Skip to content

Comments

Support post-quantum MLS ciphersuite#3454

Merged
pcapriotti merged 18 commits intomlsfrom
pcapriotti/mls-kyber-ciphersuite
Aug 24, 2023
Merged

Support post-quantum MLS ciphersuite#3454
pcapriotti merged 18 commits intomlsfrom
pcapriotti/mls-kyber-ciphersuite

Conversation

@pcapriotti
Copy link
Contributor

@pcapriotti pcapriotti commented Jul 26, 2023

This PR adds support for MLS ciphersuite MLS_128_X25519Kyber768Draft00_AES128GCM_SHA256_Ed25519.

https://wearezeta.atlassian.net/browse/WPB-2862

Checklist

  • Add a new entry in an appropriate subdirectory of changelog.d
  • Read and follow the PR guidelines

@zebot zebot added the ok-to-test Approved for running tests in CI, overrides not-ok-to-test if both labels exist label Jul 26, 2023
@pcapriotti pcapriotti force-pushed the pcapriotti/mls-kyber-ciphersuite branch 3 times, most recently from 10ffa51 to 4809c8d Compare July 31, 2023 12:39
@pcapriotti pcapriotti marked this pull request as ready for review July 31, 2023 12:39
@pcapriotti pcapriotti force-pushed the pcapriotti/mls-kyber-ciphersuite branch 2 times, most recently from 93dd16c to 4ce9a72 Compare August 1, 2023 13:46
@pcapriotti pcapriotti requested a review from smatting August 1, 2023 13:47
@pcapriotti pcapriotti force-pushed the pcapriotti/mls-kyber-ciphersuite branch 4 times, most recently from 3615452 to 034eeca Compare August 24, 2023 09:07
When constructing the query parameter corresponding to a ciphersuite in
an internal API, use the `ToHttpApiData` instance instead of converting
the ciphersuite into a bytestring manually.
@pcapriotti pcapriotti force-pushed the pcapriotti/mls-kyber-ciphersuite branch from 034eeca to 7932a1b Compare August 24, 2023 11:03
@pcapriotti pcapriotti merged commit 6491b5d into mls Aug 24, 2023
@pcapriotti pcapriotti deleted the pcapriotti/mls-kyber-ciphersuite branch August 24, 2023 11:40
pcapriotti added a commit that referenced this pull request Sep 27, 2023
* Add hybrid Kyber ciphersuite

* Fix ciphersuite tag parser

* Change conversation ciphersuite on first commit

* Save MLS keystore as part of a client's state

* Move invalid epoch test to new suite

* Rewrite unsupported proposal test

Instead of crafting an unsupported proposal in the haskell code, we now
use mls-test-cli to create a `ReInit` proposal.

* Forbid bare proposals at epoch 0

* Do not crash on invalid subconversation entries

* Index key packages by ciphersuite

* Add ciphersuite parameter to some tests

* Test key packages with multiple ciphersuites

* Test key package upload with unsupported CS

* Test commit with unsupported ciphersuite

* Update mls-test-cli to pq branch

* Add CHANGELOG entries

* Remove unused dependency

* Use `ToHttpApiData` instance of CipherSuite

When constructing the query parameter corresponding to a ciphersuite in
an internal API, use the `ToHttpApiData` instance instead of converting
the ciphersuite into a bytestring manually.

* Linter fixes
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ok-to-test Approved for running tests in CI, overrides not-ok-to-test if both labels exist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants