[openssh-commits] [openssh] 03/06: upstream: ssh: implement mlkem768brainpoolp256r1-sha256; ok djm@

[git+noreply at mindrot.org]

This is an automated email from the git hooks/post-receive script.

djm pushed a commit to branch master
in repository openssh.

commit ddbcd8ffdabeeb04955ea187739904a52f09c8c9
Author: markus at openbsd.org <markus at openbsd.org>
AuthorDate: Mon Jul 27 12:31:09 2026 +0000

    upstream: ssh: implement mlkem768brainpoolp256r1-sha256; ok djm@
    
    OpenBSD-Commit-ID: 99a304085f96d9a595b326c06694290c5612620c
---
 kex-names.c | 6 +++++-
 kex.h       | 3 ++-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/kex-names.c b/kex-names.c
index cb189431d..684e27e78 100644
--- a/kex-names.c
+++ b/kex-names.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: kex-names.c,v 1.8 2026/07/27 12:28:52 markus Exp $ */
+/* $OpenBSD: kex-names.c,v 1.9 2026/07/27 12:31:09 markus Exp $ */
 /*
  * Copyright (c) 2000, 2001 Markus Friedl.  All rights reserved.
  *
@@ -72,6 +72,10 @@ static const struct kexalg kexalgs[] = {
 # endif /* OPENSSL_HAS_NISTP521 */
 	{ KEX_MLKEM768NISTP256_SHA256, KEX_KEM_MLKEM768ECDH_SHA256,
 	    NID_X9_62_prime256v1, SSH_DIGEST_SHA256, KEX_IS_PQ },
+#  ifdef NID_brainpoolP256r1
+	{ KEX_MLKEM768BRAINPOOLP256R1_SHA256, KEX_KEM_MLKEM768ECDH_SHA256,
+	    NID_brainpoolP256r1, SSH_DIGEST_SHA256, KEX_IS_PQ },
+#  endif /* NID_brainpoolP256r1 */
 #endif /* OPENSSL_HAS_ECC */
 #endif /* WITH_OPENSSL */
 #if defined(HAVE_EVP_SHA256) || !defined(WITH_OPENSSL)
diff --git a/kex.h b/kex.h
index 8677f2709..1bd0b6224 100644
--- a/kex.h
+++ b/kex.h
@@ -1,4 +1,4 @@
-/* $OpenBSD: kex.h,v 1.131 2026/07/27 12:28:52 markus Exp $ */
+/* $OpenBSD: kex.h,v 1.132 2026/07/27 12:31:09 markus Exp $ */
 
 /*
  * Copyright (c) 2000, 2001 Markus Friedl.  All rights reserved.
@@ -66,6 +66,7 @@
 #define	KEX_SNTRUP761X25519_SHA512_OLD	"sntrup761x25519-sha512 at openssh.com"
 #define	KEX_MLKEM768X25519_SHA256	"mlkem768x25519-sha256"
 #define	KEX_MLKEM768NISTP256_SHA256	"mlkem768nistp256-sha256"
+#define	KEX_MLKEM768BRAINPOOLP256R1_SHA256 "mlkem768brainpoolp256r1-sha256"
 
 #define COMP_NONE	0
 #define COMP_DELAYED	2

-- 
To stop receiving notification emails like this one, please contact
djm at mindrot.org.