David Hook
David Hook
So Kyber is not ML-KEM, although obviously one is a descendant of the other. I'll be interested to know what you hear back from OQS, you might want to try...
ML-KEM on Bouncy Castle has been tested against the ACVP demo system. I'd guess the LibOQS Kyber is probably based on an earlier revision and they're ML-KEM is based on...
We don't offer Kyber anymore (Kyber in the BCPQC provider is simply an alias for ML-KEM). ML-KEM is based on FIPS PUB 203 and has been tested against the ACVP...
I'd recommend moving to MLKEM only, the Kyber classes will be deleted. Also, decide whether you want to use the JCA or the low-level API, at the moment the code...
Ah, okay, that would sense. Sorry, I probably should have thought of that myself, it's good news though the two implementations are obviously in sync, I was starting to worry....
The problem was more that when the original submission went in there was no real tooling for dealing with multi-release jar. The new jar looks better, but it's still missing...
Okay, try https://downloads.bouncycastle.org/fips-java/osgi/bc-fips-2.0.0.jar this has the OSGI properties in the primary manifest. We couldn't add the extra files as a code change is required to ignore them in the checksum...
@gabrielandrade2 I've checked the jar, you shouldn't see that error, the checksum in the jar is correct. It sounds like there's something else going on, are you able to confirm...
Okay, this may need a bit more thought... would you email me at [email protected] about this? I think I'll need to you to try a couple of things out for...