28690 29139 +449
- Misses 3118 3178 +60 ☔ View full report in Codecov by Sentry. |
Looks like the entire kem combiner is uncovered code, lets fix that |
Looking. It's weird, I'm sure I tested it... |
f2c0bf9
to
551a63e
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just a couple of questions.
Co-authored-by: Stephane Raux <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Thank you!
* wip * Replace round3 submission by ml-kem * Fixup * Rename kyber to ml-kem * Rename kyber to ml-kem * Fixup * Fixup * Fix? * Bump versions * wip * wip * Update aws-lc version. Support Kyber with FIPS * Add tests for combiner * Fixup * Fixup * Fixup * Fixup * Fix warnings, not build FIPS and non-FIPS at the same time * Fixup * Fixup * Fixup :( * Fix key size * Apply suggestions from code review Co-authored-by: Stephane Raux <[email protected]> --------- Co-authored-by: Marta Mularczyk <[email protected]> Co-authored-by: Stephane Raux <[email protected]>
Implements 2 PQ replacements of DH-KEM
Call outs
DH-related functions were only copied
Safety
I did run mls-rs-crypto-aws-lc tests with address sanitizer and stared at the code very long. Unfortunately aws-lc-rs does not currently support
Testing
I would love to run some tests from the XWing RFC but unfortunately they seem to be incompatible with ML-KEM from AWS-LC and they don't contain intermediate values I could use to only test the combiner. We could generate test vectors based on the XWing implementation in the future.
By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 and MIT license.