Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add QUIC support #261

Closed
baentsch opened this issue Jan 21, 2024 · 3 comments · Fixed by #291
Closed

Add QUIC support #261

baentsch opened this issue Jan 21, 2024 · 3 comments · Fixed by #291
Assignees
Labels
help wanted Asking for support from non-core team

Comments

@baentsch
Copy link
Member

As per quictls/quictls#14 PQC QUIC support got "mangled" in some upstream brouhaha. This issue is to suggest re-activating it, either by working on quictls/quictls#14 or by creating an OpenSSL 3.3-dev QUIC demo: At least client-side PQC-QUIC should work.

@pi-314159
Copy link
Member

Maybe we can support QUIC using OQS-BoringSSL

@baentsch
Copy link
Member Author

baentsch commented Mar 3, 2024

Maybe we can support QUIC using OQS-BoringSSL

Would sure be interesting!

@pi-314159
Copy link
Member

Confirmed this approach DOES work with nginx-1.25.4.

The only limitation is it doesn't support X448_* key exchange algorithms and composite & hybrid signature algorithms (as OQS-BoringSSL doesn't support them), but I don't think this is a problem. At least we support NIST-approved ML-* algorithms.

@Raytonne Raytonne mentioned this issue Apr 29, 2024
@baentsch baentsch added the help wanted Asking for support from non-core team label Jun 12, 2024
@pi-314159 pi-314159 self-assigned this Aug 19, 2024
@pi-314159 pi-314159 linked a pull request Aug 19, 2024 that will close this issue
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
help wanted Asking for support from non-core team
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants