Re: X448 Key Exchange (RFC 8731)

[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

 



Hi Joseph,

To the best of my understanding, the only SSH iplementation supporting
ssh-ed448 is AsyncSSH.

OpenSSL has support for x448/ed448/curve448

LibreSSL does not yet have this support see
https://github.com/libressl-portable/portable/issues/552

I would hope that offering to do the X448 implementation for LibreSSL
and patches to OpenSSH to enable either OpenSSL or LibreSSL for X448
would be well received.

I am not an OpenSSH developer, so I cannot reasssure you that OpenSSH
will ever embrace X448.

For what it is worth, FIPS 186-5 includes both Edwards25519 and
Edwards448 as approved new elliptic curves. They have also approved a
deterministic ECDSA.

NIST seems to be plugging away at Post-Quantum Cryptography (PQC)
https://csrc.nist.gov/projects/post-quantum-cryptography I suspect they
have a long way to go yet before they standardize on anything.

	Be safe, stay healthy,
	-- Mark
_______________________________________________
openssh-unix-dev mailing list
openssh-unix-dev@xxxxxxxxxxx
https://lists.mindrot.org/mailman/listinfo/openssh-unix-dev



[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]

[Index of Archives]     [Linux ARM Kernel]     [Linux ARM]     [Linux Omap]     [Fedora ARM]     [IETF Annouce]     [Security]     [Bugtraq]     [Linux]     [Linux OMAP]     [Linux MIPS]     [ECOS]     [Asterisk Internet PBX]     [Linux API]

  Powered by Linux