[Bug 3866] Support for ML-KEM and ECDH hybrids

bugzilla-daemon at mindrot.org bugzilla-daemon at mindrot.org
Tue Sep 23 18:43:12 AEST 2025


https://bugzilla.mindrot.org/show_bug.cgi?id=3866

Damien Miller <djm at mindrot.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |djm at mindrot.org

--- Comment #1 from Damien Miller <djm at mindrot.org> ---
Not at present. I believe that it is possible for hybrid ML-KEM/x25519
to be considered for FIPS certification, on the basis that ML-KEM is
certifiable and the combination is guaranteed to be no worse than
ML-KEM alone. Unfortunately I don't have a reference for this.

Given this, and the costs of maintaining a proliferation of algorithms,
we didn't plan on adding other hybrid ML-KEM variants.

-- 
You are receiving this mail because:
You are watching someone on the CC list of the bug.
You are watching the assignee of the bug.


More information about the openssh-bugs mailing list