Hybrid PQC ECDH key exchange support such as OQSProvider/OpenSSL

Open kaiduanx opened this issue 9 months ago • 1 comments

Does BouncyCastle team plan to support hybrid PQC/ECDH key exchange? If yes, what is the time line? Also It would be nice to inter-operate with OQS provider/OpenSSL https://github.com/open-quantum-safe/oqs-provider.

I built a POC in 2022 with p521_kyber1024 and inter-operated with OpenSSL 1.1.1.

https://github.com/Open-QKD-Network/bc-java/compare/master...openqkd

Thanks,

/Kaiduan

Apr 06 '25 13:04 kaiduanx

Hi all,

I am very happy to share that I added P521_MLKEM1024 hybrid key exchange and made it inter-operateable with OQSProvider.

The code is at https://github.com/Open-QKD-Network/bc-java-2025/tree/openqkd

The JAVA test code is at

https://github.com/Open-QKD-Network/oqs-bouncycastle/blob/2025/javapqc/src/com/goodstartsoft/pqc/TLSServer.java

https://github.com/Open-QKD-Network/oqs-bouncycastle/blob/2025/javapqc/src/com/goodstartsoft/pqc/TLSClient.java

And the documentation is at

https://github.com/Open-QKD-Network/oqs-bouncycastle/blob/2025/oqsprovider-bouncycastle-p521_mlkem1024.note

How to contribute the code back?

Thanks,

/Kaiduan

Apr 26 '25 23:04 kaiduanx